Leveraging Cloud Computing Provision to Solve Problems in Digital Forensics

Cyber Forensics 4 ALL is an online cloud-based education platform that aims to enhance students’ learning experience in the field of Computer Forensics and Digital Evidence. Our goal is to educate students on the nuances of this field while making the learning experience better. By simulating well-known, real-world incidents involving criminal activity and the accompanying cyber investigations, we have provided case studies that will provide a contextual-based, online-learning environment. We also strive to help the law enforcement study the incidents and provide more efficient ways to carry out the forensic investigations.

CrushFTP CVE-2025-2825 flaw actively exploited in the wild

April 1, 2025

Attackers exploit CrushFTP CVE-2025-2825 flaw, enabling unauthenticated access to unpatched devices using public proof-of-concept code. Threat actors are exploiting a critical authentication bypass vulnerability, tracked as CVE-2025-2825, in the CrushFTP file transfer software. Attackers are using exploits based on publicly available proof-of-concept exploit code. The vulnerability impacts CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0, it […]

Read Full Article

France’s antitrust authority fines Apple €150M for issues related to its App Tracking Transparency

April 1, 2025

France fines Apple €150M for abusing its dominance in ATT consent practices on iOS and iPadOS from 2021 to 2023. France’s Autorité de la concurrence fined Apple €150M for abusing its dominance in App Tracking Transparency (ATT) consent practices on iOS and iPadOS between April 26, 2021 and July 25, 2023. Apple launched ATT with […]

Read Full Article

Hiding WordPress malware in the mu-plugins directory to avoid detection

April 1, 2025

Sucuri researchers spotted threat actors deploying WordPress malware in the mu-plugins directory to evade security checks. In February, Sucuri warned of threat actors exploiting WordPress mu-plugins, which auto-load without activation, to maintain persistence and evade detection by hiding backdoors in the plugin directory. “Unlike regular plugins, must-use plugins are automatically loaded on every page load, […]

Read Full Article

U.S. CISA adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog

March 31, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Smart Licensing Utility vulnerability, tracked as CVE-2024-20439, to its Known Exploited Vulnerabilities (KEV) catalog. Last week, Cisco disclosed two vulnerabilities in its Smart Licensing Utility: CVE-2024-20439, […]

Read Full Article