Massive YouTube Campaign Targeting Over 100 Applications to Deliver Info Stealer
Cyble Research and Intelligence Labs (CRIL) analyzes how Threat Actors use Phishing websites to deliver Info stealer via YouTube Tutorials.
Exploit
BitBucket Server and Data Center at risk via Command Injection Vulnerability
Cyble analyzes CVE-2022-36804 affecting Atlassian Bitbucket and how Threat Actors may exploit this in the near future.
Zimbra Email Vulnerability (CVE-2022-37042) Weaponized to Cause Large-scale Compromise
Cyble Research & Intelligence Labs (CRIL) analyzes a large-scale exploitation of about 2,700 email domains compromised through weaponized vulnerabilities.
Palo Alto Recognizes Vulnerability Impacting PAN-OS® (CVE-2022-0028)
Cyble Research & Intelligence Labs analyzes recent Threat Actor behavior exploiting the Palo Alto Networks Vulnerability to target exposed assets on the internet.
Active exploitation of Zimbra Collaborative Suite (ZCS)
Cyble analyzes the ongoing, active exploitation of the Zimbra Collaborative Suite and the multiple CVEs being leveraged for cyberattacks.
Targeted Attacks being carried out via DLL SideLoading
Cyble Analyzes how Threat Actors are leveraging Microsoft applications and DLL Sideloading to deliver Cobalt Strike Beacons