Cybercriminals are actively exploiting a two-year-old VMware vulnerability as part of a ransomware campaign targeting thousands of organizations worldwide. Admins, hosting providers, and the French Computer Emergency Response Team (CERT-FR) warn that attackers actively target VMware ESXi servers unpatched against a two-year-old remote code execution vulnerability to deploy a new ESXiArgs ransomware. The security vulnerability […]
Microsoft Patch Tuesday fixes 11 critical security vulnerabilities and six zero-days being actively exploitedby cyber attackers. The security flaws impact Microsoft products including Windows, Microsoft Azure, Microsoft Exchange Server, Microsoft Office and more. Some of which have been targeted by malicious hackers for months. Two of the critical updates, CVE-2022-41028 and CVE-2022-41040, address security vulnerabilities in Microsoft Exchange […]
Cybersecurity researchers detail some of the security flaws that are most associated with attacks in recent times. One of the most popular security vulnerabilities among cyber criminals during the past few months is a software security flawin Microsoft Office, CVE-2017-11882, first disclosed in 2017. These flaws continue to be exploited because, despite a longstanding available security update, […]
Highly skilled cyber attackers are using a never-before-seen technique to hide their malicious activities and compromise victims with trojan malware backdoors. Thisintelligence gathering and espionage campaign has been detailed by cybersecurity researchers at Symantec. The researchers found that attackers can spend more than 18 months inside the victims networks, all while taking steps to ensure their […]