A Chilling Example of the PLC Security Vulnerability that’s Left the Industry Scrambling for Solutions Researchers have made a groundbreaking discovery in the world of industrial control systems, revealing that a pre-authentication remote code execution (RCE) exploit can be transferred from one programmable logic controller (PLC) model to another. This alarming finding has significant implications … Read more
A notorious Russian hacker, extradited from Eastern Europe, is set to face charges in connection with a massive Excel malware campaign that infected thousands of computers worldwide. The indictment alleges that this individual, along with several accomplices, orchestrated a sophisticated attack that leveraged vulnerabilities in Microsoft’s popular spreadsheet software. The alleged scheme began when attackers … Read more
A critical vulnerability in GeoNetwork, a popular open-source geospatial data management platform used by government agencies worldwide, has been patched after it was discovered that attackers could exploit an unauthenticated remote code execution (RCE) chain. The flaw, which affected the backend of geoportal systems, could have allowed malicious actors to take control of entire networks … Read more
Cybersecurity firm SonicWall has disclosed two critical vulnerabilities in its SMA 1000 series, which attackers have already exploited to launch a sophisticated attack chain. The vulnerabilities, designated as CVE-2023-12277 and CVE-2023-12278, are zero-day flaws that allow hackers to gain unauthorized access to sensitive data and systems. The affected devices are part of SonicWall’s Secure Mobile … Read more
**Zero-Day Flaws in SonicWall Appliances Actively Exploited by Threat Actors** Security researchers have sounded the alarm once again about a pair of zero-day vulnerabilities in SonicWall’s Secure Remote Access (SRA) appliance, known as SMA1000. The company has confirmed that these flaws are being actively exploited by threat actors to launch remote code execution attacks against … Read more
A Long-Running Cybercrime Operation Bites the Dust: Sality Botnet Infrastructure Dismantled in Global Takedown International law enforcement agencies and private partners have dealt a significant blow to cybercrime, dismantling the infrastructure of the notorious Sality botnet in a joint global operation. The takedown, which involved the seizure of malware-linked domains in several countries, marks a … Read more
A Clever Counterattack Against Sality: Authorities Shut Down Malware Pipeline In a bold move, cybersecurity authorities have successfully disrupted the malware distribution network of Sality, a notorious peer-to-peer (P2P) botnet responsible for unleashing devastating attacks on unsuspecting victims worldwide. This targeted operation has effectively severed the pipeline through which new malware payloads were being delivered, … Read more
A Critical Vulnerability in Switchvox VoIP Systems Allows Attackers to Bypass Security Measures and Deploy Malicious Code Without Credentials A severe security flaw has been discovered in the Switchvox Voice over Internet Protocol (VoIP) system, allowing attackers to deploy reverse shells without needing login credentials. The vulnerability affects Switchvox 7.x versions, which are widely used … Read more
A Highly Critical Exploit Spreads Across Industrial Control Systems, Threatening Global Supply Chains Researchers have successfully adapted a pre-authentication remote code execution (RCE) exploit from one Programmable Logic Controller (PLC) model to another, using a sophisticated technique dubbed “Claude.” This development has significant implications for industrial control systems, where compromised devices can lead to catastrophic … Read more
Cybersecurity Researchers Demonstrate AI-Powered PLC Exploit Porting in Hours and Dollars In a stunning demonstration of the accelerating pace of artificial intelligence (AI) in cybersecurity, researchers at Forescout’s Vedere Labs have successfully ported a working remote code execution exploit from one programmable logic controller (PLC) to another using Anthropic’s Claude AI. The experiment, which was … Read more