Qld gov introduces data breach notification legislation – Security
The Queensland government has introduced a bill to set up a mandatory data breach notification scheme. The introduction of the scheme comes about 15 months…
Month: October 2023
Viasat says it will not replace satellite that malfunctioned – Telco/ISP
Viasat said it expects to recover less than 10 percent of the planned throughput on ViaSat-3 F1, its satellite that malfunctioned during deployment in July,…
Atlassian to buy video messaging provider Loom – Software
Atlassian has agreed to acquire privately held video messaging platform Loom for about US$975 million ($1.5 billion), beefing up its team collaboration tools to tap…
Malicious Solana, Kucoin packages infect NuGet devs with SeroXen RAT
Malicious NuGet packages appearing to have over 2 million downloads impersonate crypto wallets, crypto exchange, and Discord libraries to infect developers with the SeroXen remote access…
New CISA Advisories Highlight Vulnerabilities in Top ICS Products
It is important for users and administrators of ICS systems to take steps to mitigate the vulnerabilities identified in the CISA advisories. The Cybersecurity and…
Apple releases iOS 16 update to fix CVE-2023-42824 on older devices
Apple releases iOS 16 update to fix CVE-2023-42824 on older devices Pierluigi Paganini October 12, 2023 Apple released versions iOS 16.7.1 and iPadOS 16.7.1 to…
Ransomware attacks now target unpatched WS_FTP servers
Internet-exposed WS_FTP servers unpatched against a maximum severity vulnerability are now targeted in ransomware attacks. As recently observed by Sophos X-Ops incident responders, threat actors…
New Microsoft bug bounty program focuses on AI-powered Bing
Microsoft announced a new AI bounty program focused on the AI-driven Bing experience, with rewards reaching $15,000. With the AI-powered Bing experience as the first…
LinkedIn Phishing Scam Exploits Smart Links to Steal Microsoft Accounts
Cofense cybersecurity researchers have noticed a sudden uptick in phishing messages sent via LinkedIn, as they observed around 800 emails sent between July and August…
CISA catalog passed 1,000 known to be exploited vulnerabilities. Celebration time, or is it?
The CISA Known Exploited Vulnerabilities catalog has grown to cover more than 1,000 vulnerabilities since its launch in November 2021. On September 18, 2023, the…
Stalkerware activity drops as glaring spying problem is revealed
North America has a spying problem. Its perpetrators are everyday people. North America has a spying problem. Its perpetrators are everyday people. According to recent…
XSS via reportError
reportError란 함수를 아시나요? Chrome 95, Firefox 93 버전에 추가된 글로벌 메소드로 JS의 uncaught exception을 콘솔이나 글로벌 이벤트 핸들러로 넘겨주는 기능을 수행합니다. PortSwigger 측에서 reportError 함수를…