Anup Ghosh
Adobe Patches Critical Acrobat Reader Zero-Day Vulnerability Exploited in the Wild
The Download Adobe released a critical update for Acrobat Reader, addressing a zero-day vulnerability (CVE-2023-38646) that is already...
top of page
Intelligence Blog
Anup Ghosh
Sep 91 min read
Critical 10/10 Severity RCE Flaw Found in Progress LoadMaster: What IT Admins Must Do
The Download A critical remote code execution (RCE) vulnerability has been identified in Progress LoadMaster and LoadMaster Multi-Tenant...
53 views
Anup Ghosh
Sep 91 min read
New WordPress Contact Form Vulnerability Affects 1.1M Sites
The Download A recently discovered set of vulnerabilities affecting WordPress contact form plugins exposes websites to potential...
63 views
Anup Ghosh
Sep 91 min read
Cisco NX-OS Vulnerability: A Critical Flaw That Exposes Networks to Remote Attacks
The Download Cisco identified several high-severity vulnerabilities in its NX-OS software, which could allow unauthorized attackers to...
38 views
Anup Ghosh
Sep 21 min read
Mirai Strikes Again: IP Cameras Hijacked for Botnet Attacks
The Download Security researchers discovered IP cameras all around the world were compromised and recruited into the Mirai botnet, which...
11 views
Anup Ghosh
Sep 21 min read
SQL Injection Strikes Again: Airline Security Breached via Known Vulnerability
The Download Security researchers were able to compromise an airline's database by exploiting an SQL injection vulnerability, which...
22 views
Anup Ghosh
Sep 21 min read
Chinese Hackers Breach U.S. Internet Service Providers in Alarming Cyber Espionage Campaign
The Download In a new expose in the Washington Post, Chinese government-backed hackers, known by security researchers as Volt Typhoon,...
37 views
Anup Ghosh
Aug 252 min read
RMMs: How Hackers are Turning IT Tools Against the Networks
The Download A new report shows that the tool of choice for hackers and ransomware gangs is the very tool used by Managed Service...
50 views
Anup Ghosh
Aug 251 min read
Fortune 50 Pays Record $75M Ransom: The High Stakes of Cybercrime
The Download An analysis in an annual report from Chainanalysis sheds new light on the surging profitability of ransomware campaigns. The...
35 views
Anup Ghosh
Aug 251 min read
Critical SolarWinds RCE Bug Exploited: CISA Urges Immediate Action
The Download If you are feeling shades of anxiety from a SolarWinds RCE, we understand. And with CISA weighing in this must be patched...
20 views
Anup Ghosh
Aug 192 min read
Unveiling the Cloud's Achilles' Heel: How a Hidden Entra ID Flaw Threatens Organizational Security
The Download A senior cloud security researcher at Semperis announced a critical vulnerability in Microsoft Entra ID at Black Hat, where...
35 views
Anup Ghosh
Aug 181 min read
Unlocking the Inbox: How a 0-Click Vulnerability in Outlook Opened the Door to Remote Code Execution
The Download A critical vulnerability in Microsoft Outlook ( identified as CVE-2024-30103 ) allows malicious code to run to enable...
14 views
Anup Ghosh
Aug 152 min read
Silent Threat: 0-Click RCE Vulnerability Exposes All Windows Systems to Total Takeover
The Download Microsoft announced a rare 0-click vulnerability (CVE-2024-38063) with CVSS severity score of 9.8/10 in the Windows TCP/IP...
88 views
Anup Ghosh
Aug 111 min read
Critical AWS Flaws: Behind the Patch that Prevented Cloud Account Takeovers
The Download Security company Aqua Security disclosed a flaw at BlackHat that if left unpatched could allow attackers to gain control of...
19 views
Anup Ghosh
Aug 111 min read
New 0.0.0.0 Day Flaw Allows Browser Bypass to Compromise Hosts
The Download A flaw in the underlying Webkit used by major browsers including Google Chrome, Safari, and Firefox allows remote attackers...
51 views
Anup Ghosh
Aug 42 min read
Managing the Vulnerability Explosion: Top Insights into Vulnerability Exploitation and Management
Chart courtesy of Cyentia Institute Report "A Visual Exploration of Exploitation in the Wild: An Inaugural Study of EPSS Data and...
78 views
Anup Ghosh
Aug 42 min read
Russian Ransomware Gangs Rake in $500M in Extortion Payments in 2023
The Download Russian-speaking ransomware gangs are responsible for 69% of global ransomware proceeds, amounting to over $500 million in...
20 views
Anup Ghosh
Aug 41 min read
Sitting Duck Attack Leaves 1M Domains Vulnerable to Hijack
The Download Security researchers disclosed the "Sitting Duck" vulnerability has been exploited to hijack over 35,000 domains already,...
37 views
Anup Ghosh
Jul 291 min read
Urgent: Critical Vulnerability in Telerik UI Components Exposes Systems to Remote Attacks
The Download Progress Software announced another critical vulnerability in Progress Telerik Report Server UI components, identified as...
72 views
Anup Ghosh
Jul 291 min read
Despite Microsoft Defender Fix, Hackers Still Exploit Vulnerabilities to Deliver Malware
The Download Despite Microsoft’s recent patch for a critical flaw in Microsoft Defender, cybersecurity experts report that this...
48 views
bottom of page