2025-01-10 Post a Comment

Ivanti warns of new Connect Secure flaw used in zero-day attacks

By Lawrence Abrams Ivanti is warning that hackers exploited a Connect Secure remote code execution vulnerability tracked as CVE-2025-0282 in zero-day attacks to install malware on appliances. The company says it became aware of the vulnerabilities after the Ivanti Integrity Checker Tool (ICT) detected malicious activity on customers’ appliances. Ivanti launched an investigation and confirmed that threat actors were actively exploiting CVE-2025-0282 as a zero-day. CVE-2025-0282 is a critical (9.0) stack-based buffer […]

alt=1. Windows 10 security update for April 2019, enhancing system protection and addressing vulnerabilities.

Cyber security

2024-08-28 Post a Comment

Windows Downdate tool lets you ‘unpatch’ Windows systems

By Sergiu Gatlan SafeBreach security researcher Alon Leviev has released his Windows Downdate tool, which can be used for downgrade attacks that reintroduce old vulnerabilities in up-to-date Windows 10, Windows 11, and Windows Server systems. In such attacks, threat actors force up-to-date targeted devices to revert to older software versions, thus reintroducing security vulnerabilities that can be exploited to compromise the system. Windows Downdate is available as an open-source Python-based program and […]

alt=1. A red triangle featuring a prominent hook attached to its base, symbolizing strength and stability.

Cyber security

2024-08-28 Post a Comment

Microsoft Sway abused in massive QR code phishing campaign

By Sergiu Gatlan ?A massive QR code phishing campaign abused Microsoft Sway, a cloud-based tool for creating online presentations, to host landing pages to trick Microsoft 365 users into handing over their credentials. The attacks were spotted by Netskope Threat Labs in July 2024 after detecting a dramatic 2,000-fold increase in attacks exploiting Microsoft Sway to host phishing pages that steal Microsoft 365 credentials. This surge sharply contrasts the minimal […]

alt=1. A man wearing a hoodie with bright, glowing eyes, creating an intense and mysterious atmosphere.

Cyber security

2024-08-28 Post a Comment

Stealthy ‘sedexp’ Linux malware evaded detection for two years

By Bill Toulas A stealthy Linux malware named ‘sedexp’ has been evading detection since 2022 by using a persistence technique not yet included in the MITRE ATT&CK framework. The malware was discovered by risk management firm Stroz Friedberg, an Aon Insurance company, and enables its operators to create reverse shells for remote access and to further the the attack. “At the time of this writing, the persistence technique used (udev […]

alt=1. A person holds a credit card beside a smart door lock, illustrating modern security and payment technology integration.

Cyber security

2024-08-28 Post a Comment

RFID cards could turn into a global security mess after discovery of hardware backdoor

Poking at bad encryption practices to discover some outrageous, unexpected issues By Alfonso Maruccia August 26, 2024 at 3:16 PM WTF?! Chinese-made chips used in popular contactless cards contain hardware backdoors that are easy to exploit. These chips are compatible with the proprietary Mifare protocol developed by Philips spin-off NXP Semiconductors and are inherently “intrinsically broken,” regardless of the card’s brand. Security researchers at Quarkslab have discovered a backdoor in millions of RFID cards […]

Ivanti warns of new Connect Secure flaw used in zero-day attacks

Like this:

Windows Downdate tool lets you ‘unpatch’ Windows systems

Like this:

Microsoft Sway abused in massive QR code phishing campaign

Like this:

Stealthy ‘sedexp’ Linux malware evaded detection for two years

Like this:

RFID cards could turn into a global security mess after discovery of hardware backdoor

Like this:

Ivanti warns of new Connect Secure flaw used in zero-day attacks

Please Share this:

Like this:

Windows Downdate tool lets you ‘unpatch’ Windows systems

Please Share this:

Like this:

Microsoft Sway abused in massive QR code phishing campaign

Please Share this:

Like this:

Stealthy ‘sedexp’ Linux malware evaded detection for two years

Please Share this:

Like this:

RFID cards could turn into a global security mess after discovery of hardware backdoor

Please Share this:

Like this: