⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Mandiant responded to a breach of a KnowledgeDeliver Learning Management System, identifying a critical unauthenticated remote code execution vulnerability. The issue stems from identical hardcoded ASP.NET machine keys shared across customer deployments, allowing attackers to craft malicious ViewState payloads.
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to.
Threat actors created fake FIFA websites to target soccer fans looking for World Cup tickets and merchandise. The phishing campaign relies on brand impersonation and seasonal event lures to steal credentials and payment information.
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to.
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data
Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware. Void Dokkaebi, a North Korea-aligned intrusion set, has updated its information-stealing malware, InvisibleFerret, shifting its delivery format to evade script-based detections.