Hack Reports - Latest Cybersecurity News, Trends & Updates

Sign in Subscribe

Vulnerability Exploits

Zero-Day Vulnerability in PDF Files Leaking NTLM Data in Adobe & Foxit Reader - CybersecurityNews

Zero-Day Vulnerability in PDF Files Leaking NTLM Data in Adobe & Foxit Reader - CybersecurityNews

As of the latest updates, here are the key points related to the topics of zero-day vulnerabilities, NTLM data leakage, and PDF exploits, particularly focusing on Adobe and Foxit Reader: Zero-Day Vulnerability in FortiGate Firewalls While not specifically related to PDFs, a recent zero-day vulnerability has been identified in Fortinet

Malicious Kong Ingress Controller Image Found on DockerHub

Malicious Kong Ingress Controller Image Found on DockerHub

Kong Ingress Controller DockerHub Attack As of January 14, 2025, a significant cybersecurity incident has been reported involving the Kong Ingress Controller. Key Details * An attacker gained access to Kong's DockerHub account and replaced the legitimate Kong Ingress Controller version 3.4.0 image with a malicious version.

CISA orders agencies to patch BeyondTrust bug exploited in attacks

CISA orders agencies to patch BeyondTrust bug exploited in attacks

Here is a detailed overview of the latest news regarding the CISA, BeyondTrust vulnerability, and other relevant cybersecurity patch alerts as of January 13, 2025: U.S. Treasury Department Hack and BeyondTrust Vulnerability * A recent cyberattack targeted the U.S. Treasury Department, involving a breach of BeyondTrust’s systems. The

Rootkit Malware Exploiting Multiple Vunlerability to Control Linux Systems Remotely - CybersecurityNews

Rootkit Malware Exploiting Multiple Vunlerability to Control Linux Systems Remotely - CybersecurityNews

As of January 13, 2025, here are some key points and recent developments related to Linux and cybersecurity threats, although the specific term "Linux rootkit vulnerability exploitation" or "zero-day rootkit malware analysis" is not directly mentioned in the sources. Here are some relevant and closely related

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

CVE-2024-50603: Aviatrix Controller Remote Code Execution (RCE) Vulnerability Overview A critical Remote Code Execution (RCE) vulnerability, identified as CVE-2024-50603, has been discovered in the Aviatrix Controller, a cloud networking platform. This vulnerability has been assigned the maximum CVSS score of 10.0 due to its severe impact and ease of

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

Latest News on Samsung Zero-Click Exploit CVE-2024-49415 Overview A high-severity vulnerability, tracked as CVE-2024-49415, has been discovered affecting Samsung devices running Android versions 12, 13, and 14. Here are the key details: Affected Devices and Software * The vulnerability impacts Samsung devices running Android versions 12, 13, and 1423. * Specifically, it

Unpatched critical flaws impact Fancy Product Designer WordPress plugin

Unpatched critical flaws impact Fancy Product Designer WordPress plugin

Latest News on Fancy Product Designer WordPress Vulnerabilities Critical Flaws in Fancy Product Designer Plugin: The Fancy Product Designer WordPress plugin, developed by Radykal, has been identified with two critical severity flaws that remain unfixed in the current latest version4. These vulnerabilities include: 1. SQL Injection: The plugin is vulnerable