SUMMARY The threat actor group Storm-0501 has been launching ransomware attacks against government, manufacturing, transportation, and law...
Threat Advisories
HPE Aruba Access Points Vulnerable to RCE
SUMMARY Hewlett Packard Enterprise's (HPE) Aruba Networking recently patched three critical vulnerabilities in its Aruba Access Points’...
Critical VMWare vCenter Server Flaw (CVE-2024-38812)
Summary Broadcom released a critical security update for VMware vCenter Server to address a high-severity vulnerability that could allow...
Microsoft Zero-Days and Related Vulnerabilities
SUMMARY Microsoft's September 2024 Patch Tuesday release addresses 79 security vulnerabilities, including three actively exploited zero-day...
Hadooken Malware Targeting Oracle WebLogic
SUMMARY A new malware campaign was recently identified that targets Linux environments, focusing on crypto-mining and botnet malware...
Cisco Smart Licensing Utility Vulnerability
SUMMARY Cisco recently addressed two critical vulnerabilities (CVE-2024-20439 and CVE-2024-20440) in the Cisco Smart Licensing Utility (CSLU),...
SonicWall Firewall Vulnerability
SUMMARY SonicWall’s self-disclosed critical security vulnerability in SonicOS is now under active exploitation. Available updates should be...
Cicada3301 Ransomware Targeting Linux-Based ESXi Servers
SUMMARY A ransomware-as-a-service (RaaS) operation is posing as the legitimate Cicada 3301 organization and has already listed 19 victims on...
Voldemort Malware Exploiting Google Sheets
SUMMARY A new malware campaign was recently identified, which leverages Google Sheets as a command-and-control (C2) platform. This campaign...
Critical Vulnerability in SonicWall Firewalls Allows Unauthorized Access
Summary SonicWall issued patches for a critical vulnerability (CVE-2024-40766) affecting its firewalls. The flaw could allow unauthorized...
