A critical vulnerability (CVE-2024-53677) in Apache Struts 2 is being actively exploited, allowing attackers to perform path traversals and upload malicious files for potential remote code execution. The flaw, rated 9.5 CVSS, affects multiple versions and requires urgent upgrades to Struts...
The Mask (Careto) APT group has resurfaced with new cyber espionage campaigns targeting Latin American organizations. Active since 2007, the group employs sophisticated techniques including spear-phishing, zero-day exploits, and custom malware frameworks (Careto2 and Goreto). Recent attack...
CISA adds two actively exploited vulnerabilities to KEV catalog: Adobe ColdFusion file access flaw and Microsoft Windows Kernel-Mode Driver issue. FBI warns of HiatusRAT targeting IoT devices, while a major DrayTek router ransomware campaign affects 20,000+ devices. Federal agencies given ...
Meta faces €251M GDPR fine for a 2018 Facebook data breach affecting 29M users, with violations including inadequate breach notification, poor documentation, and insufficient data protection design. Additionally, Meta settled for $50M in Australia over the Cambridge Analytica scandal, wh...
Over 25,000 SonicWall SSLVPN devices are exposed to critical security vulnerabilities, with 20,000 running outdated firmware. Research shows 430,363 publicly exposed firewalls, facing risks like vulnerability exploitation and password attacks. Recent ransomware incidents highlight urgent n...
