Your blog category
Ivanti has released security updates to address four security flaws impacting Connect Secure and Policy Secure Gateways that could result in code execution and denial-of-service (DoS). The list of flaws… Read More »Ivanti Rushes Patches for 4 New Flaw in Connect Secure and Policy Secure
Google has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies. The high-severity zero-day vulnerabilities are as follows – CVE-2024-29745 –… Read More »Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies
The U.S. Cyber Safety Review Board (CSRB) has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the… Read More »U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers
Google on Tuesday said it’s piloting a new feature in Chrome called Device Bound Session Credentials (DBSC) to help protect users against session cookie theft by malware. The prototype –… Read More »Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks
Attack surface management (ASM) and vulnerability management (VM) are often confused, and while they overlap, they’re not the same. The main difference between attack surface management and vulnerability management is… Read More »Attack Surface Management vs. Vulnerability Management
The banking trojan known as Mispadu has expanded its focus beyond Latin America (LATAM) and Spanish-speaking individuals to target users in Italy, Poland, and Sweden. Targets of the ongoing campaign include entities… Read More »Mispadu Trojan Targets Europe, Thousands of Credentials Compromised
A critical security flaw impacting the LayerSlider plugin for WordPress could be abused to extract sensitive information from databases, such as password hashes. The flaw, designated as CVE-2024-2879, carries a CVSS… Read More »Critical Security Flaw Found in Popular LayerSlider WordPress Plugin
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis… Read More »Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution
A threat activity cluster tracked as Earth Freybug has been observed using a new malware called UNAPIMON to fly under the radar. “Earth Freybug is a cyberthreat group that has been active… Read More »China-linked Hackers Deploy New ‘UNAPIMON’ Malware for Stealthy Operations
Cloud solutions are more mainstream – and therefore more exposed – than ever before. In 2023 alone, a staggering 82% of data breaches were against public, private, or hybrid cloud… Read More »Harnessing the Power of CTEM for Cloud Security