Multiple Notepad++ Flaws Let Attackers Execute Arbitrary Code
Several Buffer Overflow vulnerabilities have been discovered in Notepad++ that can be exploited by threat actors for malicious purposes. The severities of these vulnerabilities vary…
Month: August 2023
Microsoft Edge Privilege Escalation Flaw
Microsoft Edge has published a release note that mentioned a Privilege escalation vulnerability with the CVE ID of CVE-2023-36741 and has a CVSS Score of…
Tor Announces Proof-of-Work to Defend Against DoS Attacks
Tor (The Onion Router) has officially introduced a Proof-of-Work (PoW) mechanism to defend from attackers doing Denial of Service attacks. Users worldwide have widely adopted…
Sponsored Ads Scam Drain $74 Million From Australians
Australia’s National Anti-Scam Centre (NASC), through its initiative Scamwatch, has drawn attention to a concerning trend of online scams that cost the nation’s residents nearly…
Japan’s JPCERT warns of new ‘MalDoc in PDF’ attack technique
Japan’s JPCERT warns of new ‘MalDoc in PDF’ attack technique Pierluigi Paganini August 29, 2023 Japan’s JPCERT warns of a new recently detected ‘MalDoc in…
Microsoft Sounds Alarm on AiTM Attacks
Aug 29, 2023THNOnline Security / Cyber Threat Microsoft is warning of an increase in adversary-in-the-middle (AiTM) phishing techniques, which are being propagated as part of…
NBN Co targets apartment blocks for next fibre upgrade wave – Telco/ISP
NBN Co is hoping to strike agreements with the body corporates of 50,000 strata buildings nationwide for a subsidised upgrade to fibre. The network builder…
Rackspace spends $10m in ransomware cleanup costs
In November of the previous year, Rackspace, a well-known company providing cloud computing services, fell victim to a cyber-attack orchestrated by the Play Ransomware group.…
8Base Hackers Claim Skyroot Aerospace Ransomware Attack
The 8Base ransomware group has claimed yet another ransomware attack in India. The group has taken aim at the pioneering Indian privately held space launch…
What makes a good ASM solution stand out
In this Help Net Security interview, Patrice Auffret, CTO at Onyphe, explains how the traditional perimeter-based security view is becoming obsolete. He suggests that organizations…
Advisory: Flarum LFI – Assetnote
Summary An attacker with a basic user forum account can specify a malicious avatar URL that discloses the contents of arbitrary local files on the…
Is the cybersecurity community’s obsession with compliance counter-productive?
Does anyone think the chances of surviving a plane crash increase if our tray tables are locked and our carry-on bags are completely stowed under…