Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) – Assetnote
30
Jun
2023

Citrix Gateway Open Redirect and XSS (CVE-2023-24488) – Assetnote

Summary URL query parameters are not adequately sanitised before they are placed into an HTTP Location header. An attacker can…

Why Should You Take IT Security Seriously?
30
Jun
2023

Crack the Code: How to Secure Your Dream Cybersecurity Career

With cyber threats constantly dominating headlines, the draw of a career in cybersecurity has never been higher for young professionals. …

GuLoader Attacking Law Firms Using Weaponized PDF File
30
Jun
2023

GuLoader Attacking Law Firms Using Weaponized PDF File

The cybersecurity researchers at Morphisec Labs have been tracking the GuLoader campaign since April of this year and found that…

New Proxyjacking Campaign Attacking Vulnerable SSH Servers
30
Jun
2023

Proxyjacking campaign attack SSH servers

It has been observed that a new Proxyjacking campaign attack SSH servers and subsequently builds Docker services that share the victim’s…

Iranian Hackers Charming Kitten Utilize POWERSTAR Backdoor in Targeted Espionage Attacks
30
Jun
2023

Iranian Hackers Charming Kitten Utilize POWERSTAR Backdoor in Targeted Espionage Attacks

Jun 30, 2023The Hacker NewsCyber Espionage/ Malware Charming Kitten, the nation-state actor affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC),…

Patch Diffing Progress MOVEIt Transfer RCE (CVE-2023-34362) – Assetnote
30
Jun
2023

Reversing Citrix Gateway for XSS – Assetnote

One of the targets we looked at late last year was Citrix Gateway. Citrix Gateway is another of these “all-in-one”…

Cybersecurity news roundup
30
Jun
2023

In Other News: Hospital Infected via USB Drive, EU Cybersecurity Rules, Free Security Tools

SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under…

LockBit
30
Jun
2023

TSMC denies LockBit hack as ransomware gang demands $70 million

Chipmaking giant TSMC (Taiwan Semiconductor Manufacturing Company) denied being hacked after the LockBit ransomware gang demanded $70 million not to…

Patch Tuesday: Critical Flaws in Adobe Commerce Software
30
Jun
2023

200,000 WordPress Sites Exposed to Attacks Exploiting Flaw in ‘Ultimate Member’ Plugin

More than 200,000 WordPress websites are exposed to ongoing attacks targeting a critical vulnerability in the Ultimate Member plugin. Designed…

Russian Defense satellite communications provider Hacked
30
Jun
2023

Russian Defense satellite communications provider Hacked

According to a report from the Telegram channel, Dozor, a Russian telecommunications company that offers services to power grids, oil…

SGN pens IT service desk outsourcing deal
30
Jun
2023

SGN pens IT service desk outsourcing deal

SGN has swapped an IT managed service from Fujitsu with a five-year agreement with CGI as part of its plans…

Samsung vulnerabilities exploited
30
Jun
2023

Samsung Phone Flaws Added to CISA ‘Must Patch’ List Likely Exploited by Spyware Vendor

The US Cybersecurity and Infrastructure Security Agency (CISA) has added half a dozen flaws affecting Samsung smartphones to its Known…