Search results

A number of new downloader and remote access trojans (RAT) have been observed in campaigns globally. All five identified tools are believed to have been created by the Hidden Cobra advanced persistent threat group for use in their own campaigns.

Researchers have disclosed details of the Kr00k vulnerability, affecting Wi-Fi Protected Access II (WPA2, IEEE 802.11i-2004) wireless security protocol and how it’s implemented in Broadcom and Cypress wireless chipsets. It can be exploited to decrypt communications sent to and from affected systems.

GE Healthcare has released details of a vulnerability affecting a number of their ultrasound imaging systems. They claim a user with physical access could exploit this vulnerability to gain control of an affected system.

Sudo have released a security update to address a vulnerability in sudo. An attacker could exploit this vulnerability to take control of an affected system.

First observed in 2016, Nuke is a ransomware tool targeting organisations globally.

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system.

Mozart is a backdoor that targets Microsoft Windows and uses the DNS protocol for command and control (C2) communication.

Jenkins has released a security update to address vulnerabilities in Jenkins. An attacker could exploit some of these vulnerabilities to execute arbitrary code execution.

Netwalker (also known as Kazakavkovkiz or KoKo) is a fileless ransomware-as-a-service tool, mainly targeted at enterprise targets in Western Europe and the USA. Previously called Mailto, the name was changed when the creators began offering its services to affiliate users via dark web sites...

Dell has released a security advisory to address a vulnerability in Dell SupportAssist software. An attacker could exploit this vulnerability to access sensitive information.