LR pixel

Raisecom Gateway Command Injection (CVE-2024-7120)

von | 14. Sep. 2024 | Unkategorisiert

What is the Attack?FortiGuard Labs observes attack attempts targeting certain models of Raisecom Gateway that are vulnerable to CVE-2024-7120. This attack can be initiated remotely and may lead to OS command injection. Exploit for this vulnerability has also been...

Microsoft Multiple Actively Exploited Vulnerabilities

von | 15. Aug. 2024 | Unkategorisiert

What are the Vulnerabilities?Threat actors are exploiting multiple zero-day vulnerabilities that were recently disclosed on the Microsoft Security Updates- August 2024. The six actively exploited zero-day vulnerabilities were also added to CISA’s Known Exploited...

SnakeKeylogger Attack

von | 1. Aug. 2024 | Unkategorisiert

What is the Attack?Threat actors are continuously preying on end users to unknowingly install a trojan stealer known as SnakeKeylogger or KrakenKeylogger. This trojan was developed using .NET and targets Windows users. Its arsenal includes keystroke logging,...

VMware ESXi Ransomware Attack (CVE-2024-37085)

von | 1. Aug. 2024 | Unkategorisiert

What is the Attack?Threat actors are exploiting an authentication bypass vulnerability in ESXi hypervisors, known as CVE-2024-37085, to gain full administrative permissions on domain-joined ESXi hypervisors. This flaw allows threat actors to encrypt critical ESXi...