Dwaine Evans

The discovery of a critical zero-day vulnerability in TP-Link’s Archer, Deco, and Tapo series routers has sent a ripple of concern through the tech community. Found in both older and recent firmware versions up to November 4, 2024, this security flaw exposes users to potentially devastating attacks involving malicious command injection. Initiated in the 2023 firmware of the AXE75 router,

In an alarming development, the North Korean-linked Kimsuky group has ramped up phishing campaigns aimed at stealing credentials from researchers, financial institutions, and corporate officials. These nefarious efforts demonstrate an increase in sophistication, employing domain impersonation and malware-free techniques designed to evade detection and maximize the impact of their operations. As this threat evolves, cybersecurity experts are sounding alarms to

Cisco has issued an updated advisory alerting customers about the active exploitation of a decade-old security vulnerability in its Adaptive Security Appliance (ASA), specifically CVE-2014-2120. This flaw, initially identified in 2014 with a CVSS score of 4.3, involves insufficient input validation in ASA’s WebVPN login page. As a result, an unauthenticated remote attacker could potentially execute a cross-site scripting (XSS)