Tag Archive

Trellix Advanced Threat Research Team observed an unpatched 15 year old Python bug found in the Python’s tarfile module tracked as CVE-2007-4559 with CVSS score: 6.8. “The vulnerability is a path traversal attack in the extract and extractall functions in …

Wintermute, a crypto trading firm, has been targeted in the latest crypto heist to steal more than $160 million in digital assets. Only DeFi operations were affected by this hack, while lending and over-the-counter (OTC) services were not impacted at …

There is a steady increase in the number of cyberattacks taking place every day. There has been a 42% increase in attacks globally year-over-year according to the security firm, CheckPoint’s 2022 Mid-Year Report, which was published in November. In its …

When Cyble Research and Intelligence Labs (CRIL) was carrying out routine threat hunting exercises, it came across a tweet that mentioned numerous fake Zoom sites being created, which caught the attention of the researchers. There is a lot of similarity …

Recently, Uber released a security update, stating that there is no evidence that users’ private information was compromised in the data breach. “We have no evidence that the incident involved access to sensitive user data. All of our services including …

Password Manager ‘LastPass’ notified its customers of the recent security incident targeting development environment, in which some of their source code and technical information was taken. Specifically, the attackers had access to its internal systems for a four-day period in …

The adversaries from North Korea are deploying critical backdoors on the devices of targets by using trojanized versions of the PuTTY SSH client. Posing as a fake Amazon job application to put backdoors onto their devices. It is an interesting …