The cybersecurity researchers at Symantec have recently warned of the risks related to poor security practices, pointing out that it found hardcoded credentials for AWS in more than 1,800 Android …
Hackers Sending Hidden Malware Through James Webb Telescope Image
Recent research conducted by Securonix Threat Research uncovered a persistent attack campaign using Golang. Securonix has identified this threat as GO#WEBBFUSCATOR, which is being tracked by the company. By utilizing …
Staying On Top of TLS Attacks With SSL Certificate
The Transport Layer Security (TLS)/ Secure Socket Layer (SSL) protocol is critical to ensuring data confidentiality, privacy, security, and integrity in transit on the internet. However, they are not 100% …
Critical Atlassian Bitbucket Server and Data Center Flaw Let Attackers Execute Malicious Code
Atlassian revealed a critical security flaw in Bitbucket Server and Data Center that allows attackers to execute malicious code on vulnerable instances. The critical flaw is tracked as (CVE-2022-36804), a …
AiTM Phishing Attack Targeting Enterprise Users of Microsoft & Gmail Email Services
An AiTM-based phishing campaign targeting enterprise users of Microsoft products such as email services. Even Google Workspace users have also been targeted by threat actors behind a large-scale campaign. AiTM …
ChromeOS Remote Memory Corruption Flaw Let Attackers Perform DoS Attack
Microsoft identified a memory corruption vulnerability in ChromeOS triggered remotely, which could allow attackers to carry out either a denial-of-service (DoS) or remote code execution (RCE). Researchers mention that the …
Fake Internet Download Manager Extension for Google Chrome has Over 200,000 Users
An extension called Internet Download Manager, which is a piece of the adware has been installed by more than 200,000 Google Chrome users. As far as the earliest reviews posted …
80,000+ Exploitable Hikvision Cameras Exposed Online
A critical command injection flaw that is present in over 80,000 Hikvision camera models has been discovered by security researchers at CYFIRMA recently. Using specially crafted messages, it is relatively …
8-Year-Old Linux Kernel Bug ‘No Pipe but as Nasty as Dirty Pipe’ Found
Researchers have revealed details about a long-standing security vulnerability that has been active in the Linux kernel for over eight years. The cybersecurity analysts from Northwestern University (Zhenpeng Lin, Yuhang …
Critical Amazon Ring Flaw Could Allow Attackers to Access Camera Recordings
Checkmarx, a global software security company based in Atlanta observed a vulnerability in the Ring Android app that could allow a malicious application installed on the user’s phone to expose …