Rewterz News Archives - Page 146 of 1080

August 22, 2023

Rewterz Threat Advisory – CVE-2023-40068 – WordPress Advanced Custom Fields and Fields Pro Plugin Vulnerability

Severity Medium Analysis Summary CVE-2023-40068 Advanced Custom Fields plugin for WordPress and Advanced Custom Fields Pro plugin for WordPress is vulnerable to cross-site scripting, caused by […]

August 22, 2023

Rewterz Threat Alert – Lumma Stealer Malware aka LummaC – Active IOCs

Severity High Analysis Summary Lumma is an information stealer that is sold as a Malware-as-a-Service (MaaS) on Russian-speaking underground forums and Telegram. Lumma is an information […]

August 22, 2023

Rewterz Threat Alert – “Stealc” – An Information Stealer Malware – Active IOCs

Severity High Analysis Summary Stealc is a new malware that was first marketed by an actor named Plymouth on the XSS and BHF Russian-speaking underground forums […]

August 22, 2023

Rewterz Threat Alert – North Korean APT Kimsuky Aka Black Banshee – Active IOCs

Severity High Analysis Summary Kimsuky is a North Korean advanced persistent threat (APT) group, also known as “Black Banshee”. The group has been active since at […]

August 22, 2023

Rewterz Threat Advisory – CVE-2022-46751 – Apache Ivy Vulnerability

Severity High Analysis Summary CVE-2022-46751 Apache Ivy could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity (XXE) declarations […]

August 21, 2023

Rewterz Threat Alert – Gafgyt aka Bashlite Malware – Active IOCs

Severity High Analysis Summary Gafgyt is a type of malware that is used to conduct Distributed Denial of Service (DDoS) attacks. These attacks involve overwhelming a […]

August 21, 2023

Rewterz Threat Update – WinRAR Vulnerability Enables Malicious Command Execution in RAR Archives

Severity High Analysis Summary A significant security vulnerability has been resolved in WinRAR v6.22, a widely-used Windows utility for archiving files. Tracked as CVE-2023-40477, this flaw […]

August 21, 2023

Rewterz Threat Alert – AsyncRAT – Active IOCs

Severity Medium Analysis Summary AsyncRAT is an open-source tool designed for remote monitoring via encrypted connections. However, it could be utilized by threat actors as it […]

August 21, 2023

Rewterz Threat Alert – PatchWork APT Threat Actor Group – Active IOCs

Severity High Analysis Summary Patchwork is an Advanced Persistent Threat (APT) group that has been active since at least 2014. Patchwork primarily targets government, defense, and […]