Tag Archive

A vulnerability affecting Apache RocketMQ servers was publicly disclosed in May 2023, allowing remote code execution through a gateway. RocketMQ is a cloud-native platform for messaging and streaming. The command execution vulnerability has been reported in RocketMQ affecting version 5.1.0 …

Tor (The Onion Router) has officially introduced a Proof-of-Work (PoW) mechanism to defend from attackers doing Denial of Service attacks. Users worldwide have widely adopted Tor for hiding their IP addresses and maintaining their privacy. The Onion services have always …

Several Buffer Overflow vulnerabilities have been discovered in Notepad++ that can be exploited by threat actors for malicious purposes. The severities of these vulnerabilities vary from 5.5 (Medium) to 7.8 (High). The vulnerabilities are based on heap buffer write overflow …

The rapid surge in LLMs (Large language models) across several industries and sectors has raised critical concerns about their safety, security, and potential for misuse. In the current threat landscape, threat actors can exploit the LLMs for several illicit purposes, …

In today’s digital landscape, databases are the fortresses where an organization’s most valuable data assets are stored and managed. However, these digital vaults are constantly under siege by cyber threats. As a cybersecurity professional, your responsibility is akin to that …

The internet domains serve as a launchpad for threat actors to launch several cyber attacks. By exploiting the internet domains as a launchpad platform, threat actors can perform the following activities on Malicious Websites:- Distribute malware Facilitate command and control …

You might discover hundreds of open doors if you scan your website for security vulnerabilities. Our AppSec research across 1400 websites protected by AppTrana uncovered 33,000 critical, medium, and high vulnerabilities in Q2, 2023. What’s more alarming is that 31% of these vulnerabilities …

A high-profile cyber attack targeted a prominent company, Kroll. This attack utilized a sophisticated technique known as “SIM swapping,” which allowed the threat actor to gain unauthorized access to sensitive personal information. On Saturday, August 19, 2023, Kroll was informed about …