Hackers Exploited Critical Microsoft Outlook Vulnerability
In response to a recent vulnerability identified in Outlook, Microsoft recently published a proper guide for its customers to help them discover the associated IoCs.…
Month: March 2023
A bug revealed ChatGPT users’ chat history, personal and billing data
A vulnerability in the redis-py open-source library was at the root of last week’s ChatGPT data leak, OpenAI has confirmed. Not only were some ChatGPT…
New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords
Mar 27, 2023Ravie LakshmananData Safety / Endpoint Security A new information-stealing malware has set its sights on Apple’s macOS operating system to siphon sensitive information…
CBI launches campaign to boost UK tech unicorns
The Confederation of British Industry (CBI) has launched a campaign to bolster support for the UK’s most innovative high-growth tech companies so they can transform…
Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts | Sam Curry
Over the last few years, usage of vulnerability disclosure and bug bounty programs have increased significantly. It is now almost expected to have easy outlets…
Latitude Financial Data Breach: 14 Million Customers Affected
The Australian consumer lender, Latitude Financial, has suffered a major cyber attack, leading to a data breach of passport and driver license numbers, impacting 14…
BEC scammers are after physical goods, the FBI warns
BEC attacks are usually aimed at stealing money or valuable information, but the FBI warns that BEC scammers are increasingly trying to get their hands…
Where SSO Falls Short in Protecting SaaS
Mar 27, 2023The Hacker NewsSaaS Security Single sign-on (SSO) is an authentication method that allows users to authenticate their identity for multiple applications with just…
France latest to ban TikTok on government devices
Following the UK government and parliamentary bans enacted on video-sharing social media platform TikTok – citing data privacy concerns given TikTok’s Chinese origins – the…
Buro De Credito Data Breach Remains Unconfirmed
Buró de Crédito data breach remains unconfirmed despite a vendor on Telegram claiming to sell data from the Mexican credit information bureau. The credit agency…
Twitter Source Code Leaked, Former Employee Behind Breach
Twitter source code leaked! In a new development of the ongoing Twitter security incident, parts of the microblogging website’s source code have been leaked. Twitter…
Extracting SSH Private Keys From Windows 10 ssh-agent
This weekend I installed the Windows 10 Spring Update, and was pretty excited to start playing with the new, builtin OpenSSH tools. Using OpenSSH natively…