Category Security

Oct 22, 2024Ravie LakshmananVulnerability / Software Security Details have emerged about a now-patched security flaw in Styra’s Open Policy Agent (OPA) that, if successfully exploited, could have led to leakage of New Technology LAN Manager (NTLM) hashes. “The vulnerability could…

In episode 21 of “The AI Fix””, Mark and Graham comfort themselves with a limbless AI pet as they learn about a terrifying robot dog with a flamethrower, fission-powered data centres, AI suicide pods, and a multi-limbed robot with a…

Meta has announced it is deploying facial recognition technology to detect celeb-bait ad scams and recover compromised accounts. The social media giant is testing the technology on Facebook and Instagram, and hopes the approach will help inform the wider industry’s…

Oct 22, 2024Ravie LakshmananIdentity Management / Security Automation Service accounts are vital in any enterprise, running automated processes like managing applications or scripts. However, without proper monitoring, they can pose a significant security risk due to their elevated privileges. This…

Transak, a fiat-to-crypto payment gateway provider, has reported a security incident which has impacted 92,554 of its users. Attackers gained unauthorized access to one of the firm’s employee laptops through a sophisticated phishing attack. The firm said that the attacker…

Nation-states’ “permissive” behaviors have contributed to the proliferation and abuse of offensive cyber tools and services, according to two British think tanks. The Royal United Services Institute for Defence and Security Studies (RUSI) and the Royal Institute of International Affairs…

Oct 22, 2024Ravie LakshmananVulnerability / Enterprise Security VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), concerns…

Oct 22, 2024Ravie LakshmananVulnerability / Cyber Threat The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation as a zero-day.…

Severe cryptographic vulnerabilities have been uncovered in several popular end-to-end encrypted (E2EE) cloud storage platforms used by millions of people. ETH Zurich researchers Jonas Hofmann and Kien Tuong Truong analyzed five major providers—Sync, pCloud, Icedrive, Seafile and Tresorit— and revealed…

The Bumblebee malware loader could have re-emerged months after Europol-led Operation Endgame disrupted it in May 2024. A new infection chain which deploys Bumblebee malware has been uncovered in a new report from Netskope Threat Labs. This is the first…