Two new vulnerabilities have been discovered in Next.js, related to response queue poisoning and SSRF on certain Next.js versions. These vulnerabilities have been assigned CVE-2024-34350 and CVE-2024-34351, and their severity …
British Columbia Cyber Attack: Investigation In Progress
British Columbia’s government has confirmed a sophisticated attempt to infiltrate its information systems. Premier David Eby and Mike Farnworth, B.C.’s solicitor-general and public safety minister, disclosed that the incidents were …
New ‘TunnelVision’ Technique Allows Hackers to Bypass VPN Encryption
Security researchers have uncovered a new technique called “TunnelVision” that exposes a fundamental flaw in routing-based Virtual Private Networks (VPNs), potentially allowing attackers to snoop on users’ online activities even …
New Malware Attacking Windows & MS Office Users
A sophisticated malware campaign has been identified, specifically targeting Windows and Microsoft Office users through cracked software. This malicious operation leverages software cracks, often sought after for unauthorized activation of …
FIN7 Hackers Abuse Sponsored Google Ads To Deliver MSIX Payloads
Hackers take advantage of sponsored Google Ads as they provide an excellent chance to reach a large audience quickly. Injecting malicious links or content into sponsored ads can mislead users …
Accenture Wins $789 Million Contract to Support Global U.S. Navy Maritime Forces
Accenture Federal Services (AFS), a subsidiary of global professional services company Accenture (NYSE: ACN), has been awarded a $789 million contract to bolster the cybersecurity of the U.S. Navy’s maritime …
Alert! Google Chrome Zero-day Exploited in the Wild
Google has released an urgent update for its popular Chrome web browser. The update fixes a critical zero-day vulnerability that malicious attackers are actively exploiting. The vulnerability is considered to …
Dell Hacked – 49 Million Customers Data Affected
Dell Technologies is investigating a data breach incident involving a company portal containing limited customer information related to purchases, the computer technology company announced Friday. While no financial or highly …
Microsoft to Make Security a Top Priority, Above All
Microsoft has announced a major shift in its operational priorities, placing security at the forefront of its agenda, above all other considerations. This strategic pivot underscores the tech giant’s commitment …
CISA Announced Vulnrichment : Project to Enrich CVE Records
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced a new initiative called “Vulnrichment” aimed at enriching Common Vulnerabilities and Exposures (CVE) records with additional metadata to help organizations …