Category Archive

Hardcoded credentials are often found in source code and refer to the practice of embedding “plain text passwords” and other “sensitive information” directly into applications. Once the hardcoded credentials are compromised can allow unauthorized access to multiple systems and devices …

SIEM (Security Information and Event Management) is like the nervous system of your security operations. It collects all the threat data—everything from suspicious login attempts to strange network behavior—gives you a unified view of potential issues, and helps you respond. …

Meta, the parent company of Facebook and Instagram, has announced a new initiative to improve account security and combat fraud by utilizing facial recognition technology. This new approach aims to streamline the process of recovering hacked accounts and protect users …

Novel anti-bot services are surfacing on the dark web, offering cybercriminals sophisticated tools to bypass Google’s protective ‘Red Page’ warnings. These services represent a significant evolution in the ongoing battle between cybercriminals and security measures, posing new challenges for cybersecurity …

A serious security vulnerability has been discovered in Red Hat’s NetworkManager-libreswan plugin that could allow local attackers to escalate privileges and gain root access to Linux systems. The flaw tracked as CVE-2024-9050 has received a CVSS base score of 7.8, …

Samsung has devices affected by a critical security vulnerability (CVE-2024-44068) that affects multiple Exynos mobile processors actively exploited in the wild. The high-severity flaw impacts several processor models, including the Exynos 9820, 9825, 980, 990, 850, and W920 series. The …

The Tor Project has announced the release of Tor Browser 14.0, marking a significant update to this privacy-focused web browser. This release is based on Mozilla Firefox ESR 128, incorporating a year’s worth of upstream changes from Firefox, and includes …

The first day of Pwn2Own Ireland 2024 has concluded with an impressive showcase of cybersecurity prowess, as hackers demonstrated their skills by uncovering 52 zero-day vulnerabilities. The event, held at Trend Micro’s offices in Cork, awarded a total of $486,250 …

Mallox Ransomware Flaw Lets Victims Recover Files Without Ransom Payment. Previously known as TargetCompany, ransomware has undergone several evolutionary changes since its initial appearance. While the malicious actors addressed an earlier cryptographic weakness in February 2022, their subsequent modifications introduced …

The Common Vulnerabilities and Exposures (CVE®) Program celebrates its 25th anniversary, marking a remarkable journey from its inception in 1999 to becoming a cornerstone of global cybersecurity vulnerability management. Starting with just 321 records in 1999, the program has expanded …