Aggregator

SLH

Dark Feed IO
8 months 3 weeks ago

You must login to view this content

cohenido

ProSpy, ToSpy malware pose as Signal and ToTok to steal data in UAE

Security Affairs
8 months 3 weeks ago
Researchers uncovered two Android spyware campaigns, ProSpy and ToSpy, posing as Signal and ToTok in the UAE to steal data via fake sites. ESET cybersecurity researchers uncovered two spyware campaigns, dubbed ProSpy and ToSpy, that target Android users in the United Arab Emirates (U.A.E.) by impersonating apps like Signal and ToTok. The cybersecurity firm tracks the campaigns separately due […]
Pierluigi Paganini

New Android Spyware Targeting Users by Imitating Signal and ToTok Apps

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
8 months 3 weeks ago

ESET researchers have uncovered two sophisticated Android spyware campaigns that target users seeking secure communication platforms by impersonating popular messaging apps Signal and ToTok. These malicious operations appear to focus primarily on residents of the United Arab Emirates (UAE), utilizing deceptive websites and social engineering tactics to distribute previously undocumented malware families. The investigation revealed […]

The post New Android Spyware Targeting Users by Imitating Signal and ToTok Apps appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

CVE-2025-40636 | mod_vvisit_counter Module 2.0.4j3 on Joomla Cookie cip_vvisitcounter sql injection

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability identified as critical has been detected in mod_vvisit_counter Module 2.0.4j3 on Joomla. This affects an unknown function of the component Cookie Handler. Performing manipulation of the argument cip_vvisitcounter results in sql injection. This vulnerability is known as CVE-2025-40636. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2025-27236 | Zabbix up to 6.0.40/7.0.16/7.2.10/7.4.0 API authorization

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability was found in Zabbix up to 6.0.40/7.0.16/7.2.10/7.4.0. It has been rated as problematic. The affected element is an unknown function of the component API. This manipulation causes incorrect authorization. This vulnerability appears as CVE-2025-27236. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2025-27231 | Zabbix up to 6.0.40/7.0.17/7.2.11/7.4.1 LDAP Bind password insufficiently protected credentials

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability was found in Zabbix up to 6.0.40/7.0.17/7.2.11/7.4.1. It has been declared as problematic. Impacted is an unknown function of the component LDAP Handler. The manipulation of the argument Bind password results in insufficiently protected credentials. This vulnerability is reported as CVE-2025-27231. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2025-10547 | DrayTek Vigor2926 HTTP CGI Request missing initialization

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability was found in DrayTek Vigor1000B, Vigor2962, Vigor3910, Vigor3912, Vigor2135, Vigor2763, Vigor2765, Vigor2766, Vigor2865, Vigor2865 LTE, Vigor2865L-5G, Vigor2866, Vigor2866 LTE, Vigor2927, Vigor 2927 LTE, Vigor2927L-5G, Vigor2915, Vigor2862, Vigor2862 LTE and Vigor2926. It has been classified as very critical. This issue affects some unknown processing of the component HTTP CGI Request Handler. The manipulation leads to missing initialization of a variable. This vulnerability is documented as CVE-2025-10547. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

CVE-2025-27237 | Zabbix Agent up to 6.0.40/7.0.17/7.2.11/7.4.1 on Windows OpenSSL Configuration File uncontrolled search path

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability was found in Zabbix Agent up to 6.0.40/7.0.17/7.2.11/7.4.1 on Windows and classified as problematic. This vulnerability affects unknown code of the component OpenSSL Configuration File Handler. Executing manipulation can lead to uncontrolled search path. This vulnerability is registered as CVE-2025-27237. The attack needs to be launched locally. No exploit is available.
vuldb.com

North Korea Remote Worker Scam Goes Global, Expands Target Industries

Security Boulevard
8 months 3 weeks ago

A report by Okta researchers says the notorious North Korea IT worker scams, which have focused on U.S. tech and crypto firms, is now going global, targeting other industries like healthcare and finances in a growing number of countries that include Great Britain, Canada, and Germany.

The post North Korea Remote Worker Scam Goes Global, Expands Target Industries appeared first on Security Boulevard.

Jeffrey Burt

Managed ad