The Security Blog From Gridinsoft
$GROK Presale Scam: Crypto Investment Fraud
The $GROK Presale Scam tricks people into investing in a fake cryptocurrency by using Elon Musk’s name and his Grok…
CVE-2025-21605 Redis DoS Vulnerability Discovered, Patch Now
So Redis walks into a bar and the bartender asks, “Why so bloated?” Turns out Redis has been hitting the…
WordPress Ad-Fraud Plugins and the Scallywag Operation
Cybersecurity researchers have found a large-scale ad fraud scheme called “Scallywag”. It used WordPress plugins to generate massive fraudulent ad…
MITRE Warns CVE Program Funding Expires on April 16
MITRE, a key player in cybersecurity awareness, has issued a warning about the funding for the Common Vulnerabilities and Exposures…
CVE-2025-32395 Vite Vulnerability Exposes Sensitive Files
A newly discovered Vite vulnerability, a widely used frontend development tool, has been assigned the identifier CVE-2025-32395. This flaw affects…
Samsung Zero-Click Vulnerability Discovered, Update Now
Google Project Zero researcher reports on a Samsung zero-click vulnerability…
New Mirai Based Botnet Exploits Four-Faith Vulnerability
Researchers detected another IoT botnet based off of Mirai malware…
25 Chrome Extensions Compromised, Exposing 2M+ Users
A targeted attack on Chrome extensions publishers compromised the add-ons…
Apache Traffic Control Critical SQLi Vulnerability Fixed
Apache Traffic Control platform got a critical security patch that…
Lockbit 4.0 Released, With New Infrastructure and Features
Lockbit ransomware group steps up with a new version of…
LockBit Ransomware Developer Arrested and Extradicted in Israel
US authorities have detained a developer associated with the LockBit…
BeyondTrust Remote Access Vulnerability Exploited, Update Now
BeyondTrust’s Privileged Remote Access (PRA) and Remote Support (RS) solutions…
New Ledger Phishing Campaign Targets Recovery Phrases
Owners of popular hardware cryptocurrency wallets Ledger have become the…
Cleo File Transfer Vulnerabilities Exploited by Cl0p Ransomware
Recent cybersecurity incidents have exposed critical vulnerabilities in Cleo’s file…
Aiocpa PyPI Package Targets Crypto Wallets
A malicious package named aiocpa was identified on the Python…
Ivanti Fixes Authentication Bypass Vulnerability, Patch Now
Ivanti has alerted its customers to a critical authentication bypass…
Veeam’s Critical RCE Vulnerability Patch for Service Provider Console
Veeam has released security updates to address a critical flaw,…
