Bug Bytes #208 – Burp gets an update, Sharefile gets a CVE and JavaScript files get analysed
Bug Bytes is a weekly newsletter curated by members of the bug bounty community. The second series is curated by InsiderPhD. Every week, she keeps…
Month: July 2023
Chrome 115 Patches 20 Vulnerabilities
Google on Tuesday announced the release of Chrome 115 to the stable channel, with patches for 20 vulnerabilities, including 11 reported by external researchers. Of…
Ukraine takes down massive bot farm, seizes 150,000 SIM cards
The Cyber Police Department of the National Police of Ukraine dismantled another massive bot farm linked to more than 100 individuals after searches at almost…
U.S. Cyber Trust Mark labeling program raises the bar for smart devices’ cybersecurity
The Biden-Harris Administration has announced a cybersecurity certification and labeling program to help Americans more easily choose smart devices that are safer and less vulnerable…
Google Cloud chalked up higher growth rate in 2022 than AWS and Microsoft, Gartner data shows
Google Cloud achieved higher growth on a year-over-year (YoY) basis between 2021 and 2022 than the other top four public cloud firms, Gartner’s latest global…
Oracle Releases 508 New Security Patches With July 2023 CPU
Oracle on Tuesday announced the release of 508 new security patches as part of the July 2023 CPU, including more than 75 patches that resolve…
US govt bans European spyware vendors Intellexa and Cytrox
The U.S. government has banned European commercial spyware manufacturers Intellexa and Cytrox, citing risks to U.S. national security and foreign policy interests. The Commerce Department’s…
Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation
Jul 19, 2023THNCloud Security / Vulnerability Cybersecurity researchers have uncovered a privilege escalation vulnerability in Google Cloud that could enable malicious actors tamper with application…
Prepare for quantum to fundamentally change PKI effectiveness
Encryption is a fundamental aspect of Public Key Infrastructure (PKI) – a service used to confirm identity by proving ownership of a private key. Encryption…
Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned
Citrix on Tuesday announced patches for three vulnerabilities, including an actively exploited zero-day that allows remote code execution. The zero-day, tracked as CVE-2023-3519 and rated…
Tech support scams now use shipping companies to collect cash
FBI warns of a surge in tech support scams targeting the elderly across the United States and urging victims to dispatch cash concealed within magazines…
IT firms ramp up prices to drive post-pandemic revenue
The latest IT spending forecast form analyst Gartner points to a 4.3% increase in worldwide IT spending in 2023 compared with 2022. Gartner’s figures project…