Over 700 Zero-Day Vulnerabilities Identified in Q3 2023
The term “zero-day” indicates no time between developers discovering a vulnerability and attackers exploiting it. According to the Indusface zero-day vulnerability report, over 700 0-day…
Category: CyberSecurityNews
Within 5 Minutes, Hackers Were Able to Get AWS Credentials From GitHub
Recent reports indicate that a new campaign under the name EleKtra-Leak has been identified to target AWS IAM (Identity and Access Management) credentials within minutes…
Exploit Released for Cisco IOS XE Zero-day Vulnerability
Cisco was reported with a critical vulnerability last week, which has been actively exploited by threat actors in the wild. The vulnerability was assigned with…
Russian Hacking Tool Creates Fake Social Media Profiles in Seconds
The Kopeechka service, which refers to “penny” in Russian, is a new tool criminals use to quickly and easily generate hundreds of fake social media…
Boeing Breached by LockBit Ransomware Gang? Investigation Inprogress
Boeing, a major player in the aerospace industry, says it is “assessing” claims made by the LockBit ransomware group that it has taken a “tremendous amount”…
815 Million Indians Aadhaar Data Exposed on the Dark Web
A massive data breach has occurred, resulting in the leak of personal information belonging to 815 million Indian citizens on the dark web. The compromised…
TA571 Hackers Deliver IcedID Malware Via Zip Archive
Hackers often use password-protected Zip Archive files for malware distribution to evade detection by security software. They let the malware infiltrate the target system without…
Hackers Infect Windows Users with Weaponized MSIX App
MSIX helps developers package Windows apps for easy installation. While it’s user-friendly, it demands access to code signing certificates, making it an attractive target for…
NGINX ingress Security Flaw-Attackers Kubernetes API server
Three vulnerabilities have been discovered in NGINX ingress controllers, which were associated with arbitrary command execution, code injection, and sanitization bypass. The severity of these…
Hackers Earned More Than $300 Million on the HackerOne
The ethical hacking community has earned $300 million in total all-time rewards on the HackerOne platform. In addition, thirty hackers have made over a million dollars on…
Lazarus Group Hacked Software Vendor to Steal Source Code
A hacker attack on a supply chain can be highly dangerous as it can disrupt the flow of goods and services, causing widespread economic and…
CISA Announces New Logging Tool for Windows-based devices
The Cybersecurity and Infrastructure Security Agency (CISA) has launched a new version of Logging Made Easy (LME), a free and simple log management solution for…