❌

Visualização normal

Antes de ontemStream principal
  • ✇Cybersecurity News
  • PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation Do Son
    StyleSmuggler exploitation of CVE-2026-75650 drops the PSK Agent RAT and a PHP webshell on Magento stores. See how to detect and respond. Related Posts: Hugging Face Malware Campaign Infects AI GPU Servers Google Disrupts Videostrong XCPE Botnet on Android TV NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks The post PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation appeared first on Daily CyberSecurity.
     
  • ↗️

PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation

✇Cybersecurity News
Por:Do Son
3 de Novembro de 2026, 00:45

StyleSmuggler exploitation of CVE-2026-75650 drops the PSK Agent RAT and a PHP webshell on Magento stores. See how to detect and respond.

Related Posts:

The post PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation appeared first on Daily CyberSecurity.

  • ✇Cybersecurity News
  • Exposed Workspace Shows AhsayCBS Webshells Turned Into SOCKS Proxy Tunnels Do Son
    An exposed workspace shows AhsayCBS webshell access turned into SOCKS proxy tunnels with Chisel and GOST across 141 hosts, per the logs. Related Posts: Binance Hack Investigation Traces Historic $6.3B Breach Polymarket Supply Chain Attack Drains Trader Wallets Binance Hot Wallet Breach Prompts Multibillion-Dollar Inquiry The post Exposed Workspace Shows AhsayCBS Webshells Turned Into SOCKS Proxy Tunnels appeared first on Daily CyberSecurity.
     
  • ↗️

Exposed Workspace Shows AhsayCBS Webshells Turned Into SOCKS Proxy Tunnels

✇Cybersecurity News
Por:Do Son
29 de Outubro de 2026, 22:00

An exposed workspace shows AhsayCBS webshell access turned into SOCKS proxy tunnels with Chisel and GOST across 141 hosts, per the logs.

Related Posts:

The post Exposed Workspace Shows AhsayCBS Webshells Turned Into SOCKS Proxy Tunnels appeared first on Daily CyberSecurity.

  • ✇ASEC BLOG
  • The Weak Link Identified by AI: October 2026, When the Outer Contact Point Collapsed ATCP
    Security Blind Spots Identified by AI The large-scale data breaches disclosed in quick succession in South Korea and Japan in October 2026 mostly originated not from internal core systems, but from peripheral entry points such as externally exposed web services, app backend APIs, and outsourced SaaS (services provided by third-party vendors via the cloud, such […]
     
  • ↗️

The Weak Link Identified by AI: October 2026, When the Outer Contact Point Collapsed

✇ASEC BLOG
Por:ATCP
27 de Outubro de 2026, 12:00
Security Blind Spots Identified by AI The large-scale data breaches disclosed in quick succession in South Korea and Japan in October 2026 mostly originated not from internal core systems, but from peripheral entry points such as externally exposed web services, app backend APIs, and outsourced SaaS (services provided by third-party vendors via the cloud, such […]
  • ✇Cybersecurity News
  • YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution Do Son
    Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now. Related Posts: Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0 The post YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution appeare
     
  • ↗️

YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution

✇Cybersecurity News
Por:Do Son
27 de Outubro de 2026, 12:04

Hackers exploit YOOtheme Pro vulnerability CVE-2026-102785 (CVSS 10) for remote code execution, dropping webshells. Update to 5.0.53 now.

Related Posts:

The post YOOtheme Pro Vulnerability CVE-2026-102785 (CVSS 10) Exploited for Remote Code Execution appeared first on Daily CyberSecurity.

  • ✇ASEC BLOG
  • Q3 2026 Statistical Report on Malware Targeting Windows Database Servers ATCP
    Content The AhnLab SEcurity intelligence Center (ASEC) observed and classified attacks targeting MS-SQL servers and MySQL servers installed on Windows operating systems via the ASD infrastructure. This report summarizes the damage status, attack status, and the types of malware used in the attacks, based on logs identified in the third quarter of 2026. Purpose and […]
     
  • ↗️

Q3 2026 Statistical Report on Malware Targeting Windows Database Servers

✇ASEC BLOG
Por:ATCP
7 de Outubro de 2026, 12:00
Content The AhnLab SEcurity intelligence Center (ASEC) observed and classified attacks targeting MS-SQL servers and MySQL servers installed on Windows operating systems via the ASD infrastructure. This report summarizes the damage status, attack status, and the types of malware used in the attacks, based on logs identified in the third quarter of 2026. Purpose and […]
  • ✇ASEC BLOG
  • Q3 2026 Statistical Report on Malware Targeting Windows Web Servers ATCP
    Content The AhnLab SEcurity intelligence Center (ASEC) analyzed the attack status of Windows web servers in the third quarter of 2026 based on AhnLab Smart Defense (ASD) logs. The targets were Internet Information Services (IIS) web servers and Apache Tomcat web servers running in Windows environments, with attacks primarily exploiting unpatched vulnerabilities, misconfigurations, and inadequate […]
     
  • ↗️

Q3 2026 Statistical Report on Malware Targeting Windows Web Servers

✇ASEC BLOG
Por:ATCP
7 de Outubro de 2026, 12:00
Content The AhnLab SEcurity intelligence Center (ASEC) analyzed the attack status of Windows web servers in the third quarter of 2026 based on AhnLab Smart Defense (ASD) logs. The targets were Internet Information Services (IIS) web servers and Apache Tomcat web servers running in Windows environments, with attacks primarily exploiting unpatched vulnerabilities, misconfigurations, and inadequate […]

Vulnerability Attack Case: Installation of a Web Shell and Execution of a Scanner by Exploiting a Telerik UI Vulnerability

✇ASEC BLOG
Por:ATCP
27 de Setembro de 2026, 12:00
The AhnLab SEcurity intelligence Center (ASEC) has identified two vulnerability attack cases that exploited a remote code execution vulnerability (CVE-2019-18935) targeting unpatched Telerik UI for ASP.NET AJAX servers. In the first incident, after exploiting the vulnerability, the attacker executed a reverse shell, attempted to perform privilege escalation, and installed a web shell; in the second […]
  • ✇ASEC BLOG
  • Attack Cases for Domestic Web Servers Running SoftEther VPN in Korea ATCP
    The AhnLab SEcurity intelligence Center (ASEC) recently identified attack cases in which attackers targeted web servers in Korea to install SoftEther VPN. Attack cases involving the installation of SoftEther VPN, an open-source VPN, were previously discussed in the 2024 ASEC blog post titled “Analysis of Attack Cases Targeting ERP Servers in Korea to Install SoftEther […]
     
  • ↗️

Attack Cases for Domestic Web Servers Running SoftEther VPN in Korea

✇ASEC BLOG
Por:ATCP
10 de Agosto de 2026, 12:00
The AhnLab SEcurity intelligence Center (ASEC) recently identified attack cases in which attackers targeted web servers in Korea to install SoftEther VPN. Attack cases involving the installation of SoftEther VPN, an open-source VPN, were previously discussed in the 2024 ASEC blog post titled “Analysis of Attack Cases Targeting ERP Servers in Korea to Install SoftEther […]

[Joint Cybersecurity Advisory] Operation Double Barrel (The Relationship Between a State-Sponsored Threat Actor and the Gunra Ransomware Group)

✇ASEC BLOG
Por:ATCP
29 de Julho de 2026, 12:00
This technical analysis report was prepared as part of the joint cybersecurity advisory titled “Advisory on Cyberattacks Targeting Korean Citizens and Businesses by State-Sponsored Hacking Groups” issued by the Republic of Korea’s National Intelligence Service (NIS), National Police Agency (NPA), Korea Internet & Security Agency (KISA), and Financial Security Institute (FSI).   OverView AhnLab SEcurity […]

Case Study: Targeted Attack Case on an MS-SQL Server Involving the Installation of GotoHTTP and SoftEther VPN

✇ASEC BLOG
Por:ATCP
24 de Julho de 2026, 12:00
While monitoring attack cases targeting MS-SQL servers, the AhnLab SEcurity intelligence Center (ASEC) identified an instance in which the Larva-26009 threat actor installed the XMRig CoinMiner. While the installation of CoinMiner is common in attack cases targeting MS-SQL servers, in this particular attack case, the attacker installed VShell and GotoHTTP to gain control over the […]
  • ✇ASEC BLOG
  • Statistical Report on Malware Targeting Windows Web Servers in Q2 2026 ATCP
    Content In the second quarter of 2026, the AhnLab SEcurity intelligence Center (ASEC) compiled an analysis of the current attack status for poorly managed Windows web servers and classified the malware used in these attacks. The targets were Internet Information Services (IIS) web servers and Apache Tomcat web servers running in Windows environments. Purpose and […]
     
  • ↗️

Statistical Report on Malware Targeting Windows Web Servers in Q2 2026

✇ASEC BLOG
Por:ATCP
2 de Julho de 2026, 12:00
Content In the second quarter of 2026, the AhnLab SEcurity intelligence Center (ASEC) compiled an analysis of the current attack status for poorly managed Windows web servers and classified the malware used in these attacks. The targets were Internet Information Services (IIS) web servers and Apache Tomcat web servers running in Windows environments. Purpose and […]
❌
❌