A new alarming event has occurred in the world of cybercrime. An unknown cybercriminal operating under the alias “Vanger” has announced on underground hacker forums that they are selling a 0-Day exploit targeting VMware ESXi systems. The most dangerous aspect…

In recent days, one of the most alarming developments in cybersecurity has been the disclosure of internal chats from the Black Basta hacking group. Analysts at GreyNoise examined the leaked data and confirmed that out of 62 identified vulnerabilities, 23…

Recently, in the field of cybersecurity, information has spread about a serious vulnerability discovered in Cisco Nexus 3000 and 9000 series switches. This vulnerability could allow attackers to disrupt network operations, causing a Denial-of-Service (DoS) condition. This vulnerability is linked…

Cyber threats are becoming increasingly complex. Recent security audits have revealed that the CVE-2025-22467 vulnerability in Ivanti Connect Secure (ICS) devices poses a serious global threat. CVE-2025-22467 has a CVSS score of 9.9 and is classified as a critical flaw.…

Recent cybersecurity research has shown that malware distribution methods are becoming increasingly sophisticated. A newly discovered batch script is a clear example of this trend. This script is used to distribute powerful malware such as XWorm and AsyncRAT, employing advanced…

Several critical vulnerabilities have been discovered in Rsync, a widely used tool for server and data synchronization. These vulnerabilities allow attackers to execute malicious code remotely, steal confidential data, and bypass key security mechanisms. Affected Versions: All versions of Rsync…

In today’s world, website security is becoming an increasingly critical issue. A vulnerability has been discovered in a widely used WordPress plugin, potentially exposing millions of websites to cyberattacks. The affected plugin is Essential Addons for Elementor. The discovered vulnerability…

One of today’s most pressing cybersecurity issues is the large-scale attacks targeting Cisco networking equipment. According to recent reports, hundreds of devices are at risk due to the active exploitation of vulnerabilities CVE-2023-20198 and CVE-2018-0171. Security experts have identified 110…

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about CVE-2024-20953, a security vulnerability in Oracle Agile Product Lifecycle Management (PLM). This vulnerability is currently being actively exploited by cybercriminals. On February 24, 2025, CISA added this…

The field of cybersecurity faces ever-evolving threats. Recently, a new malware called GhostSocks was discovered, leveraging SOCKS5 proxy technology to bypass security systems and move anonymously across networks. This malicious tool has been thoroughly analyzed by Infrawatch, revealing that it…