Category Archive

Apple has released security updates to address a zero-day vulnerability in its Safari web browser that was exploited during this year’s Pwn2Own Vancouver hacking competition.  This issue, identified as CVE-2024-27834, was fixed by enhanced checks on macOS Monterey and macOS …

LogRhythm and Exabeam, two leading cybersecurity companies, announced today their intent to merge in a transformative deal that will create a powerful force in the security operations and analytics market. LogRhythm is a world-class cybersecurity company that delivers comprehensive security …

Three vulnerabilities associated with CSS injection, file upload, and remote code execution have been discovered in the SAP Customer Experience (CX) commerce cloud and SAP Netweaver Application. These two vulnerabilities have been assigned with CVE-2019-17495 and CVE-2022-36364.  The severity of …

The Wireshark team has announced the release of Wireshark 4.2.5, a maintenance update to the popular network protocol analyzer. This new version brings important security fixes and improvements to the widely-used tool. Wireshark is a well-known open-source network protocol analyzer …

Phishing attacks can be executed through various means, such as SMS and phone calls, but the most prevalent method involves sending victims emails containing malicious attachments. These may come in various forms, but they most often belong to one of …

A design flaw in the IEEE 802.11 standard allows for SSID spoofing in WPA2 and WPA3 networks. While authentication protocols prevent unauthorized access points, they don’t guarantee that the SSID displayed on the client device matches the actual network’s SSID.  …

Cybersecurity experts from Recorded Future’s Insikt Group have uncovered a sophisticated cybercriminal campaign orchestrated by Russian-speaking threat actors from the Commonwealth of Independent States (CIS). These cybercriminals have been exploiting GitHub, a platform widely trusted by developers, to host malicious …