TechKranti

Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw Cloudflare has reported mitigating thousands of hyper-volumetric HTTP distributed denial-of-service (DDoS) attacks that exploited the recently disclosed HTTP/2 Rapid Reset flaw, with 89 of

1Password Becomes Latest Victim of Okta Customer Service Breach Password manager 1Password has become the second publicized victim of Okta’s recent customer support breach. Okta, a cloud-based identity and access management (IAM) service, disclosed that

Cisco patches IOS XE vulnerabilities actively being exploited Cisco has released patches for two vulnerabilities, CVE-2023-20198 and CVE-2023-20273, that were actively exploited by hackers to compromise IOS XE devices. The vulnerabilities allow remote attackers to

‘Grandoreiro’ Trojan Targets Global Banking Customers The Brazilian banking malware known as ‘Grandoreiro’ has expanded its campaign to target customers in Spain, in addition to Brazil and Mexico. The malware is delivered through phishing emails

Iranian Hacker Group ‘CyberAvengers’ Claims Responsibility for Power Outages in Israel The Iranian hacker collective known as ‘CyberAvengers’ has claimed responsibility for recent power outages in Yavneh, Israel. While Israeli authorities have not confirmed a

Iran-Linked APT34 Targets Saudis with Menorah Malware APT34, a notorious advanced persistent threat group linked to Iran, is conducting a phishing campaign targeting users in the Middle East. The campaign utilizes a custom tool called

New Android Malware ‘Zanubis’ Disguises Itself as a Governmental Organization A recent study by Securelist reveals the emergence of new versions of Lumma stealer and Zanubis Android banking malware. ASMCrypt, a cryptor/loader variant associated with

Budworm APT Group Strikes Again with Enhanced Malware Toolkit The Budworm APT group has been identified using an updated version of their SysUpdate backdoor to target a Middle Eastern telecommunications organization and an Asian government.

WordPress Simple Membership Plugin Vulnerabilities Enable Account Hijacking Two security vulnerabilities have been discovered in the Simple Membership plugin for WordPress, allowing for privilege escalation and account takeover. The first vulnerability allows unauthenticated users to