🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
9 JunAttacker Probing for New PHP Vulnerablity CVE-2024-4577, (Sun, Jun 9th)Our honeypots have detected the first probes for CVE-2024-4577. This vulnerability was originally discovered by Orange Tsai on Friday (June 7th) [1][2]. Watchtwr labs followed up with a detailed blog post and a proof of concept exploit [3].
ISC.SANS.EDU
⚠️ VULNERABILITY DISCLOSURE 3[−]
9 JunNasty bug with very simple exploit hits PHP just in time for the weekendsubmitted by Alphane_Moon to cybersecurity 2 points | 0 comments https://arstechnica.com/security/2024/06/php-vulnerability-allows-attackers-to-run-malicious-code-on-windows-servers/ARSTECHNICA.COM
9 JunGPT-4 autonomously hacks zero-day security flaws with 53% success ratesubmitted by neme to cybersecurity 3 points | 0 comments https://newatlas.com/technology/gpt4-autonomously-hack-zero-day-security-flaws/NEWATLAS.COM
9 JunCritical PHP Vulnerability Threatens Windows Serverssubmitted by Lanky_Pomegranate530 to cybersecurity 2 points | 0 comments https://www.databreachtoday.com/critical-php-vulnerability-threatens-windows-servers-a-25460DATABREACHTODAY.COM
🔥 INCIDENT REPORTING 1[−]
9 JunHackers Claim They Breached Telecom Firm in SingaporeThreat Actor GhostR Says It Stole 34 GB of Data A financially motivated hacker claims to have stolen over 34 gigabytes of data belonging to Singapore-based Telecom company Absolute Telecom. The hacker dubbed GhostR claims to have access to the company's data including corporate a…DATABREACHTODAY.CO.UK
🌐 CYBER THREAT LANDSCAPE 2[−]
9 JunMalicious VSCode extensions with millions of installs discoveredA group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to "infect" over 100 organizations by trojanizing a copy of the popular 'Dracula Official theme to include risky code. Further research into the VSCode Marketplace found thousan…BLEEPINGCOMPUTER.COM
9 JunMalicious VSCode extensions with millions of installs discoveredA group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to "infect" over 100 organizations by trojanizing a copy of the popular 'Dracula Official theme to include risky code. Further research into the VSCode Marketplace found thousan…BLEEPINGCOMPUTER.COM
📡 INFOSEC NEWS 2[−]
9 JunMalicious VSCode extensions with 229M installs found on Microsoft marketplaceA group of Israeli researchers exploring the limits of VSCode security have managed to "infect" over 100 organizations with a typosquatting Dracula extension that was weaponized with risky code. [...]BLEEPINGCOMPUTER.COM
9 JunBrave says May 2024 was its biggest growth month everBrave browser experienced its most significant growth month ever in May 2024, now used by more than 78.95 million monthly users, up 7.3%. [...]BLEEPINGCOMPUTER.COM