LEGO API flaws leave data insecure
When the name Lego comes to mind, all would think of toy bricks and childhood imagination. BrickLink is a digital service provided by Lego, where second-hand Legos sold. Researchers discovered…
Australian Telecos Giant TPG discloses DataBreach
Australia is in the midst of an unprecedented wave of cyber crime against large organisations, and telecommunications companies have been a recurrent target. Starting with Optus, Telstra, Singtel, Medibank. Now,…
CrowdStrike Expands Falcon with External Attack Surface Management
CrowdStrike has expanded its Falcon platform to deliver enhanced adversary-driven External Attack Surface Management technology. The feature Falcon Surface, a new standalone module that includes capabilities from CrowdStrike’s recent acquisition…
Microsoft Signed Certificates Used in Malicious Activities
Threat actors have been seen exploiting legitimately signed Microsoft drivers in active intrusions into telecommunication, business process outsourcing, managed security service providers, and financial sectors Initial and detailed findings were…
Most Headlined Data Breaches of 2022
Data breaches have been on the rise for several years, and 2022 has been littered with thefts of sensitive information. This year, they've affected companies and organizations of all shapes,…
Citrix releases patches for flaws exploited by APT5
Citrix has released a patch for a critical flaw affecting Citrix ADC and Citrix Gateway, and it is aware of attacks against the vulnerability in the wild. The vulnerability, tracked…
Another Week, Another Set of Vulnerabilities fixed in Chrome
Google releases patches for Chrome that resolve eight vulnerabilities, including five reported by external researchers. All five security defects are use-after-free flaws, a type of memory safety bug. Four of…
Apple fixes 10th Zeroday Exploit of 2022
Apple has released patches to address a new zero-day vulnerability (10th of year 2022), tracked as CVE-2022-42856, which is actively exploited in attacks against iPhones. Apple released security bulletins for…