ذكاء التهديدات

On 22 October, attackers hijacked the NPM account of the developer of UAParser.js, a library used to detect users’ browser types and operating systems

CloudSEK Threat Intelligence Advisory on Conti ransomware: Human-operated and possible successor of Ryuk, with advanced capabilities.

The Log4Shell vulnerability, tracked as CVE-2021-4428, has the highest severity of CVSS 10, as it enables unauthenticated remote code execution and is already being exploited in the wild.

CloudSEK threat intelligence advisory on AnalyticParameter, adware that spreads via fake Adobe Flash Player installers, targeting Mac users.

CloudSEK’s contextual AI digital risk platform XVigil uncovered a phishing campaign that hosted a total of 8 subdomains impersonating the webpages of a popular Indian bank.

CloudSEK’s flagship digital risk monitoring platform XVigil discovered a post on a cybercrime forum, mentioning a vulnerability in the Apache HTTP server 2.4.17 to 2.4.38, known as CVE-2019-0211.

CloudSEK threat intelligence advisory on SaferVPN local privilege escalation vulnerability tracked as CVE-2020-26050 affects Windows systems

CloudSEK Threat Intelligence Advisory on Qbot Windows banking trojan, dubbed QakBot/Pinkslipbot, targeting banks and financial institutions.