The threat actors behind MacStealer have crafted an elaborate scheme to trick users into downloading their malware.
Do Son
Western Digital, a prominent name in data technology products, recently faced a significant network security incident
Two distinct Qakbot campaigns have been identified, each utilizing OneNote documents to deliver and execute the malware
Within less than 20 days of adopting ChatGPT, Samsung experienced three incidents of semiconductor trade secret leakage
CVE-2023-0189 and CVE-2023-0184 (CVSS scores of 8.8) vulnerabilities affect both Windows and Linux versions of the NVIDIA GPU Display Driver
CVE-2023-25076 affects the latest version on GitHub, the 0.6.0-2 Debian package, and potentially several forks of the original repository
TA473 started exploiting the Zimbra vulnerability CVE-2022-27926 in phishing campaigns targeting European government entities
CVE-2023-0614 highlights a vulnerability that allows attackers to access and potentially obtain confidential information
CVE-2023-28326 is considered critical and can potentially cause serious harm to users and organizations that use this software.
Dubbed "MacStealer," the attack targets Wi-Fi networks with malicious insiders and exploits client isolation bypasses (CVE-2022-47522)
However, an e-commerce giant Pinduoduo used CVE-2023-20963 in conjunction with prior vulnerabilities to re-exploit the flaws.
The CVE-2023-25196 vulnerability also involves improper neutralization of special elements used in SQL commands.
CVE-2023-1177 is a more severe security vulnerability with a CVSS score of 10, enables an attacker to download arbitrary files from the host server
CVE-2022-47502 is a critical-severity vulnerability that affects Apache OpenOffice versions 4.1.13 and older.
Deno, the popular runtime for JavaScript, TypeScript, has recently been identified with a critical security vulnerability (CVE-2023-28445)
a critical vulnerability with a CVSS score of 9.8, resides in the WooCommerce Payments plugin versions 4.8.0 through 5.6.1
Due to CVE-2023-28432, MinIO returns all environment variables, including sensitive information like MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD