Multiple vulnerabilities have been identified in PHP that are associated with Command Injection, Cookie Bypass, Account takeover, and Denial of Service. The CVEs for these vulnerabilities have been given as …
NSA, CISA Released Guidance And Best Practices To Secure The AI
In an era where artificial intelligence (AI) systems are becoming increasingly integral to our daily lives, the National Security Agency’s Artificial Intelligence Security Center (NSA AISC) has taken a significant …
Multiple Juniper Networks Flaw Let Attackers Delete Files
The Juniper networks-owned Junos OS has been discovered to have multiple vulnerabilities associated with Denial of Service (DoS), Path Traversal, and Cross-Site Scripting (XSS). The CVEs for these vulnerabilities have …
Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group
In a digital age where information is the new currency, the recent global hack has once again highlighted the urgent need for enhanced cybersecurity measures. The breach was identified as …
Hacker Customize LockBit 3.0 Ransomware To Attack Orgs Worldwide
Hackers leverage the LockBit 3.0 ransomware due to its sophisticated encryption functionalities, which enable them to successfully encrypt victims’ files and request a ransom in order to supply decryption keys. …
Popular VPN Software Flaw Let Attackers Crash the Systems
A critical vulnerability has been discovered in a widely used virtual private network (VPN) software, Libreswan, putting millions of users at risk. The flaw, CVE-2024-3652, could allow attackers to remotely …
Who Stole 3.6M Tax Records from South Carolina?
April 16, 2024 0 Comments For nearly a dozen years, residents of South Carolina have been kept in the dark by state and federal investigators over who was responsible for …
Iran launched a Major Cyberattack Against Critical Infrastructure in Israel
Cyberattacks have become a critical aspect of international conflicts. The recent cyber attack launched by Iran against Israel’s critical infrastructure is a testament to the evolving nature of geopolitical disputes. …
Critical PuTTY Client Vulnerability Lets Attackers Recover Private Keys
A severe vulnerability has been discovered in the PuTTY client and related components, allowing attackers to fully recover NIST P-521 private keys. The PuTTY client generates heavily biased ECDSA nonces …
Crickets from Chirp Systems in Smart Lock Key Leak
April 15, 2024 0 Comments The U.S. government is warning that smart locks securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can be used to remotely …