The first Patch Tuesday fixes shipped by Microsoft in 2023 address a total of 98 security flaws, including one bug the company said was actively exploited in the wild. Of the 98 issues, 11 were rated Critical and 87 were…
Hosting service GitHub has added a new feature to automatically configure code scanning on your repositories. This new feature, called “Default Setup”, simplifies getting started with code scanning in your repositories using Python, JavaScript, and Ruby. “With just a few…
January 10, 2023Rabbi LakshmananCyber Threat / Data Security A new malware campaign has been observed targeting Italy using phishing emails designed to deploy information-stealing programs on compromised Windows systems. Uptycs security researcher Karthickkumar Kathiresan said in the report: Campaign details…
US Supreme Court gWhatsApp gave the go-ahead to file a lawsuit Monday against Israeli surveillance firm NSO Group, alleging it installed Pegasus spyware on about 1,400 devices with WhatsApp installed. More specifically, the court ruled to allow WhatsApp to sue…
January 10, 2023Rabbi LakshmananAdvanced Persistent Threats Advanced Persistent Threats (APT) group known as strong sympathy It targeted Android users with a Trojanized version of the Telegram app via a fake website masquerading as a video chat service called Telegram. shaggle.…
A new high-severity vulnerability has been discovered in the popular open-source JavaScript package JsonWebToken. Exploiting the vulnerability could allow an attacker to perform remote code execution (RCE) on the server and validate maliciously crafted JSON Web Token (JWT) requests, Palo…
January 10, 2023Rabbi LakshmananPrivacy / Encryption A comprehensive analysis of the cryptographic protocols used by the Swiss encrypted messaging application Threema reveals a number of potential exploits to defeat authentication protections or recover users’ private keys. A loophole has been…
The Ukrainian government considers Russian cyberattacks on the country’s critical civilian infrastructure to be potential war crimes, cybersecurity officials said. in an interview with Politico, Victor Zhora, Chief Digital Transformation Officer of Ukraine’s State Special Service for Communications and Information…
In the UK, through the Funded Cyber Essentials Programme, launched by the National Cyber Security Center (NCSC) on 9 January 2023, small organizations in high-risk sectors, such as charities and legal aid firms, will receive cybercriminals from the government. Free…
January 10, 2023Rabbi LakshmananSoftware Security / Supply Chain A serious security flaw was discovered in the open source jsonwebtoken (JWT) library. Successful exploitation could lead to remote code execution on the target server. In a report on Monday, Artur Oleyarsh,…
All Rights Reserved. Kowatek Blog by IWUCHI
Home | About Us | Disclaimer | Privacy Policy | Contact Us
