Cisco Meeting Server Flaw Let Attacker Trigger a DoS Attack
Cisco has warned about a serious security issue in the Web Bridge feature of the Cisco Meeting Server. The flaw (CVE-2023-20255) could let someone who is…
Category: CyberSecurityNews
Fix for 15 security Flaws
Google has released Chrome 119 to the stable channel for Windows, Mac, and Linux, along with 15 security patches. Version 119.0.6045.105 for Linux and macOS…
Next Generation CVSS v4.0 Vulnerability Scoring System Released
FIRST, the Forum of Incident Response and Security Teams has recently unveiled the latest version of their Common Vulnerability Scoring System (CVSS). The new CVSS…
Boeing Admits Cyberattack; Lockbit Claims Zero-Day Exploit
Boeing, the aerospace industry leader, has recently reported a cyberattack on its systems. The attack primarily targeted the company’s parts and distribution business. While this…
Iranian Group Utilize IIS-based Backdoors Compromise Windows
A new threat actor who is found to be associated with Iran’s Ministry of Intelligence and Security (MOIS) IIS has been discovered to be conducting…
VMware Workspace Flaw Let Attacker Redirect to Malicious Source
An open redirect vulnerability in the VMware Workspace ONE UEM console has been identified as CVE-2023-20886, which has a CVSS score of 8.8 and is classified…
Kubernetes Security Flaw Let Attacks Escalate Admin Privileges
A new privilege escalation vulnerability has been discovered in Kubernetes, which allows threat actors to gain administrative privileges on affected pods. The CVE for this…
Knight Ransomware Attack Windows Computer to Exfiltrate Data
Knight ransomware, a relatively new ransomware gang that first appeared in August 2023, targets Windows computers to steal sensitive data. Several industrial sectors have been…
Palo Alto Networks to Acquire Cloud Security Start-up Dig
One of the top companies in the cybersecurity industry, Palo Alto Networks, has recently finalized the acquisition of Dig Security, an up-and-coming startup that specializes…
Strategic App Management: Simplifying and Securing Workflows
In today’s tech-driven world, our reliance on mobile devices is second nature. With apps powering our daily tasks, smooth app management across enterprise devices is…
Over 700 Zero-Day Vulnerabilities Identified in Q3 2023
The term “zero-day” indicates no time between developers discovering a vulnerability and attackers exploiting it. According to the Indusface zero-day vulnerability report, over 700 0-day…
Within 5 Minutes, Hackers Were Able to Get AWS Credentials From GitHub
Recent reports indicate that a new campaign under the name EleKtra-Leak has been identified to target AWS IAM (Identity and Access Management) credentials within minutes…