A newly discovered backdoor, known as ViperTunnel, has been detected infiltrating the networks of businesses in the UK and US, according to a recent investigation by the cybersecurity firm InfoGuard. This Python-based malware is believed to have been in development since late 2023 and is frequently deployed as a secondary…
A significant security vulnerability known as React2Shell is currently being exploited by cybercriminals to deploy various malware strains, including KSwapDoor and ZnDoor, as reported by Palo Alto Networks’ Unit 42 and NTT Security. The exploitation of this vulnerability poses urgent risks to organizations, particularly those leveraging React and Next.js frameworks.…
The FreeBSD operating system maintainers have issued updates addressing a critical security vulnerability in the ping module, which could be exploited to crash the application or execute code remotely. This vulnerability, identified as CVE-2022-23093, affects all supported FreeBSD versions and involves a stack-based buffer overflow triggered by maliciously crafted packets.…
The open-source software suite Samba has issued critical updates to address several high-severity vulnerabilities that pose significant risks to system security. If exploited, these flaws could allow unauthorized users to gain control over the affected systems. The vulnerabilities, identified as CVE-2022-38023, CVE-2022-37966, CVE-2022-37967, and CVE-2022-45141, have been patched in the…
Exploitation of FortiOS SSL-VPN Zero-Day Vulnerability Targets Government Entities A critical zero-day vulnerability in FortiOS SSL-VPN was exploited by unknown threat actors in recent attacks, targeting governmental and other large organizations, as reported by Fortinet. This vulnerability, identified as CVE-2022-42475, is a heap-based buffer overflow flaw that permits unauthenticated remote…
### Recent Facebook Messenger Malware Campaign A concerning cybersecurity threat has emerged within Facebook Messenger, where users are encountering deceptive video links purportedly sent by friends, which can lead to malicious software installations. Researchers at Kaspersky Lab have uncovered a cross-platform malware campaign targeting users through these seemingly innocuous links.…
New SysUpdate Malware Variant Targets Linux Systems: A Growing Threat Recent developments have revealed a new variant of the SysUpdate malware that specifically targets Linux systems. This new iteration introduces sophisticated capabilities, raising significant concerns among cybersecurity professionals and business owners alike. The malware leverages advanced techniques that highlight the…
Recent cybersecurity intelligence has revealed a sophisticated exploitation of a patched vulnerability in Fortinet’s FortiOS SSL-VPN. This zero-day exploit is believed to have been leveraged by a suspected state-sponsored threat actor associated with China, targeting a government entity in Europe and a managed service provider (MSP) in Africa. Evidence gathered…
LockBit Ransomware: Version 5.0 Targets Windows, Linux, and ESXi Systems In recent developments within the cybersecurity landscape, the notorious LockBit ransomware group has unleashed a new and highly sophisticated variant, version 5.0. This latest iteration is designed to target a multitude of operating systems, including Windows, Linux, and virtual environments…
