Author: admin

Threat Intel Roundup: BreachForum, Vidar, Git, QNAP

Technical Summary BreachForum, a notorious online platform for trading stolen data, has been seized by the United States Federal Bureau of Investigation (FBI). The forum’s landing page now displays a notice confirming the FBI’s control and shows images of the administrators’ Telegram profile pictures behind bars. This seizure disrupts a key hub for cybercriminals and

More

Threat Intel Roundup: DARKGATE, TunnelVision, FIN7, OffensiveCon

Week in Overview(7 May-14 May) – 2024 FIN7 Campaign: CVE-2023-46012: TunnelVision Attack: 🚨 Vulnerability of the Week CVE-2024-3661, known as the TunnelVision attack, has emerged as a significant concern in the realm of cybersecurity, particularly for users of the Mullvad VPN app. This exploit shares striking similarities with its predecessor, TunnelCrack LocalNet (CVE-2023-36672 and CVE-2023-35838),

More

Threat Intel Roundup: Android, APT28, GHES, AMSI

The CVE-2024-0024 vulnerability affects Google Maps, allowing users to create fake locations and businesses through the platform’s interface. This vulnerability has been exploited by individuals engaging in digital vandalism, particularly targeting the properties of high-profile figures such as Drake. By adding derogatory labels and references to ongoing disputes, users have effectively defaced the mapping service,

More
Threat Intel Roundup: Cisco, Virtualbox, SSLoad, V8

Threat Intel Roundup: Cisco, Virtualbox, SSLoad, V8

Week in Overview(16 Apr-23 Apr) – 2024 Technical Summary 4. CVE-2024-3832: 5. CVE-2024-21111 in Oracle VirtualBox: 🚨 Vulnerability of the Week The Cisco C195 is a robust Email Security Appliance (ESA) device designed to function as an SMTP gateway, enhancing network security by managing email traffic at the perimeter. Like other appliances in Cisco’s range,

More