The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that there was a potential Man In the Middle (MITM) vulnerability in e2guardian, a web content filtering engine. Validation of SSL certificat…
With the growing reliance on web applications and digital platforms, the use of application programming interfaces (APIs) has become increasingly popular. If y…
It was discovered that there was a potential denial of service vulnerability in Django, a popular Python-based web development framework.
AMirai botnetvariant calledPandorahas been observed infiltrating inexpensive Android-based TV sets and TV boxes and using them as part of a botnet to perform d…
Tel Aviv, Israel, Sep 05, 2023 — Reflectiz, a cybersecurity company specializing in continuous web…Holiday Season Cyber Alert: Reflectiz Declares War on Mageca…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.
Cyber attacks on e-commerce applications are a common trend in 2023 as e-commerce businesses become more omnichannel, they build and deploy increasingly more A…
A new financially motivated operation is leveraging a malicious Telegram bot to help threat actors scam their victims.DubbedTelekopye, a portmanteau of Telegra…
Han Zheng discovered an out-of-bounds write in w3m, a text based web browser and pager. It can be triggered by sending a crafted HTML file to the w3m binary. I…
A malicious toolset dubbedSpacecolonis being deployed as part of an ongoing campaign to spread variants of the Scarab ransomware across victim organizations gl…
An auto-block can occur for an untrusted X-Forwarded-For header in MediaWiki, a website engine for collaborative work. X-Forwarded-For is not necessarily trust…
It was discovered that Flask, a lightweight WSGI web application framework, will under certain conditions cache a response containing data intended for one cli…
Nearly 2,000 Citrix NetScaler instances have been compromised with a backdoor by weaponizing a recently disclosed critical security vulnerability as part of a …
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the s…
Seokchan Yoon discovered that missing sanitising in the email and URL validators of Django, a Python web development framework, could result in denial of servi…
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, bypass of the s…
Cybersecurity researchers have discovered a new version of malware calledRilidethat targets Chromium-based web browsers to steal sensitive data and steal crypt…
Hundreds of Citrix NetScaler ADC and Gateway servers have been breached by malicious actors to deploy web shells, according to the Shadowserver Foundation.The …
Threat actors have been observed using Amazon Web Services ( AWS ) 's System Manager (SSM) agent as a Remote Access Trojan (RAT) on Linux and Windows machines.
Cybersecurity agencies in Australia and the U.S. havepublisheda joint cybersecurity advisory warning against security flaws in web applications that could be e…
A severe privilege escalation issue impacting MikroTik RouterOS could be weaponized by remote malicious actors to execute arbitrary code and seize full control…
The recent attack againstMicrosoft's email infrastructureby a Chinese nation-state actor referred to as Storm-0558 is said to have a broader scope than previou…
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS (CVE-2023-37201). Cross-compartment wrappers wrapping …