Research from VulnCheck reveals that a highly skilled threat actor has been running a private Out-of-band Application Security Testing (OAST) service on Google Cloud infrastructure, executing an extensive exploit campaign aimed at over 200 CVEs. Private OAST Domain Raises Red Flags: Security experts at VulnCheck noticed strange behavior linked to …

Daily a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so on. Its our daily security digest to cover the latest happenings in the world. Spend a bit time to read out todays update: 01. Hackers Registered 18,000 Holiday-Themed Domains Targeting ‘Christmas,’ …

Cybersecurity and Infrastructure Security Agency (CISA) has mandated federal agencies to protect their industrial control systems due to active exploitation. CVE-2021-26829, a vulnerability in OpenPLC ScadaBR, is now included in the KEV Catalog. This inclusion signals that threat actors are actively weaponizing this specific flaw to target operational technology (OT) …