Microsoft Forged Key Attack might be deeper than expected
Researchers are concerned about the encryption key used by Chinese hackers to break into the email accounts of U.S. government agencies disclosed last week and also gave them access to…
Roblox Data Breach in to limelight
Roblox has suffered a major data breach, leading to the release of personal information, including addresses from those who attended the Roblox Developer Conference between 2017-2020. The leak contains almost…
Checkmarx Uncovers Supply Chain Attacks in Financial Sector
Checkmarx has uncovered a new and sophisticated cyber threat targeting the banking sector. The research team uncovered two distinct open-source software supply chain attacks targeting financial institutions. These attacks, which involved…
Mallox Ransomware Activity Surges
Mallox ransomware actors’ – aka TargetCompany, activity suddenly seen a steady surge by breaking into target networks via vulnerable SQL servers. Active since June 2021, it has infected hundreds…
JumpCloud attack attributed to Labyrinth Chollima
JumpCloud cloud directory-as-a-service provider unfazed a cyberattack that first came to light, which has been attributed to a North Korean hacking group. The attack was first detected as anomalous activity…
Apache OpenMeetings Vulnerabilities
Researcher discovered three vulnerabilities in the open source Web application Apache OpenMeetings application can be used together into an attack chain that allows threat actors to take over a user…
CISA KEV Update July 2023 – Part II
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29298 Adobe ColdFusion Improper Access Control Vulnerability CVE-2023-38205 Adobe ColdFusion Improper Access Control Vulnerability The…
Estée Lauder Unfazes Double Ransomware Attack
Estée Lauder, a cosmetic conglomerate, has been listed on the data leak sites of BlackCat and Clop group. The Estée Lauder Companies verified one of the attacks, stating that the…