On August 30, 2023, a malicious actor gained unauthorized access to specific Sourcegraph(.)com data through a leaked admin access token. Sourcegraph is a code AI platform that makes it easy …
Hackers Abuse Windows Container Isolation Framework to Bypass Security Defences
Recently, cybersecurity researchers at Deep Instinct have asserted that hackers can exploit the Windows container isolation framework to bypass the security defenses and mechanisms of organizations. Containers revolutionize the way …
Cisco Unified Communications Products Flaw Let Attackers Escalate Privileges
A recent discovery has highlighted a privilege escalation vulnerability within Cisco Unified Communications Products. This vulnerability was found during internal security testing. Cisco Unified Communications Manager (CUCM) and Cisco Unified …
No Coding, No Compromise: A Breach Prevention SaaS Security Guide – 2023
With the growing trend of businesses transitioning their operations to cloud-based Software as a Service (SaaS) platforms, ensuring the security of these systems has become of utmost importance. Cybercriminals become …
Splunk IT Service Intelligence Injection Flaw Let Attacker Inject ANSI Codes in Log Files
Splunk has been reported with a Unauthenticated Log injection vulnerability in the Splunk IT Service Intelligence (ITSI) product. This vulnerability exists in Splunk ITSI versions prior to 4.13.3 or 4.15.3. …
Critical Flaw in Zip Libraries Let Attackers Abuse ZIP archives
According to recent reports, a number of vulnerabilities have been discovered in widely used ZIP libraries of Swift and Flutter. These packages are being utilized by numerous developers and applications, …
Mozilla Firefox 117: 5 High-Severity Vulnerabilities Patched
With the release of Mozilla Firefox 117, 13 vulnerabilities are patched, including seven ‘High Severity’ flaws and four memory corruption flaws. Mozilla said that IPC CanvasTranslator, IPC ColorPickerShownCallback, IPC FilePickerShownCallback, and …
BGP Error Handling Flaw Leads to Prolonged Network Outage
BGP is the backbone protocol and the internet’s “glue,” which directs the routing decisions between ISP networks to hold the internet under a set. In short, this protocol, BGP, is …
Hackers Attack Unpatched Citrix NetScaler Systems to Deploy Ransomware
Threat actors targeting unpatched Citrix NetScaler systems exposed to the internet are being tracked by Sophos X-Ops. As per research, the recent attacks share a similarity with attacks using CVE-2023–3519 …
Hackers Launch Brute-Force Attack Cisco ASA SSL VPNs
Cisco ASA SSL VPN Appliances is a type of network security device that allows remote users to access a private network over the internet securely. These appliances are mainly used …