Severity Medium Analysis Summary Multiple vulnerabilities have been reported in multiple open source products.  CVE-2020-13984  The function used in uIP-Contiki-OS to process IPv6 extension headers and […]

Severity High Analysis Summary FireEye reports having been attacked by a highly sophisticated threat actor, highly likely to be a state-sponsored attacker. The threat actors stole […]

Severity High Analysis Summary Microsoft has recently patched 58 vulnerabilities in multiple products.  Tag CVE ID CVE Title Severity Azure DevOps CVE-2020-17145 Azure DevOps Server and […]

Severity High Analysis Summary A campaign has been uncovered that looks like the work of Iran-based APT group Helix Kitten, aka OilRig and APT34. Initial analysis […]

Severity Medium Analysis Summary A spear phishing campaign is observed targeting victims for harvesting credentials, using domain spoofing. The campaign is spoofing the official Microsoft.com domain […]

Severity Medium Analysis Summary A spear phishing campaign is found targeting finance and banking industry with malicious emails. The emails carry malicious attachments to drop malware. […]

Severity High Analysis Summary Network-attached storage (NAS) maker QNAP released security updates to address vulnerabilities that could enable attackers to take control of unpatched NAS devices […]

Severity Medium Analysis Summary Sodinokibi ransomware usually targets victims, infecting systems via Microsoft Office documents. After encryption, a ransom note is found on infected systems. The […]

Severity High Analysis Summary A novel cross-site scripting (XSS) vulnerability at the ‘teams.microsoft.com’ domain could be abused to trigger a remote code execution flaw in the […]