GitLab Releases Fixes for Critical Zero-Click Account Hijacking Vulnerability
GitLab has recently released urgent security updates to tackle a critical zero-click account hijacking vulnerability known as CVE-2023-7028. This vulnerability,…
Cryptominers Exploiting Apache Hadoop and Flink Using Rootkits
Cryptocurrency miners are increasing their attacks on critical data infrastructure by targeting vulnerabilities in Apache Hadoop and Flink systems. These…
Mandiant’s X Account Hacked to Promote Crypto Scam
Mandiant’s X account encountered a breach in security, which was tactically exploited by cybercriminals to enable the theft of cryptocurrency…
Chinese Hackers Exploit Zero-Day Flaws in Ivanti VPN
Chinese hackers have strategically exploited zero-day vulnerabilities within Ivanti’s Connect Secure (ICS) and Policy Secure, utilizing a sophisticated attack chain…
North Korean Hackers Stole $600M Cryptocurrency in 2023
In 2023, TRM Labs reveals the staggering $600 million cryptocurrency heist executed by hackers from North Korea Cryptocurrency theft has…
Attackers Exploit SMTP Smuggling: Bypassing Email Authentication through Spoofed Emails
An emerging exploitation method known as Simple Mail Transfer Protocol (SMTP) smuggling is being exploited by malicious actors to send…
Critical Update: Patching the Heap Buffer Overflow in Chrome’s WebRTC
Recent disclosures have brought attention to a highly significant vulnerability, known as CVE-2023-7024, which affects both Google Chrome and Microsoft…
Hackers Bypass Passwords Exploiting Google OAuth Endpoint to Access Accounts
Hackers have discovered and taken advantage of a vulnerability present in Google’s OAuth endpoint within the current cyber threat landscape….
Microsoft’s critical RCE: Securing Your Perforce Helix Core Server from Exploits
In August 2023, Microsoft’s security analysts unearthed critical vulnerabilities within the Perforce Helix Core Server, a widely utilized source code…
Zimbra Email Software: Hacker Groups Exploit Zero-Day Flaw (CVE-2023-37580)
A critical zero-day vulnerability, known as CVE-2023-37580, has raised significant concerns regarding the Zimbra Collaboration email software. This flaw in…