Network Security Archives

New Tech Programming Languages of 2025: Strategic Insights for Software Developers and C-Suite Executives

18 April 2025 by Krishna

New Tech Programming Languages of 2025: Strategic Insights for Software Developers and C-Suite Executives Introduction The software development landscape is evolving at an unprecedented pace, with 2025 witnessing the emergence of several innovative programming languages. These languages are not only reshaping how software is built but are also influencing critical business decisions, especially at the …

Continue

2024 CWE Top 25 Most Dangerous Software Weaknesses: Improper Neutralisation of Special Elements used in a Command (‘Command Injection’) CWE-77

18 March 2025 by Krishna

CWE-77 refers to the improper neutralisation of special elements used in a command. These special elements, when inadequately sanitised, allow attackers to inject malicious commands that the system interprets and executes. This vulnerability commonly appears in applications that dynamically construct system commands based on user inputs.

How Out-of-Bounds Write Vulnerabilities (CWE-787) Can Compromise Your Code — And Your Business

7 March 20257 March 2025 by Krishna

Out-of-bounds write vulnerabilities (CWE-787) are among the most dangerous weaknesses in software development. If left unchecked, these vulnerabilities can have significant repercussions, including data corruption, service outages, and, in the worst cases, remote code execution.

An out-of-bounds write occurs when a program writes data outside the bounds of allocated memory, causing code compromise in the software.

Penetration Testing OpenWRT: A Comprehensive Guide for Penetration Testers and Network Architects

27 February 2025 by Krishna

OpenWRT, while highly customisable, is not immune to the common security flaws that affect embedded devices. These can range from default configurations to poorly secured web interfaces

ACRStealer Exposed: How Cybercriminals Are Exploiting Google Docs for Malware Attacks

23 February 2025 by Krishna

What is ACRStealer?

ACRStealer is an **info stealer malware** designed to **extract sensitive information** from infected systems, including:

– **Antivirus identification** – determining which security solutions are present to evade detection.
– **Crypto wallet theft** – targeting stored cryptocurrency assets.
– **Login credentials theft** – stealing usernames and passwords for financial services, corporate accounts, and personal data.
– **Browser information extraction** – harvesting stored passwords, cookies, and browsing history.
– **File Transfer Protocol (FTP) credential theft** – compromising access to cloud and remote servers.
– **Text file harvesting** – reading and extracting information from text documents.

While information stealers are not new, **ACRStealer stands out** due to its **stealth tactics, sophisticated distribution, and abuse of legitimate cloud platforms**.