July 2024 – Page 2 – TheCyberThrone

NIST releases Dioptra tool to assess for AI risks

The NIST, the U.S. Commerce Department agency has re-released a testbed designed to measure how malicious attacks particularly attack that “poison” AI model training data might degrade the performance of…

PravinKarthik July 28, 2024

Mimecast Acquires Code42

Mimecast, an email security vendor, has set to acquire Code42.The financial details have not yet been disclosed. Founded in 2001, Code42 in recent years has focused on expanding its data…

PravinKarthik July 27, 2024

Hacker turned Employee got recruited by KnowBe4

KnowBe4, a US-based security vendor, revealed that it unwittingly hired a North Korean hacker who attempted to load malware into the company's network. KnowBe4 operates in 11 countries and is…

PravinKarthik July 27, 2024

ConfusedFunction Vulnerability in GCP

Researchers have uncovered a privilege escalation vulnerability in the Cloud Functions service on the Google Cloud Platform, that could allow an attacker to gain unauthorized access to other services and…

PravinKarthik July 26, 2024

Spring Cloud Dataflow Vulnerability -CVE-2024-37084

A critical vulnerability has been identified in Spring Cloud Data Flow, a popular microservices-based streaming and batch data processing platform used in Cloud Foundry and Kubernetes environments. This vulnerability, tracked…

PravinKarthik July 26, 2024

Docker fixes Critical Vulnerability -CVE-2024-41110

Docker has released an urgent security advisory that has fixes for a critical vulnerability in certain versions of Docker Engine that allows attackers to bypass authorization plugins. The vulnerability, tracked…

PravinKarthik July 26, 2024

SIEMENS Fixes Several Vulnerabilities in SICAM Products

Siemens has released critical security advisory for its SICAM products vulnerabilities that could lead to unauthorized access and data leaks. The affected products include the SICAM A8000 RTUs, SICAM EGS,…

PravinKarthik July 25, 2024

Progress fixes Critical Vulnerability in Telerik -CVE-2024-6327

Progress Software’s has fixed two vulnerabilities in Telerik Reporting tools that could lead to full system compromise and allow attackers to remotely execute code or inject malicious objects into affected…

PravinKarthik July 25, 2024