Tag: Cyber Alerts 2023

A newly discovered zero-day flaw, CVE-2023-51467, poses a critical security risk within the open-source ERP system, Apache OfBiz.

A new Government Accountability Office report underscores the alarming prevalence of critical vulnerabilities within medical devices across the United States.

The Bandook malware, evolving since its 2007 inception, has recently surfaced in a new variant distributed via a PDF file.

The Bandook malware, evolving since its 2007 inception, has recently surfaced in a new variant distributed via a PDF file.

GitHub has issued a warning to its users, notifying them that starting January 19th, 2024, they must enable two-factor authentication (2FA) on their accounts.

Hackers target Linux SSH servers for access due to weak passwords and vulnerabilities, risking unauthorized entry to critical services.

New phishing employs Word docs for Nim-based backdoor malware. Netskope notes the challenge posed by less common languages for investigations.

India's government and defense face 'Operation RusticWeb,' a phishing threat using Rust-based malware for intel. SEQRITE spotted this in Oct '23.

The notorious Carbanak malware, initially recognized for its role in banking attacks, has reemerged with a fresh approach, now incorporating ransomware tactics.

McAfee's Mobile Research finds Xamalicious, a savvy Android backdoor leveraging Xamarin, employing social engineering for payload downloads.