Critical Google Chrome User-After-Free Site Isolation Flaw
As part of a security update for Chrome, Google has upgraded the Stable channels to 118.0.5993.70 for Mac and Linux and 118.0.5993.70/.71 for Windows. The…
Category: CyberSecurityNews
Large-scale Akira Ransomware Attacking Unsecured Computers
In order to disrupt human-operated ransomware attacks and prevent attackers from advancing their objectives through lateral movement, it is crucial to swiftly contain any compromised…
New WordPress Malware as Cache Plugin Creates Rogue Admin
A novel kind of malware that acts as a sophisticated backdoor that can carry out several operations while impersonating a legitimate plugin has been identified.…
Google initiates the End of Passwords, making passkeys
Google, a well-known tech giant, has introduced a new feature called “passwordless by default”. This feature aims to simplify the login process for users by…
Heap-based Buffer Overflow Flaw in cURL Using SOCKS5 Proxy
Previously, the maintainers of the popular curl command line tool posted a pre-announcement regarding two vulnerabilities that affected both the curl tool and the libcurl…
How LLMs-like Models like ChatGPT patch the Security Gaps
The emergence of Large Language Models (LLMs) is transforming NLP, enhancing performance across NLG, NLU, and information retrieval tasks. They are primarily excellent in text-related…
Nation-state Hackers Exploiting Confluence Zero-day Vulnerability
Microsoft has detected the nation-state threat actor Storm-0062, also known as DarkShadow or Oro0lxy, exploiting CVE-2023-22515 in the wild since September 14, 2023. The vulnerability…
SAP Patches for XSS, Log Injection & Other Vulnerabilities
SAP has released the security patches for the Patch Day of October 2023, in which they release new Security Notes and 2 updates to the…
HTTP/2 Rapid Reset Zero-day Flaw Exploited to Launch Massive DDoS Attack
Cloudflare was unexpectedly hit by an enormous HTTP attack that peaked at over 201 million requests per second. Starting on August 25, 2023, this onslaught…
Hackers Exploiting Citrix NetScaler Vulnerability Steal Credentials
Threat actors were attacking unpatched NetScaler Gateways using the vulnerability classified as CVE-2023-3519 to inject malicious script into the HTML of the authentication web page and…
New APT Group Using Custom Malware to Attack IT Industries
An unidentified APT group deployed custom malware and public tools to target organizations in Taiwan’s following sectors:- Manufacturing IT Biomedical This campaign also targeted a…
U.S. Army Sergeant Arrested for Spying Secrets to China: DoJ
In a shocking turn of events, a former U.S. Army Sergeant, Joseph Daniel Schmidt, has been arrested and indicted on charges of attempting to deliver…