Dropbox Breach ! 130 code repositories stolen
As per the latest blogpost by Dropbox security team, revealed that they were breached on October 13, 2022. Threat actors used employee login information they had obtained through phishing to…
Azure Cosmos DB Auth Bypass Flaw
A newly disclosed vulnerability in Microsoft Azure Cosmos DB called CosMiss was found to open the door to an attacker without needing authentication under certain conditions. The vulnerability opens if…
OpenSSL 3.0 Critical Patch Released
Two high severity security vulnerabilities affecting OpenSSL were made public, which were the issues that led to Fedora 37 being delayed to mid November to allow the release images have mitigated OpenSSL…
ConnectWise Patches a Critical RCE
ConnectWise has patched a critical RCE flaw impacting Recover and R1Soft Server Backup Manager. The vulnerability is an Improper Neutralization of Special Elements in Output Used by a Downstream Component.…
SQLite patches more than a decade old vulnerability
SQLite database engine has been patched with a high severity vulnerability that attackers could exploit to crash or control programs that rely on the software. They have revised the software…
MBDA – Missile Maker Data Breach
The Adrastea threat actor involved in a data breach of a European missile manufacturer having ties to NATO, MBDA. MBDA refused to comment and said it was not hacked during…
MotW Windows Exploit receives unofficial patch
0patch released an unofficial patch for an actively exploited security vulnerability in Microsoft Windows that allows bypassing Mark-of-the-Web (MotW) protections by using files signed with malformed signatures. The issue affects…