Cisco has disclosed a critical vulnerability in the SAML authentication process of its Cisco Secure Client software. This vulnerability could potentially allow unauthenticated, remote attackers to conduct a Carriage Return …
Beware Of New Money Laundering Attack Targeting UPI Users
Threat actors target UPI users as UPI offers a convenient platform for transferring money, often with less severe security than traditional banking systems. Due to fewer security measures, threat actors …
30,000+ Individuals Impacted in Fidelity Investments Third-party Data Breach
Over 30,000 individuals have been left vulnerable after a third-party data breach involving Fidelity Investments Life Insurance Company (FILI). The breach, orchestrated through Infosys McCamish (IMS), a third-party service provider, …
ArubaOS Security Flaw Let Attackers Execute Remote Code
ArubaOS-Switch belongs to Aruba Networks and it’s a subsidiary of HPE (Hewlett Packard Enterprise). It helps centralize network management, and besides this, it also develops diverse products related to networking. …
Microsoft .NET Framework & Visual Studio Flaw Let Attackers Write or Delete Files
A vulnerability, CVE-2023-36049 has been identified in the Microsoft .NET Framework and Visual Studio, posing a serious threat to the integrity of FTP servers. If exploited, this flaw could allow …
Cisco Duo for Windows Logon and RDP Let Attacker Bypass Authentication
A critical vulnerability, CVE-2024-20301 has been identified in Cisco Duo Authentication for Windows Logon and Remote Desktop Protocol (RDP), posing a security risk to affected systems. This flaw could allow …
Copybara Uses On-Device Fraud to Steal Funds Directly from the Victim’s Device
Cybersecurity experts at Cleafy Labs have exposed a sophisticated fraud campaign orchestrated by a group known as Copybara. This campaign, leveraging on-device fraud techniques, has been meticulously designed to siphon …
Hackers Hijacking Web Server To Deploy z0Miner Malware
The threat actor, who goes by the name “z0miner,” has been found to be attacking Korean WebLogic servers to distribute malware like miners, network tools, and scripts for attacking further. …
Cloudflare Unveils AI Model Firewall to Enhance Security
Cloudflare has announced the launch of a new firewall specifically designed to protect AI models. This pioneering initiative aims to address the growing concerns around the security of artificial intelligence …
Foxit PDF Reader Flaw Let Attackers Execute Remote Code
Foxit Software has released an update for its Foxit PDF Reader 2024.1 and Foxit PDF Editor 2024.1 for Windows, addressing critical security vulnerabilities that could potentially allow attackers to execute …