PCI DSS 4.0 Released !

PCI DSS 4.0 Released !

The PCI Security Standards Council published version 4.0 of the PCI Data Security Standard. PCI DSS is a global standard that provides a baseline of technical and operational requirements designed…
SQL Injection Flaw in Django !

SQL Injection Flaw in Django !

Django is a free and open-source, Python-based web framework that follows the model–template–views (MTV) architectural pattern. Django is maintained by the independent organization Django Software Foundation. The latest releases of…
Google Chrome Fourth Zero day Patched

Google Chrome Fourth Zero day Patched

Google Chrome has released a new patch to address the high severity zero-day threat of CVE-2022-2294 heap-based buffer overflow vulnerability in the WebRTC (Web Real-Time Communications) component. This Google vulnerability…
HackerOne Bug Bounty Report Leak

HackerOne Bug Bounty Report Leak

HackerOne says an employee stole vulnerability disclosure reports submitted via its platform to claim the bounty from the company's partners for themselves. Bug bounty programs are initiated by companies to…
Raspberry Robin Worm – Turn Around

Raspberry Robin Worm – Turn Around

Raspberry Robin is a Windows worm discovered by researchers that propagates through removable USB devices. Earlier this year we have covered an article explaining an overview of the malware The…
GitLab Critical Security Release

GitLab Critical Security Release

GitLab has patched a critical vulnerability that could allow an attacker to execute code remotely. The security issue, which has been rated as critical, has been discovered in all versions…
Jenkins ZeroDay Plugin Vulnerabilities

Jenkins ZeroDay Plugin Vulnerabilities

Experts from Jenkins has disclosed numerous flaws affecting 29 plugins for the Jenkins automation server. A most popular open-source automation server Jenkins, maintained by CloudBees and the Jenkins community. The…
AstraLocker 2.0 Smash and Grab

AstraLocker 2.0 Smash and Grab

Researchers discovered the latest verison of AstraLocker ransomware is engaged in so-called smash and grab ransomware operation. In a typical ransomware attack, threat actors jump into a victim’s network via…