The pentester's Swiss knife

CVE-2024-1403

CVE-2024-1403: The Threat to Progress Software Users

In the realm of cybersecurity, a critical vulnerability has been discovered affecting Progress Software products, specifically the OpenEdge Authentication Gateway and AdminServer. This flaw poses a significant threat to authentication mechanisms, potentially allowing malefactors...

GMX Hack Iran Cyber Threat, US Cyberattack Warning Pegasus spyware Jordan

French Government Websites Crippled in DDoS Attack

Several French governmental organizations have experienced cyberattacks of unprecedented intensity, as reported by the country’s Prime Minister’s office on March 11th. These attacks commenced on the evening of March 10th, and while their exact...

Inception Attack

Meta Quest VR Hack: “Inception Attack” Exposed

A new study by the University of Chicago has uncovered a vulnerability within the Meta Quest VR system that allows malefactors to hijack user devices, pilfer confidential information, and manipulate social interactions using generative...

Solana Exploit Houken TeleMessage TM SGNL Mobile Security Salt Typhoon Kansas State University cyberattack

BianLian Exploits TeamCity Flaws for Ransomware

GuidePoint Security, a cybersecurity firm, has uncovered that the BianLian group is exploiting vulnerabilities in the JetBrains TeamCity software to carry out ransomware attacks. Experts have documented a sequence of attacks initiated through the...

CVE-2024-1220

Moxa NPort Bug: Remote Code Execution Possible

Moxa expressed its gratitude to the experts at Positive Technologies for identifying a dangerous vulnerability in the NPort series of wireless industrial converters. Classified as CVE-2024-1220, this vulnerability was rated as high risk with...

CVE-2024-21762

150,000 Devices at Risk: Fortinet Bug Exploited

A critical vulnerability in Fortinet’s security systems has impacted approximately 150,000 devices worldwide. The vulnerability, CVE-2024-21762 (CVSS score: 9.8), is characterized as an out-of-bounds write issue in FortiOS, enabling an unauthenticated attacker to execute...

Xbox future

Peter Moore: Inside Gaming’s Evolving Landscape

In a recent interview with IGN, Peter Moore, a former executive at Xbox and EA, delved into the current market dynamics of the console gaming industry and offered insights into its future trajectory. Moore,...

TA4903

Fake Government Emails: TA4903 Targets Businesses

A report by the leading company Proofpoint has unveiled a sophisticated cyber fraud scheme orchestrated by the hacker group TA4903. This gang specializes in Business Email Compromise (BEC) attacks and has, over the past...

Snake Python infostealer

Beware! Snake Infostealer Targets Facebook Users

Cybereason has identified a new malware variant named Snake, which proliferates through Facebook messages. This Python-written infostealer is designed to pilfer confidential user data. The stolen data are transmitted across various platforms, including Discord,...