A directory traversal vulnerability (CVE-2024-23334) was identified in aiohttp versions before 3.9.2. This vulnerability allows remote attackers to access sensitive files on the server because aiohttp doesn’t validate file reading …
Florida Man Arrested For Selling Fake Cisco Device To U.S. Military
Onur Aksoy, a forty-year-old resident of Florida and dual citizen of Turkey and the United States, was found guilty of running a large-scale, multi-year fraud scheme to traffic in fake …
How U.S K-12 Schools Can Solve Their Top 10 Cybersecurity Challenges – Free E-Book
Students aren’t alone in having their skills tested in K-12 schools. Education-sector IT teams face mounting pressure to provide cost-effective cybersecurity as threat actors increasingly target schools as “easy targets” …
AI-Based Webshell Detection Model – Detailed Overview
While injection vulnerabilities are on the rise, Webshells have become a serious concern. They allow attackers to gain unauthorized access and run malicious code on web servers. For the correct …
Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints Across the Globe
Security researchers have uncovered four zero-day vulnerabilities within OpenVPN, the world’s leading VPN solution. These vulnerabilities pose significant threats to millions of devices globally. These vulnerabilities, identified by the internal …
Operation PANDORA Shutdown 12 Fake Call Centers that Steal Over €10M
Operation PANDORA has successfully dismantled a network of 12 fraudulent call centers, dealing a significant blow to a sophisticated criminal enterprise that has stolen over €10 million from unsuspecting victims. …
CISA & FBI Release Urges Developers to Eliminate Directory Traversal Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint Secure by Design Alert, calling on software developers and industry executives to …
LayerX Security Raises $24M for its Browser Security Platform, Enabling Employees to Work Securely from Any Browser, Anywhere
LayerX, pioneer of the LayerX Browser Security platform, today announced $24 million in Series A funding led by Glilot+, the early-growth fund of Glilot Capital Partners, with participation from Dell …
NCSC Warns of Russian Hackers Attacking Critical National Infrastructure
The National Cyber Security Centre (NCSC) has issued a stark warning about a new wave of cyber threats from Russian-aligned groups targeting the UK’s critical national infrastructure. Over the past …
New macOS Adload Malware Bypasses Built-in macOS Antivirus Detection
A new variant of the notorious Adload malware has been discovered to bypass the latest updates to Apple’s built-in antivirus, XProtect. Despite Apple’s efforts to fortify its defenses with a …