A Pre-Auth Command Injection Sophos Vulnerability Exploited In The Wild
A patched Sophos vulnerability Web Appliance was found to be exploited in the wild. The first advisory about the critical vulnerability CVE-2023-1671 was published on…
Month: April 2023
0xdump Claims Cyber Attack On The Crypto Platform
FYN data breach alert! A recent cyber attack on the global crypto platform FYN by a hacker group known as “0xdump” has apparently left 14…
Introducing HackerOne Assets | HackerOne
Attack Resistance Management is the management of human security tests on your attack surface designed to increase your resistance to attackers. It is a cross-functional…
How product security reached maturity
Product security has been driving major changes throughout the automotive, medical, and industrial sectors. However, just a few short years ago, it was a term…
How artificial intelligence and automation can streamline procurement
KPMG’s Global economic outlook for the first half of 2023 illustrates the extent of uncertainty in business. Although the outlook for the global economy took…
New All-in-One “EvilExtractor” Stealer for Windows Systems Surfaces on the Dark Web
Apr 24, 2023Ravie LakshmananCyber Risk / Dark Web A new “all-in-one” stealer malware named EvilExtractor (also spelled Evil Extractor) is being marketed for sale for…
Podcast Audio Quality: AI-based Post-processing vs. Hardware
Hardware is supposed to be better for applying effects, but AI-powered software seems to be taking over Created/Updated: October 27, 2022 I’ve been podcasting since…
Yellow Pages Canada confirms cyber attack as Black Basta leaks data
Yellow Pages Group, a Canadian directory publisher has confirmed to BleepingComputer that it has been hit by a cyber attack. Black Basta ransomware and extortion gang…
Lung Cancer detection possible 10 Years prior with AI
Lung cancer is a dangerous and contagious disease that spreads throughout the body quickly and is not easy to detect in its early stages. However,…
Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers
Apr 24, 2023Ravie LakshmananThreat Intel / Cyber Attack Print management software provider PaperCut said that it has “evidence to suggest that unpatched servers are being…
Lockbit 3.0 Ransomware Gang Steals 600 BG Data
Fullerton India Credit Company Limited, one of India’s major loan providers, has allegedly fallen victim to the notorious Lockbit 3.0 ransomware gang. Hackers have gained…
Understanding Public and Private Bug Bounties and Vulnerability Disclosure Programs
How Are Bug Bounty Programs and Vulnerability Disclosure Programs Different? Let’s start with the similarities. Both bug bounties and VDPs aim to collect vulnerability reports…