New Security Vulnerability Affects Thousands of Self-Managed GitLab Instances

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed details of a new security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenticated attacker to recover user-related information. Tracked as CVE-2021-4191 …

Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app for their activities, as the Russia-Ukraine conflict enters its eighth day. A new analysis by Israeli cybersecurity company …

CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478. “These …

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS). “While ransom …

Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco this week shipped patches to address a new round of critical security vulnerabilities affecting Expressway Series and Cisco TelePresence Video Communication Server (VCS) that could be exploited by an …

Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption

Blog WriterThe Hacker News - Original news source is thehackernews.com

A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the “first side-channel attack” on homomorphic encryption that could be …

Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

As the ongoing Russia-Ukraine conflict continues to escalate, the Russian government on Thursday released a massive list containing 17,576 IP addresses and 166 domains that it said are behind a series of …

Hackers Try to Target European Officials to Get Info on Ukrainian Refugees, Supplies

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details of a new nation-state sponsored phishing campaign have been uncovered setting its sights on European governmental entities in what’s seen as an attempt to obtain intelligence on refugee and …