Category Security

April 8, 2023Rabbi LakshmananVulnerability/Software The maintainer of the vm2 JavaScript sandbox module has shipped a patch to address a critical flaw that can be exploited to break security boundaries and execute arbitrary shellcode. This flaw, which affects all versions up…

April 8, 2023Rabbi LakshmananCyber ​​War / Cyber ​​Threat The Iranian nation-state group known as the muddy water It has been observed performing destructive attacks in hybrid environments under the guise of ransomware operations. This is because new research from the…

April 8, 2023Rabbi LakshmananZero-day / endpoint security Apple released security updates for its iOS, iPadOS, macOS, and Safari web browsers on Friday to address two zero-day vulnerabilities in the wild. The two vulnerabilities are: CVE-2023-28205 – A use-after-free issue in…

April 7, 2023Rabbi LakshmananCyber ​​Threat / Online Security In another sign that Telegram is becoming an increasingly thriving cybercrime hub, researchers say attackers are using the messaging platform to sell phishing kits and help set up phishing campaigns. I discovered…

Less than a month later, Twitter indirectly claimed that some of its source code had been leaked on code-sharing platform GitHub by sending a copyright infringement notice and removing the offending repository. Admitted. The latter is currently inaccessible, but has…

April 7, 2023Rabbi Lakshmanan Microsoft said it is working with Fortra and the Health Information Sharing and Analysis Center (Health-ISAC) to tackle Cobalt Strike exploits by cybercriminals distributing malware, including ransomware. To that end, tech giant Digital Crimes Unit (DCU)…

April 7, 2023Rabbi Lakshmananindustrial control system The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of eight critical flaws in industrial control systems (ICS) affecting products from Hitachi Energy, mySCADA Technologies, industrial control links, and Nexx. issued a recommendation.…

The UK Criminal Records Office (ACRO) has reportedly been battling a “cyber incident” for two months, creating a backlog of visa applicants and potentially putting customer information at risk. The National Police Force checks police records of British citizens who…

A mid-sized law firm representing Uber has notified an unknown number of drivers that sensitive data has been exposed and stolen in a cyberattack. New Jersey-based Genova Burns disclosed the breach in an email to customers it first obtained. register.…

Nexx is a maker of “smart” devices, as well as alarms, garage door openers and more. Unfortunately, their response to vulnerabilities isn’t all that smart. According to a blog post by security researcher Sam Sabetan, Nexx not only ignored his…