Ingeniero de sistemas y seguridad.Gamer en los ratos libres.Quiero compartir con todo sobre el mundo de la tecnología de manera mas fácil de entender y acercarla cada vez mas.
Active Exploitation of SharePoint RCE and MikroTik RouterOS Vulnerabilities: What You Need to Know Background and Context In the evolving landscape of cybersecurity threats, recent developments have underscored the persistent vulnerabilities present in widely-used software and hardware. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added two critical vulnerabilities to its Known Exploited…
Explotación Masiva de la Vulnerabilidad de Oracle PeopleSoft: Una Amenaza Cibernética Grave Resumen de la Vulnerabilidad Google ha puesto de relieve un resurgimiento de la explotación generalizada que apunta a una vulnerabilidad de seguridad crítica en Oracle PeopleSoft, subrayando la urgencia para que las organizaciones afectadas tomen medidas inmediatas. La vulnerabilidad, identificada como CVE-2026-35273, tiene…
Mass Exploitation of Oracle PeopleSoft Vulnerability: A Severe Cybersecurity Threat Overview of the Vulnerability Google has shed light on a resurgence of widespread exploitation targeting a critical security vulnerability in Oracle PeopleSoft, underscoring the urgency for affected organizations to take immediate action. The vulnerability, identified as CVE-2026-35273, holds a staggering CVSS score of 9.8, categorizing…
Lunex Stealer: A New Threat Leveraging AMD Drivers to Evade Security Measures Background and Context The rise of sophisticated malware has become an alarming trend in the cybersecurity landscape, underscoring the evolving tactics employed by cybercriminals. The recent emergence of the **Lunex Stealer**, a form of malware targeting Ukrainian-speaking users, exemplifies this trend. Discovered by…
Nuevos desarrollos en el malware PamStealer: Persistencia mejorada y descifrado en vivo Descripción general del malware PamStealer PamStealer ha surgido como una amenaza significativa en el ecosistema de macOS, mostrando tácticas avanzadas para comprometer la seguridad del usuario. Originalmente identificado por sus efectivas capacidades de robo de credenciales, el malware ha evolucionado, integrando métodos sofisticados…
New Developments in PamStealer Malware: Enhanced Persistence and Live Decryption Overview of PamStealer Malware PamStealer has emerged as a significant threat in the macOS ecosystem, showcasing advanced tactics to compromise user security. Originally identified for its effective credential-stealing capabilities, the malware has now evolved, integrating sophisticated methods to enhance its persistence and payload delivery mechanisms.…
Recent Cybersecurity Incidents: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, and Water Utility Exposure Background and Context The cybersecurity landscape continues to evolve at an alarming pace, with incidents that reveal vulnerabilities across various sectors. Recently, three significant events have caught the attention of the cybersecurity community. First, the Clop ransomware group’s leak…
Nueva Spyware Corp MDM Apunta al Sector Logístico, Compromete Funciones de SMS y Llamadas Introducción a la Spyware Corp MDM En una tendencia alarmante, el sector logístico se ha visto bajo ataque por un nuevo spyware sofisticado denominado Corp MDM. Este software malicioso opera principalmente en dispositivos Android e introduce una serie de amenazas de…
New Corp MDM Spyware Targets Logistics Sector, Compromises SMS and Call Functions Introduction to Corp MDM Spyware In an alarming trend, the logistics sector has found itself under attack from a sophisticated new spyware dubbed Corp MDM. This malicious software operates primarily on Android devices and introduces a range of security threats by intercepting communications…
Strengthening Telecom Cybersecurity: A Bipartisan Response to the Salt Typhoon Threat Background and Context The introduction of the Telecommunications Cybersecurity and Resilience Act by Senators Mark Warner and Ted Cruz marks a significant bipartisan response to the alarming vulnerabilities exposed by the Salt Typhoon hacking campaign. First reported in 2022, the Salt Typhoon incident is…
