El blog de seguridad de Gridinsoft

Apple Silicon GoFetch Flaw Discovered, No Patches Possible

GoFetch Vulnerability in Apple Silicon Uncovered

Researchers uncovered a vulnerability in Apple Silicon processors, apodado GoFetch. It allows attackers to extract secret keys from Mac computers

STRRAT and Vcurms Malware Abuse GitHub for Spreading

Recientemente se ha descubierto una nueva campaña de phishing que utiliza GitHub para entregar troyanos de acceso remoto (RATA) STRRAT y Vcurms…

Fujitsu Hacked, Warns of Data Leak Possibility

fujitsu, una de las empresas de TI líderes en el mundo, reports uncovering the hack in their internal network. The company discovered malware

Fortinet RCE Vulnerability Affects FortiClient EMS Servers

Fortinet disclosed a critical vulnerability affecting FortiClient EMS products in March 2024. Esta vulnerabilidad, categorizado como una inyección SQL, poses

Adobe Reader Infostealer Plagues Email Messages in Brazil

Según se informa, una reciente campaña de correo no deseado por correo electrónico difunde malware de robo de información bajo la apariencia de Adobe Reader Installer.. Within a forged PDF

Adobe ColdFusion Vulnerabilities Exploited in the Wild

Two Adobe ColdFusion Vulnerabilities Exploited in The Wild

Two vulnerabilities in Adobe ColdFusion are exploited in real-world attacks,…

Tortilla Ransomware Free Decryptor Available

Tortilla (Babuk) Ransomware Decryptor Available

En enero 9, 2024, Avast and Cisco Talos announced the

OAuth2 Vulnerability Allows for Persistent Session Hijacking

OAuth2 Session Hijack Vulnerability: Details Uncovered

A sophisticated exploit targeting Google’s OAuth2 authentication system was uncovered

xDedic Actors Have Been Apprehended After a Five-year Hunt

xDedic Marketplace Members Detained In International Operations

El infame mercado xDedic, known for its illicit trade in

X/Twitter Crypto Scams From Verified Accounts

Verified X/Twitter Accounts Hacked to Spread Cryptoscams

The trend of hacking official accounts to promote cryptocurrency fraud

SMTP Smuggling - Global Email Security Threat

SMTP Smuggling is a New Threat to Email Security

Según se informa, una nueva técnica de contrabando SMTP tiene el potencial de…

Mandiant's Account in X Hacked

Mandiant Account in X Hacked to Spread Cryptocurrency Scams

The Twitter account of Google’s Mandiant cybersecurity service has been

RCE Vulnerability In Qualcomm Chips Exposes Millions

Qualcomm RCE Vulnerabilities Expose Millions of Users

Vulnerability in several Qualcomm chipsets allows for remote code execution

SRLabs Releases Free Black Basta Ransomware Decryptor

Black Basta Ransomware Free Decryptor Available

Los investigadores de SRLabs publicaron un descifrador gratuito para el ransomware BlackBasta. Ellos…

7 Most Common Types of Malware Explained

Seven Common Types of Malware – Analysis & Description

En el intrincado panorama de la ciberseguridad, comprehending the various forms

New DLL Search Order Hijacking Method Exploited in the Wild

DLL Search Order Hijacking Technique Bypasses Protection

Una nueva DLL (Biblioteca de enlaces dinámicos) Search Order Hijacking variant

MSIX Installer Protocol Exploited

Microsoft Disables MSIX App Installer Protocol

Según se informa, Microsoft deshabilitó el protocolo de instalación MSIX en Windows, debido a…