
Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerabi...
Challenge of Protecting PII, Hunters Become the Hunt: OpenAI Vulnerability, Blackmailing of Bounty Hunters A paradox emerges: those who protect us from cyber threats are themselves becoming the hunted...

CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, Q...
CISA Updates: Microsoft 365 Guidance, SCuBAGear Tool, Mozilla Alert, QNAP & FXC Vulnerabilities Enter KEV CISA has officially released the Microsoft 365 Secure Configuration Baselines, aiming to a...

Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Ha...
Massive Data Leak by BidenCash: 1.9M Credit Card Details Exposed on Hacker Forum The SOCRadar Dark Web Team detected a significant data breach on a hacker forum, revealing the leak of 1.9 million cred...

Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Activel...
Over a Dozen Critical RCE Vulnerabilities in Ivanti Avalanche; Actively Exploited Chrome Zero-Day, CVE-2023-7024 Ivanti has issued security updates to address a total of 22 vulnerabilities identified...

ALPHV Seized, Unseized, Decrypted; Pandora's Box May Be Reopened
ALPHV Seized, Unseized, Decrypted; Pandora’s Box May Be Reopened Emerging as a significant player in the ransomware landscape, ALPHV (BlackCat) has established itself through sophisticated ranso...

Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CV...
Microsoft Alerts of RCE and DoS Vulnerabilities in Perforce Server: CVE-2023-45849, CVE-2023-35767, CVE-2023-45319, CVE-2023-5759 During a security review of its game development studios, Microsoft fo...

FortiGuard Releases Security Updates for Critical Vulnerabilities in M...
FortiGuard Releases Security Updates for Critical Vulnerabilities in Multiple Products Introduction to the Vulnerabilities On December 12, 2023, FortiGuard announced the release of security updates to...

CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulne...
CISA Urges Organizations to Patch the Critical Apache Struts RCE Vulnerability, CVE-2023-50164 In a recent alert, the Cybersecurity and Infrastructure Security Agency (CISA) highlighted that the Apach...

Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 ...
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day Microsoft has released its December 2023 Patch Tuesday, addressing a total of 36 ...

Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 ...
Microsoft’s December 2023 Patch Tuesday Tackles 36 Vulnerabilities, 3 Critical, and a Non-Microsoft Zero-Day Microsoft has released its December 2023 Patch Tuesday, addressing a total of 36 security v...

Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software...
Weekly Vulnerability Summary by CISA: Android, Microsoft, CMS Software, WordPress, Perl, and More The Cybersecurity and Infrastructure Security Agency (CISA) has released a summary of the most recent ...

Syrus4 IoT Gateway Vulnerability Could Allow Code Execution on Thousan...
Syrus4 IoT Gateway Vulnerability Could Allow Code Execution on Thousands of Vehicles, Simultaneously (CVE-2023-6248) A significant vulnerability affecting Syrus4 IoT Gateway has emerged, posing a seri...

Latest Alerts for WordPress: POP Chain Leading to Site Takeover, Backd...
Latest Alerts for WordPress: POP Chain Leading to Site Takeover, Backdoor-Distributing Phishing Campaign On December 6, 2023, WordPress rolled out version 6.4.2, addressing a vulnerability introduced ...

Why Should Companies Choose Cybersecurity Providers with ISO 27001 and...
Why Should Companies Choose Cybersecurity Providers with ISO 27001 and SOC 2 Certifications? Cyber threats are evolving at an unprecedented pace, and businesses must prioritize partnering with cyberse...

December 2023 Android Security Bulletin: Critical and Potentially Expl...
December 2023 Android Security Bulletin: Critical and Potentially Exploited Vulnerabilities, Google Pixel Update Google has released the December 2023 Android Security Bulletin. Despite the bulletin b...

New CISA Advisory: Threat Actors Exploited Adobe ColdFusion Vulnerabil...
New CISA Advisory: Threat Actors Exploited Adobe ColdFusion Vulnerability (CVE-2023-26360) to Target Government Servers The Cybersecurity and Infrastructure Security Agency (CISA) has issued a Cyberse...

Phishing in E-commerce: Understanding Digital Threats Effectively
Phishing in E-commerce: Understanding Digital Threats Effectively In the rapidly evolving digital marketplace, the threat of phishing in e-commerce has become a critical concern. To navigate these tre...

Critical RCE Vulnerabilities in Atlassian Products: CVE-2022-1471, CVE...
Critical RCE Vulnerabilities in Atlassian Products: CVE-2022-1471, CVE-2023-22522, CVE-2023-22524, and CVE-2023-22523 [Update] December 11, 2023: “CISA Urges Swift Action on Critical Atlassian Vulnera...

Weekly Vulnerability Summary by CISA: Apache, Google Chrome, PrestaSho...
Weekly Vulnerability Summary by CISA: Apache, Google Chrome, PrestaShop, WordPress, ZyXEL The Cybersecurity and Infrastructure Security Agency (CISA) has once again issued a summary of the latest vuln...

ALPHV/BlackCat Ransomware Attack on Tipalti, Threatening Tipalti’s Cus...
ALPHV/BlackCat Ransomware Attack on Tipalti, Threatening Tipalti’s Customers The first days of December 2023 were rattled by ALPHV/BlackCat ransomware group, known for its sophisticated cyberattacks a...