Luan Herrera, a cybersecurity specialist dedicated to vulnerability reporting, detailed a new way to perform a side channel attack variant known as XS-Leak abusing redirect hops to trigger a crossRead More →
Cybersecurity specialists detected a critical buffer overflow vulnerability affecting Linux SUDO that could also affect the latest version of Apple macOS Big Sur; this flaw has not yet been correctedRead More →
A few years ago, the emerging company Grayshift broke into the mobile security market with the launch of GrayKey, a tool capable of unlocking almost any model of iPhone thatRead More →
Cybersecurity experts report a new supply chain attack method in which perpetrators managed to compromise the update process of NoxPlayer, a popular Android emulator for Windows and Mac systems developedRead More →
The maintainers of Vue.js, a popular JavaScript framework, announced the correction of a dangerous cross-site scripting vulnerability (XSS) in the Chrome browser extension, noting that they had to wait forRead More →
The cybercriminal community has got a serious drawback. German authorities recently announced the arrest of three individuals accused of managing “FakeIDDobby” user accounts on multiple dark web forums. Through theseRead More →
A recent security report indicates that the domain Perl.com, the official communication platform of the developers of the Perl programming language, would have been stolen. According to Brian Foy, aRead More →
This week Stack Overflow developers released a security report related to the incident that compromised their systems in 2019. According to this report, the threat actor pretended to be oneRead More →
In a recent report, the U.S. Department of Justice (DOJ) publicly disclosed the shutdown of the Netwalker ransomware operation, as well as bringing charges against Canadian citizen Sebastien Vachon-Desjardins ofRead More →
A report from the U.S. Department of Justice (DOJ) reveals that Jerry Ji Guo has been convicted of his participation in a cryptocurrency fraud scheme. According to Craig D. Fair,Read More →
The specialized team FireEye Email Security has published a report on the detection of multiple phishing campaigns in which operators use source code obfuscation of compromised or malicious domains. ThreatRead More →
Cybersecurity specialists reported the finding of a critical vulnerability in WeChat, the messaging service, phone calls and social media platform developed by the China-based technology company Tencent. According to theRead More →
Sudo maintainers announced a fix for a vulnerability that could have allowed local users to obtain root privileges on Unix-like systems without any authentication. Sudo is an UNIX program withRead More →
The Norwegian authorities have notified Grindr LLC of its intention to impose a fine of approximately €10 million on account of the multiple infringements of the European Union’s General DataRead More →
Because of an analysis error, Google Chrome’s Secure Browsing Service has labeled the popular Network Mapper (Nmap) project as a potential “security threat”. This is another example of misidentification ofRead More →
Cybersecurity specialists reported the finding of at least four vulnerabilities affecting Honeywell OPC UA Tunneller. According to the report, successful exploitation of these flaws would allow malicious hackers to accessRead More →
A recent security report details the detection of a new malware variant for Android devices deployed automatically via instant messaging platforms, mainly WhatsApp. According to Lukas Stefanko, author of theRead More →
Information security specialists reported that a group of threat actors has released an exploit to abuse a critical security flaw in SAP enterprise software. This exploit is capable of compromisingRead More →
SonicWall security team has issued a security alert related to a hacking group exploiting a zero-day flaw in its virtual private network (VPN) solutions that could allow the deployment ofRead More →
Last Thursday the Goods and Service Tax Network (GSTN) posted a tweet mentioning that its security team detected “some activity in the cyberspace by unscrupulous elements”. According to the post,Read More →
