Click Here Podcast

The Record-Centered.svg

Home

Subscribe to Cyber Daily®

CVE-2023-50164

Vulnerability CVE-2023-50164 is a critical remote code execution flaw in Apache Struts 2 that allows attackers to manipulate file upload parameters and upload malicious files, potentially leading to remote code execution.

LogoFAIL

LogoFAIL is a critical vulnerability that allows attackers to exploit image parsing libraries in UEFI firmware, compromising the security of Windows and Linux devices during the boot process.

CVE-2023-41265

Vulnerability CVE-2023-41265 is a critical HTTP request tunneling flaw in Qlik Sense that allows remote attackers to elevate privileges and execute requests on the backend server.

LockBit Gang

LockBit ransomware group, known for exploiting the critical Citrix Bleed vulnerability, has been actively targeting various organizations and claiming responsibility for cyberattacks, including those on India's National Aerospace Laboratories and ICBC, China's largest bank.

CVE-2023-41266

Vulnerability CVE-2023-41266 is a path traversal bug in Qlik Sense that allows remote attackers to send unauthorized HTTP requests.

CVE-2023-23397

The Russian APT28 group, also known as Fancy Bear or Strontium, has been actively exploiting the critical vulnerability CVE-2023-23397 in Microsoft Outlook to hijack Exchange email accounts and gain unauthorized access to sensitive information.

CVE-2023-4966

LockBit ransomware affiliates are actively exploiting the Citrix Bleed vulnerability (CVE-2023-4966) to breach systems, steal data, and encrypt files in large organizations.

ALPHV Ransomware Group

The notorious cybercriminal group ALPHV, also known as BlackCat, has been responsible for multiple high-profile ransomware attacks targeting various organizations worldwide.

BlueCharlie

The international law enforcement group has identified two members of the cyber hacker group Callisto, also known as BlueCharlie, responsible for spear-phishing campaigns and leaking sensitive information.

BlueDelta

BlueDelta, also known as APT28, is a cyber attacker group that has been recently active.

Cyber Av3ngers

The Iran-backed hacker group Cyber Av3ngers has been targeting water facilities in the United States, compromising systems and defacing websites, but there is no evidence of ransomware being installed so far.

Kimsuky

Kimsuky, also known as APT43, is a prolific cyber espionage group primarily targeting governments, nuclear organizations, and foreign relations entities to collect intelligence in support of North Korea's interests.

Krasue

A new Linux Remote Access Trojan (RAT) named Krasue has been targeting telecommunications companies in Thailand, using a rootkit and likely created by the same authors as the XorDdos Trojan.

Hunters International

Hunters International is a ransomware group that has been targeting various organizations worldwide, including shipbuilders, healthcare centers, and other industries.

Lockbit 3.0

LockBit 3.0 ransomware affiliates have been exploiting the Citrix Bleed vulnerability (CVE-2023-4966) to breach and encrypt files in various organizations, including Boeing and the Egyptian e-payment provider Fawry.

Raccoon Stealer

The Raccoon Stealer malware has been actively used in cyberattacks targeting organizations in the Middle East, Africa, and the United States, with multiple samples indicating ongoing development and adaptation by its authors.

Emotet

Emotet, one of the most prominent trojans, was disrupted by a coordinated international operation led by EUROPOL.

Agent Tesla

Agent Tesla is a remote access trojan (RAT) that has been spreading through phishing emails, exploiting vulnerabilities such as CVE-2017-11882 and using unique tactics like ZPAQ compression to steal sensitive information from email clients and web browsers.

FBI explains how companies can delay SEC cyber incident disclosures

UK sanctions nine linked to cyber trafficking in Southeast Asia

CISA adds Qlik bugs to exploited vulnerabilities catalog

Latest News

Briefs