Latest news
Recently, there was a serious data breach incident involving the well-known password management software, LastPass
Apple has now released the first Rapid Security Response update for iOS 16.4 (a) to testers, which is likely only for testing purposes
CVE-2023-20078 in the web-based management interface of Cisco IP Phone allow attackers to execute arbitrary commands with root privileges
The U.S. Marshals Service (USMS) announced that it is investigating a major security breach that resulted in the leak of sensitive information
An attacker could exploit CVE-2023-1017 to execute arbitrary code in the TPM context or crash the TPM chip/process or rendering it unusable.
Tracked as CVE-2023-27320, the flaw exists in sudo's per-command chroot feature, which allows users to specify an alternate root directory
According to theregister, Telus is currently investigating a data breach incident involving employee information and source code.
Hackers released pirated Final Cut Pro software that carries the XMRig mining program, which specifically uses Mac users to mine Monero coins
hackers used a phishing attack to obtain a verification code from an Activision employee, gaining access to their Slack account
Most critical flaw affecting ZoneMinder tracked as CVE-2023-26035 (CVSS score: 10), stems from an insufficient validation of permissions check
various Android malware families are mimicking icon & name of ChatGPT to mislead unsuspecting users, making them believe it is a genuine app
The Amsterdam cyber crime police in the Netherlands recently announced the arrest of three criminals involved in ransomware activities
Apache Airflow has published a security advisory to warn users about multiple vulnerabilities affecting many of its packages.
CVE-2023-22920 could allow a remote attacker to gain unauthorized access to the system, caused by a factory-default misconfiguration
Bugs tracked as CVE-2023-25157 affecting GeoServer and CVE-2023-25158 affecting GeoTools carry a critical severity rating of 9.8 on the CVSS
Security researchers discovered CVE-2023-22578 & CVE-2023-25813, two critical-severity defects in Sequelize assessed with a CVSS score of 10
CVE-2022-41223 and CVE-2022-40765 can be exploited by a remote authenticated attacker to execute arbitrary code on the system.
The serious flaw, CVE-2023-20858, carries a CVSS severity score of 9.1, adding to the urgency for organizations to apply available patches.