Tag Archive

Microsoft released multiple security patches as part of their Patch Tuesday, in which three zero-day vulnerabilities were also patched. One of the zero-day vulnerabilities was CVE-2023-36025, which affected the Windows SmartScreen function. This vulnerability was given a severity rating of …

ChatGPT, like InstructGPT, follows prompts for detailed responses. It answers questions and composes content similar to customer service chatbots. LLMs (Large Language Models) are revolutionizing cybersecurity rapidly with the help of two key things:- Seamless AI integration Cutting down operational …

As previously reported, CVE-2023-4966 was discovered and published by Citrix. This vulnerability affected Citrix NetScaler Gateway and ADC devices. Following this, AssetNote published a proof-of-concept for this vulnerability named “CitrixBleed.” However, this vulnerability was discovered to be exploited by threat …

The Mirai botnet is a malicious network of infected computers, routers, and IoT devices harnessed by cybercriminals to launch large-scale DDoS attacks.  The destructiveness of Mirai lies in its ability to compromise and control a multitude of connected devices that …

Microsoft has launched the Defender Bounty Program, which aims to improve the security of its customers’ experience by incentivizing researchers with rewards of up to USD 20,000. Through this program, Microsoft encourages researchers to identify security vulnerabilities in its Defender …

Rhysida, a new ransomware group, hit its first victim in May 2023. They use their ransomware, offered as RaaS (Ransomware-as-a-Service), with at least 50 global victims listed on their website.  In May 2023, they made headlines for deploying ransomware in …

In an era marked by persistent cyber threats, the Cybersecurity and Infrastructure Security Agency (CISA) has released a cyber attack Mitigation Guide specifically tailored for the Healthcare and Public Health (HPH) Sector.  This guide not only identifies vulnerabilities but also …

MaaS (Malware-as-a-Service) thrives as a top choice for new cyber threats, offering easy access to powerful tools. Threat actors primarily focus on information theft under Maas, specializing in stealing and leaking sensitive data from hacked devices. This malicious behavior poses …

An attack campaign that installs XMRig Coinminer on Windows web servers that run on Apache has been discovered recently. The threat actors used the Cobalt Strike tool as a medium to target the internal systems with APT and ransomware. AhnLab …

An arbitrary file write vulnerability has been discovered in Nessus, which allows an authenticated, remote attacker to perform a denial of service condition on affected installations. This vulnerability has been assigned with CVE-2023-6062, and a severity rating was added. Nessus …