Tag Archive

The Transport Layer Security (TLS)/ Secure Socket Layer (SSL) protocol is critical to ensuring data confidentiality, privacy, security, and integrity in transit on the internet. However, they are not 100% immune from being attacked by threat actors who leverage SSL/ …

Atlassian revealed a critical security flaw in Bitbucket Server and Data Center that allows attackers to execute malicious code on vulnerable instances. The critical flaw is tracked as (CVE-2022-36804), a command injection vulnerability found in multiple API endpoints of Bitbucket …

An AiTM-based phishing campaign targeting enterprise users of Microsoft products such as email services. Even Google Workspace users have also been targeted by threat actors behind a large-scale campaign. AiTM phishing attacks refer to attacks in which threat actors place …

Microsoft identified a memory corruption vulnerability in ChromeOS triggered remotely, which could allow attackers to carry out either a denial-of-service (DoS) or remote code execution (RCE). Researchers mention that the flaw could be remotely triggered by manipulating audio metadata. Attackers …

An extension called Internet Download Manager, which is a piece of the adware has been installed by more than 200,000 Google Chrome users. As far as the earliest reviews posted by users on the Chrome Web Store indicate, the extension …

A critical command injection flaw that is present in over 80,000 Hikvision camera models has been discovered by security researchers at CYFIRMA recently. Using specially crafted messages, it is relatively easy to exploit this vulnerability. Hikvision released a firmware update …

Researchers have revealed details about a long-standing security vulnerability that has been active in the Linux kernel for over eight years. The cybersecurity analysts from Northwestern University (Zhenpeng Lin, Yuhang Wu, and Xinyu Xing) described it as:- “As Nasty As …

Checkmarx, a global software security company based in Atlanta observed a vulnerability in the Ring Android app that could allow a malicious application installed on the user’s phone to expose their personal data, geolocation, and camera recordings. The Ring App …

A decommissioned Canadian satellite was hacked and used to broadcast films. At the DEF CON hacking conference in Las Vegas, Karl Koscher, one of the members of a hacking enthusiasts group called Shadytel, give details on how he and his …