Author: Amey Anekar

Zero-Day Vulnerability in Microsoft Exchange Servers Potentially Affecting up to 97,000 Microsoft Exchange Servers A recent zero-day vulnerability, CVE-2024-21410, potentially affects up to 97,000 Microsoft Exchange servers, enabling privilege escalation and pass-the-hash attacks. Microsoft has

Iranian Hackers Target Middle East Policy Experts with BASICSTAR Backdoor Charming Kitten, a threat actor linked to Iran, has targeted Middle East policy experts with a new backdoor named BASICSTAR through phishing attacks posing as

Rise in PDF Threats: Malware Spread Through PDFs on the Rise, HP Report Finds A new report by HP Wolf Security reveals a 7% increase in PDF threats in Q4 2023 compared to Q1 of

FBI Neutralizes APT28-Controlled Router Botnet The FBI dismantled a botnet comprising hundreds of Ubiquiti Edge OS routers controlled by APT28, a Russian cyberespionage group, by leveraging the Moobot malware. This operation blocked the group’s remote

APT Groups Utilize ChatGPT for Cyber Operations Microsoft has detected APTs from countries like Russia, China, North Korea, and Iran using ChatGPT to automate tasks such as vulnerability research, malware scripting, and target reconnaissance. These

Microsoft’s Critical Security Updates and Active Exploits Alert Microsoft has released a significant batch of security updates addressing 72 vulnerabilities within the Windows ecosystem, highlighting the urgent need to mitigate risks associated with remote code

Fortinet and Ivanti VPN Customers Face Critical Security Vulnerabilities Fortinet and Ivanti have disclosed critical vulnerabilities in their VPN technologies that are under active attack and require immediate action from security teams. Fortinet has disclosed

Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw Cloudflare has reported mitigating thousands of hyper-volumetric HTTP distributed denial-of-service (DDoS) attacks that exploited the recently disclosed HTTP/2 Rapid Reset flaw, with 89 of

1Password Becomes Latest Victim of Okta Customer Service Breach Password manager 1Password has become the second publicized victim of Okta’s recent customer support breach. Okta, a cloud-based identity and access management (IAM) service, disclosed that