
Blog Series
Month: April 2024

Debian Security Updates Patch Cacti...
Multiple security vulnerabilities were discovered in Cacti, a widely used web interface for monitoring system graphs. These vulnerabilities, if exploited, could lead to severe consequences such as cross-site scripting (XSS),...
CISA SharePoint Vulnerability Warning: RCE...
In light of recent cyber threats, a CISA SharePoint vulnerability warning has been issued. According to media reports, threat actors are exploiting the remote code execution flaw to launch arbitrary...
WallEscape Vulnerability Leaks User Passwords...
A vulnerability has been identified in the wall command-line utility in Linux, which could allow an attacker to steal user passwords or modify the clipboard on the victim’s system. Dubbed...
Dracula Phishing Platform Targets Organizations...
In light of recent cyber threats, the Dracula phishing platform has prevailed, targeting organizations in over 100 countries. The Dracula phishing attacks are centered on leveraging an immense network of...
CISA and FBI Issue Alert...
SQL injection vulnerabilities, often abbreviated as SQLi, persist as a significant issue in commercial software products. In response to a recent highly publicized malicious campaign exploiting SQLi vulnerabilities in a...
Federal Support for Open-Source...
In an unexpected move, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced an initiative aimed at bolstering the security posture of open-source software developers. This initiative, as reported...
PyPI Malicious Package Uploads Used...
In light of the recent cybercriminal activity, new user sign-ups on the PyPI platform were halted. Currently, an increase in PyPI malicious package uploads is being deemed the reason behind...
Patches for CVE-2024-1086 for CloudLinux...
Update April 8th, 2024: Updated ETA for CloudLinux 6h and CloudLinux 7. Update April 10th, 2024: Live patch for CloudLinux 6h and CloudLinux 7 are now available. The KernelCare team...
CISA Warns of Volt Typhoon...
The recent joint warning issued by CISA, NSA, FBI, and other U.S. government and international partners highlights a critical cybersecurity threat: Volt Typhoon, a Chinese hacking group. This group has...
Extending Support for PHP End-of-Life...
Handling end of life (EOL) for operating systems is a relatively common, if cumbersome, task that IT teams have to grapple with as part of their activity. Yet, operating systems...
Finland Blames APT31 Hackers For...
APT31 Hackers, a Chinese threat actor group, has recently been accused by the Finnish police of attacking the nation’s parliament in 2020. According to recent reports, this attack is said...