What Can An IT Vulnerability Cause? A Global Ransomware Attack!
The crisis began in the form of a vulnerability notification. On February 2, 2023, CHSPSC, the US-based management company that provides services to many subsidiary…
Latest Cybersecurity News — Page 6581
View all →
Multiple Vulnerabilities in Progress Ipswitch WhatsUp Gold – Assetnote
Summary The following vulnerabilities were discovered in Progress Ipswitch WhatsUp Gold: The adivsory from Progress can be found here. Impact When combined, these vulnerabilities lead…
What are the Mobile App Security Best Practices
Mobile applications have become an essential part of our daily lives, and they are used for a variety of purposes such as communication, banking, shopping,…
How can organizations bridge the gap between DR and cybersecurity?
Breaking down the silos between disaster recovery (DR) and cybersecurity has become increasingly important to ensure maximum business resiliency against outages, data breaches, and ransomware…
Microsoft Tightens OneNote Security by Auto-Blocking 120 Risky File Extensions
Microsoft has announced plans to automatically block embedded files with “dangerous extensions” in OneNote following reports that the note-taking service is being increasingly abused for…
Hackers Take Down PIA Website
Pakistan’s largest airline group, Pakistan International Airlines (PIA), has reportedly fallen victim to a cyber attack. The hacking group Team UCC has claimed responsibility for…
iOS Pentesting Tools Part 2: Cycript – allysonomalley.com
This post is part 2 of a series giving an overview of the most useful iOS app pentesting tools. ‘Cycript’ is a runtime manipulation tool…
Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes
It has been observed by Proofpoint researchers that TA473, a newly minted APT actor, abuses publicly facing Zimbra-hosted webmail portals by exploiting a vulnerability found…
Vulnerabilities impacting multiple QNAP operating systems (CVE-2022-27597, CVE-2022-27598)
Two vulnerabilities affecting various QNAP operating systems (CVE-2022-27597 and CVE-2022-27598) have been uncovered by Sternum. These vulnerabilities enable authenticated remote users to access secret values,…
TikTok, what’s going on and should I be worried?
TikTok has garnered a ton of media attention about its alleged risks. But is it really that much worse than other social media apps? Since…
Cryptocurrency Companies Targeted in Sophisticated 3CX Supply Chain Attack
Apr 04, 2023Ravie LakshmananCryptocurrency / Cyber Attack The adversary behind the supply chain attack targeting 3CX deployed a second-stage implant specifically singling out a small…
Shadow data slipping past security teams
The rapid pace of cloud transformation and democratization of data has created a new innovation attack surface, leading to 3 in 4 organizations experiencing a…