Collaborate Disseminate
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478.
“These types of vulnerabiliti… Continue reading CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog
Researchers have disclosed details of a new security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenticated attacker to recover user-related information.
Tracked as CVE-2021-4191 (CVSS score: 5…. Continue reading New Security Vulnerability Affects Thousands of Self-Managed GitLab Instances
Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app to coordinate their activities, leak data, and spread disinformation, as the Russia-Ukraine conflict enters its eighth day.
A new analysis by Israeli cybersecurity… Continue reading Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism
As the ongoing Russia-Ukraine conflict continues to escalate, the Russian government on Thursday released a massive list containing 17,576 IP addresses and 166 domains that it said are behind a series of distributed denial-of-service (DDoS) attacks ai… Continue reading Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks
A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the “first side-channel attack” on homomorphic encryption that could be exploited to leak data as the encryption process is und… Continue reading Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption
Cisco this week shipped patches to address a new round of critical security vulnerabilities affecting Expressway Series and Cisco TelePresence Video Communication Server (VCS) that could be exploited by an attacker to gain elevated privileges and exec… Continue reading Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products
American chipmaking company NVIDIA on Tuesday confirmed that its network was breached as a result of a cyber attack, enabling the perpetrators to gain access to sensitive data, including source code purportedly associated with its Deep Learning Super … Continue reading Hackers Who Broke Into NVIDIA’s Network Leak DLSS Source Code Online
An analysis of data crowdsourced from more than 200,000 network-connected infusion pumps used in hospitals and healthcare entities has revealed that 75% of those medical devices contain security weaknesses that could put them at risk of potential expl… Continue reading Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities
The U.S. Senate unanimously passed the “Strengthening American Cybersecurity Act” on Tuesday in an attempt to bolster the cybersecurity of critical infrastructure owners in the country.
The new bipartisan legislation, among other things, stipulates en… Continue reading U.S. Senate Passes Cybersecurity Bill to Strengthen Critical Infrastructure Security
An Android banking trojan designed to steal credentials and SMS messages has been observed once again sneaking past Google Play Store protections to target users of more than 400 banking and financial apps, including those from Russia, China, and the … Continue reading TeaBot Android Banking Malware Spreads Again Through Google Play Store Apps