Tag Archive

Multiple vulnerabilities have been discovered in Titan MFT and Titan SFTP servers owned by South River Technologies, which were associated with Information Disclosure, Session Fixation, and Remote code execution. However, these vulnerabilities have been fixed by South River Technologies. Titan …

Insider Risk refers to the potential harm or negative impact that can arise from any illicit or unauthorized activity carried out by an individual within an organization who has legitimate access to sensitive data, systems, or resources, can be mitigated …

Threat actors exploit zero-day vulnerabilities because these flaws are unknown to the software developers, making them highly effective for launching attacks.  Exploiting zero-days allows malicious actors to bypass security measures and gain unauthorized access or control over systems, maximizing their …

Software vulnerabilities are essentially errors in code that malicious actors can exploit. Advanced language models such as CodeBERT, GraphCodeBERT, and CodeT5 can detect these vulnerabilities, provide detailed analysis assessments, and even recommend patches to address them. These models have proven …

Two medium-severity vulnerabilities have been discovered in the widely used IBM QRadar SIEM, associated with Cross-Site Scripting (XSS) and Information disclosure. The vulnerabilities have been assigned with CVE-2023-40367 and CVE-2023-30994. IBM has released patches for fixing these vulnerabilities and urges …

Ransomware attacks have grown to be a serious concern for businesses of all sizes, with the potential to seriously harm the operations, finances, and reputation of the targeted enterprises. Many ransomware operators utilize flaws or known common vulnerabilities and exposures (CVE). …

Hackers utilized the Teams and Skype messaging platforms to spread the DarkGate malware to the targeted businesses. When DarkGate malware is installed, a Visual Basic for Applications (VBA) loader script is delivered to victims. The Windows-based malware known as DARKGATE is …

A new supply-chain attack, which was active throughout September 2023, has been discovered in which threat actors used Typosquatting and Startjacking techniques to lure developers using Alibaba cloud services, AWS, and Telegram into downloading malicious Pypi packages. The threat actors, …