Tag: Cyber Alerts 2024

Threat actors are employing sophisticated tactics to steal employees' credentials by exploiting communication related to pension, salary and performance

Ivanti has disclosed two zero-day vulnerabilities, CVE-2023-46805 and CVE-2024-21887, affecting its Connect Secure and Policy Secure gateways

A critical vulnerability has been discovered in the AI Engine plugin for WordPress, affecting its free version with over 50,000 active installations.

Cisco has issued patches for a severe security vulnerability in its Unity Connection software, potentially granting remote root privileges on unpatched devices.

A financially motivated group of Turkish hackers, identified in the RE#TURGENCE campaign, has been systematically targeting Microsoft SQL (MSSQL) servers.

A critical blind SQL injection vulnerability has been discovered in Cacti, a widely-used network monitoring, performance, and fault management framework

Water Curupira, an active threat actor, has been identified distributing the PikaBot loader malware through spam campaigns in 2023.

These ransomware groups employ the double extortion tactic, encrypting systems and threatening to leak stolen information unless a ransom is paid.

Microsoft has released its Patch Tuesday updates for January 2024, addressing a total of 48 security flaws across its software.

The NIST National Vulnerability Database has uncovered a significant vulnerability, CVE-2024-21663, within Discord-Recon,