Hackers earn $1,035,000 for 27 zero-days exploited at Pwn2Own Vancouver
Pwn2Own Vancouver 2023 has ended with contestants earning $1,035,000 and a Tesla Model 3 car for 27 zero-day (and several bug collisions) exploited between March…
Latest Cybersecurity News — Page 5805
View all →
Lords AI weapons committee holds first evidence session
The potential benefits of using artificial intelligence (AI) in weapons systems and military operations should not be conflated with better international humanitarian law (IHL) compliance,…
Penetrating PornHub – XSS vulns galore (plus a cool shirt!)
When PornHub launched their public bug bounty program, I was pretty sure that most of the low hanging fruits of vulnerabilities would be taken care…
Hackers Exploited Critical Microsoft Outlook Vulnerability
In response to a recent vulnerability identified in Outlook, Microsoft recently published a proper guide for its customers to help them discover the associated IoCs.…
A bug revealed ChatGPT users’ chat history, personal and billing data
A vulnerability in the redis-py open-source library was at the root of last week’s ChatGPT data leak, OpenAI has confirmed. Not only were some ChatGPT…
New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords
Mar 27, 2023Ravie LakshmananData Safety / Endpoint Security A new information-stealing malware has set its sights on Apple’s macOS operating system to siphon sensitive information…
CBI launches campaign to boost UK tech unicorns
The Confederation of British Industry (CBI) has launched a campaign to bolster support for the UK’s most innovative high-growth tech companies so they can transform…
Abusing HTTP Path Normalization and Cache Poisoning to steal Rocket League accounts | Sam Curry
Over the last few years, usage of vulnerability disclosure and bug bounty programs have increased significantly. It is now almost expected to have easy outlets…
Latitude Financial Data Breach: 14 Million Customers Affected
The Australian consumer lender, Latitude Financial, has suffered a major cyber attack, leading to a data breach of passport and driver license numbers, impacting 14…
BEC scammers are after physical goods, the FBI warns
BEC attacks are usually aimed at stealing money or valuable information, but the FBI warns that BEC scammers are increasingly trying to get their hands…
Where SSO Falls Short in Protecting SaaS
Mar 27, 2023The Hacker NewsSaaS Security Single sign-on (SSO) is an authentication method that allows users to authenticate their identity for multiple applications with just…
France latest to ban TikTok on government devices
Following the UK government and parliamentary bans enacted on video-sharing social media platform TikTok – citing data privacy concerns given TikTok’s Chinese origins – the…