October 29, 2024 – TheCyberThrone

Decoding CISA’s draft guidance on Product Security Bad Practices

The U.S. CISA and the FBI have released a draft ‘Product Security Bad Practices’ guidance aimed at helping software manufacturers reduce customer risk by prioritizing security throughout the product development…

PravinKarthik October 29, 2024

Spring Security fixes Critical Vulnerability CVE-2024-38821

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If exploited, this vulnerability could potentially allow unauthorized access to static resources, undermining…

PravinKarthik October 29, 2024

Black Basta ransomware uses Microsoft Teams in its campaigns

Security researchers from ReliaQuest has uncovered an attack campaign in which the Black Basta ransomware group have been performing social engineering attacks to gain access to victims' computers by spamming…

PravinKarthik October 29, 2024