Collaborate Disseminate
A day after releasing Patch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, adding that it’s working to remediate the issue in an upcoming security update.
Tracked as CVE-2… Continue reading Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability
Hackers have siphoned $611 million worth of cryptocurrencies from a blockchain-based financial network in what’s believed to be one of the largest heists targeting the digital asset industry, putting it ahead of breaches targeting exchanges Coincheck a… Continue reading Hackers Steal Over $600 Million Worth of Cryptocurrencies from Poly Network
Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service (DNSaaS) providers that could allow attackers to exfiltrate sensitive information from corporate networks.
“We found a simple loophole that allowed… Continue reading Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic
Adobe on Tuesday shipped security updates to remediate multiple critical vulnerabilities in its Magento e-commerce platform that could be abused by an attacker to execute arbitrary code and take control of a vulnerable system.
The issues affect 2.3.7, … Continue reading Magento Update Released to Fix Critical Flaws Affecting E-Commerce Sites
Microsoft on Tuesday rolled out security updates to address a total of 44 security issues affecting its software products and services, one of which it says is an actively exploited zero-day in the wild.
The update, which is the smallest release since … Continue reading Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability
A Chinese cyber espionage group has been linked to a string of intrusion activities targeting Israeli government institutions, IT providers, and telecommunications companies at least since 2019, with the hackers masquerading themselves as Iranian actor… Continue reading Experts Believe Chinese Hackers Are Behind Several Attacks Targeting Israel
Unidentified threat actors are actively exploiting a critical authentication bypass vulnerability to hijack home routers as part of an effort to co-opt them to a Mirai-variant botnet used for carrying out DDoS attacks, merely two days after its public … Continue reading Hackers Exploiting New Auth Bypass Bug Affecting Millions of Arcadyan Routers
A critical vulnerability has been disclosed in hardware random number generators used in billions of Internet of Things (IoT) devices whereby it fails to properly generate random numbers, thus undermining their security and putting them at risk of atta… Continue reading A Critical Random Number Generator Flaw Affects Billions of IoT Devices
A new Android trojan has been found to compromise Facebook accounts of over 10,000 users in at least 144 countries since March 2021 via fraudulent apps distributed through Google Play Store and other third-party app marketplaces.
Dubbed “FlyTrap,” the … Continue reading Beware! New Android Malware Hacks Thousands of Facebook Accounts
Pulse Secure has shipped a fix for a critical post-authentication remote code execution (RCE) vulnerability in its Connect Secure virtual private network (VPN) appliances to address an incomplete patch for an actively exploited flaw it previously resol… Continue reading Pulse Secure VPNs Get New Urgent Update for Poorly Patched Critical Flaw