Plato Data Intelligence.
Vertical Search & Ai.

Tag: privilege escalation

DarkGate Operator Uses Skype, Teams Messages to Distribute Malware

A threat actor is using compromised Skype and Microsoft Teams accounts to distribute DarkGate, a troublesome loader associated with multiple malicious activities, including information...

Microsoft: China’s Behind Atlassian Confluence Attacks; PoCs Available

A China-sponsored advanced persistent threat (APT) tracked as Storm-0062 is responsible for the in-the-wild exploitation of the recently disclosed critical bug in Atlassian Confluence...

‘Looney Tunables’ Linux Flaw Sees Snowballing Proof-of-Concept Exploits

Proof-of-concept (PoC) exploits for the security flaw CVE-2023-4911, dubbed Looney Tunables, have already been developed, following last week's disclosure of the critical buffer overflow...

Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit

A critical privilege-escalation vulnerability in Atlassian Confluence Server and Confluence Data Center has been disclosed, with evidence of exploitation in the wild as a...

Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

An Israeli surveillanceware company used the three Apple zero-day vulnerabilities disclosed last week to develop an exploit chain for iPhones, and a Chrome zero-day...

Researchers Release Details of New RCE Exploit Chain for SharePoint

Researchers who discovered two critical vulnerabilities in Microsoft SharePoint Server have released details of an exploit they developed that chains the two vulnerabilities together...

Payment Card-Skimming Campaign Now Targeting Websites in North America

A Chinese-speaking threat actor that has been skimming credit card numbers off ecommerce sites and point-of-sale service providers in the Asia/Pacific region for more...

Microsoft Flushes Out ‘Ncurses’ Gremlins

A widely used programming library called "ncurses" is infested by malicious gremlins — in the form of multiple memory corruption vulnerabilities that give attackers a...

Microsoft Patches a Pair of Actively Exploited Zero-Days

Microsoft addressed five critical security vulnerabilities in its September Patch Tuesday update, along with two "important"-rated zero-days under active attack in the wild.In total,...

Sponsor with batch-filed whiskers: Ballistic Bobcat’s scan and strike backdoor

ESET researchers discovered a Ballistic Bobcat campaign targeting various entities in Brazil, Israel, and the United Arab Emirates, using a novel backdoor we have...

China Unleashes Flax Typhoon APT to Live Off the Land, Microsoft Warns

A China-backed advanced persistent threat (APT) group dubbed Flax Typhoon has installed a web of persistent, long-term infections inside dozens of Taiwanese organizations, likely to...

Ransomware With an Identity Crisis Targets Small Businesses, Individuals

Researchers have identified a new strain of ransomware that dates back to 2019 and targets individuals and small businesses, demanding small ransoms from each...

Latest Intelligence

spot_img
spot_img
spot_img

Chat with us

Hi there! How can I help you?