Microsoft has detected the nation-state threat actor Storm-0062, also known as DarkShadow or Oro0lxy, exploiting CVE-2023-22515 in the wild since September 14, 2023. The vulnerability was publicly disclosed on October …
Top 10 Best SaaS Security Tools
Security management across multiple Software-as-a-Service (SaaS) clouds can present challenges, primarily stemming from the heightened prevalence of malware and ransomware attacks. In the present landscape, organizations encounter many challenges with …
SAP Patches for XSS, Log Injection & Other Vulnerabilities
SAP has released the security patches for the Patch Day of October 2023, in which they release new Security Notes and 2 updates to the previously released Security Notes. There …
HTTP/2 Rapid Reset Zero-day Flaw Exploited to Launch Massive DDoS Attack
Cloudflare was unexpectedly hit by an enormous HTTP attack that peaked at over 201 million requests per second. Starting on August 25, 2023, this onslaught posed a significant challenge, especially …
New APT Group Using Custom Malware to Attack Manufacturing & IT Industries
An unidentified APT group deployed custom malware and public tools to target organizations in Taiwan’s following sectors:- Manufacturing IT Biomedical This campaign also targeted a government agency in the Pacific …
Hackers Exploiting Citrix NetScaler Vulnerability to Steal User Credentials
Threat actors were attacking unpatched NetScaler Gateways using the vulnerability classified as CVE-2023-3519 to inject malicious script into the HTML of the authentication web page and steal user credentials. With a …
U.S. Army Sergeant Arrested for Spying Secrets to China: DoJ
In a shocking turn of events, a former U.S. Army Sergeant, Joseph Daniel Schmidt, has been arrested and indicted on charges of attempting to deliver national defense information and retaining …
ChatGPT, FraudGPT, and WormGPT Plays A Vital Role in Social Engineering Attacks
ChatGPT, FraudGPT, and WormGPT Plays A Vital Role in Social Engineering Attacks By Tushar Subhra Dutta – October 10, 2023 Generative AI models like ChatGPT, FraudGPT, and WormGPT bring innovation …
HackerGPT: A ChatGPT Empowered Penetration Testing Tool
HackerGPT is a ChatGPT-enabled penetrating testing tool that can help with network hacking, mobile hacking, different hacking tactics, and other specific tasks. The main foundation of HackerGPT is the training …
ConnectedIO’s 3G/4G Routers Vulnerability Let Hackers Execute Malicious Code
Critical issues in ConnectedIO’s ER2000 edge routers have been discovered, and an attacker can leverage them to compromise the cloud infrastructure completely, remotely execute malicious code, and expose all user …