Severity Medium Analysis Summary The NanoCore remote access Trojan (RAT) was first discovered in 2013 when it was being sold in underground forums. The malware has […]

Severity High Analysis Summary CVE-2021-31892 Due to an error in a third-party dependency, the SSL flags used for setting up a TLS connection to a server […]

Severity Medium Analysis Summary Loki Bot is a commodity malware sold on underground sites which are designed to steal private data from infected machines, and then […]

Severity High Analysis Summary CVE-2021-35515 Apache Commons Compress is vulnerable to a denial of service, caused by an infinite loop flaw in the construction of the […]

Severity High Analysis Summary CVE-2021-29969 Mozilla Thunderbird could allow a remote attacker to obtain sensitive information, caused by the failure to ignore injected data when configured […]

Severity High Analysis Summary A campaign has been uncovered that looks like the work of Iran-based APT group Helix Kitten, aka OilRig and APT34. Initial analysis […]

Severity High Analysis Summary CVE-2021-32463 This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Apex One. An attacker must […]

Severity High Analysis Summary CVE-2021-30701 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the vImage library is […]

Severity Medium Analysis Summary APT group Evilnum aka Jointworm has been seen targeting the financial sector with malicious emails. The group first seen in 2018 with […]