April 2022 – Page 4 – TheCyberThrone

CISA Adds Seven vulnerabilities to Known Exploited Catalog

The U.S. CISA has added seven vulnerabilities to its Known Exploited Vulnerabilities Catalog, including flaws affecting Microsoft, Linux, WSO2, and Jenkins systems According to Binding Operational Directive (BOD) 22-01: Reducing the Significant…

PravinKarthik April 26, 2022

VirusTotal Platform RCE Vulnerabilities

There is a vulnerability in the VirusTotal platform that has been discovered by researchers, and it has the potential to be exploited by an attacker to conduct RCE. VirusTotal is…

PravinKarthik April 26, 2022

Bored Ape Yacht Club Insta page Breached! NFT stolen

Yuga Labs, the creator of Bored Ape Yacht Club, a popular nonfungible token collection, has disclosed an Instagram breach by the hackers and used the page to steal digital assets…

PravinKarthik April 26, 2022

Lapsus$ breached TMobile

The LAPSUS$ group made headlines this year after a string of high profile attacks on Nvidia, Microsoft and Samsung. Seven members of the group have since been arrested, but it seems…

PravinKarthik April 26, 2022

TruffleHog 3.0 ! Supports 600 Key Types

The newest version of TruffleHog has launched with support for more than 600 key types, furthering the tool’s ability to hunt for credential leaks. Leaked credentials, including secret key pairs,…

PravinKarthik April 25, 2022

Anonymous! Mind boggling 5.8 TB Russian Data leaked

The Anonymous has collectively given a call for a cyberwar against Russia. The call was made after Russia attacked Ukraine without any provocation. Since then, around 5.8 TB of Russian…

PravinKarthik April 25, 2022

Java Digital Signature Bypass Vulnerability

Security researcher Khaled Nassar released a PoC code for a new digital signature bypass vulnerability, tracked as CVE-2022-21449 with CVSS score: 7.5 in Java. An unauthenticated attacker with network access via multiple…

PravinKarthik April 24, 2022

Atlassian released updates for Jira Seraph

Atlassian released a security advisory for Jira and Jira Service Management, regarding an auth bypass vulnerability in its web authentication framework, Jira Seraph. The vulnerability actually relies in the core…

PravinKarthik April 23, 2022