Severity Medium Analysis Summary A phishing scam that uses fake Zoom video conference invitations to lure victims into providing their credentials has been reported. A phishing […]

Severity Medium Analysis Summary IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI […]

Severity Medium Analysis Summary MassLogger is malware written using .NET and designed to steal credentials and act as spyware. MassLogger is modular with a number of […]

Severity Medium Analysis Summary Linux Kernel could allow a local authenticated attacker to bypass security restrictions, caused by an issue when Indirect branch speculation can be […]

Severity Medium Analysis Summary The rise in registering malicious Covid-19 domains continues as threat actors are continuously cashing in on the situation of the global pandemic […]

Severity High Analysis Summary CVE-2020-11999 An exposed API call allows users to provide files to be processed without sanitation. This may allow an attacker to specify […]

Severity Medium Analysis Summary The affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitrary code. Successful exploitation […]

Severity Medium Analysis Summary LokiBot is trojan-type malware designed to infiltrate systems and collect a wide range of information. Lokibot targets Android and Windows operating systems. […]

Severity High Analysis Summary The malware Valak is a multi-stage, script-based package that researchers have observed re-using Gozi’s infrastructure. Once installed, Valak captures emails from the […]