Owncloud was discovered with a new vulnerability associated with exposing sensitive information to an unauthorized third party that was assigned with CVE-2023-49103 and a severity rating of 10.0 (Critical). ownCloud …
CISA & NCSC Discloses Guidelines for Secure AI System Development
The US Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (NCSC) released the Guidelines for Secure AI System Development to address the integration of artificial …
Kansas Court Hack: Attackers Stole Sensitive Data From Systems
Kanas Supreme Court released the statement for the cyber incident that stole sensitive data from systems. The Kansas Supreme Court released the Statement (Chief Justice Marla Luckert and Justices Eric …
Broadcom Acquires VMware in a $61 Billion Deal
Embarking on a transformative journey, Broadcom has announced the triumphant acquisition of VMware, heralding a watershed moment in the sphere of infrastructure technology. The amalgamation of Broadcom and VMware signifies …
Researcher Discloses OpenCart Vulnerability; Company Reacts Aggressively
A security researcher who goes under the name “0xbro” discovered a Static code injection vulnerability in OpenCart, which allows the writing of arbitrary untrusted data on config.php and admin/config.php files …
New GPS Attacks Targeting Commercial Flights Navigation Systems
In the vast expanse of the aviation realm, the Global Positioning System (GPS) has transcended its role as a navigational boon to reveal an insidious vulnerability, setting the stage for …
SysJoker Malware Attacking Windows, Linux and Mac Users Abusing OneDrive
SysJoker malware, a multi-platform backdoor with several variants for Windows, Linux, and Mac, has been observed being used by a Hamas-affiliated APT to target Israel. This malware was first identified by …
Loader Malware Steal Sensitive System Data & Installs Other Malware
In the intricate dance of cybersecurity threats, loader malware emerges as a silent force, discreetly breaching unsuspecting systems and setting the stage for more sophisticated onslaughts. Despite its subtle nature, …
IBM QRadar SIEM Bug Let Remote Attacker Trigger DoS
Multiple vulnerabilities have been found in IBM QRadar Wincollect, which were associated with denial of service that could allow a threat actor to disrupt the service from usage. These vulnerabilities …
PolarDNS – A Free DNS Server For Vulnerability Research & Pentesting
DNS (Domain Name System) decodes human-readable domain names into IP addresses. In vulnerability research and pentesting, analyzing DNS can reveal the following potential attack vectors that could help in identifying …