Cyber News 72

Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

Novel attack vectors leverage the CVE-2023-22527 RCE flaw discovered in January, which is still under active attack, to turn targeted…

Cyber Insight

Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability

Fortra has addressed a critical security flaw impacting FileCatalyst Workflow that could be abused by a remote attacker to gain…

Cyber Insight

Manufacturing Sector Under Fire From Microsoft Credential Thieves

The emails impersonate well-known companies in the industry, fooling the victim into thinking they are communicating with a legitimate entity.…

Cyber Insight

APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw…

Cyber Insight

Hitachi Energy Vulnerabilities Plague SCADA Power Systems

The company has assessed four of the five disclosed vulnerabilities as being of high to critical severity. The company has…

Cyber Insight

Why LLMs Are Just the Tip of the AI Security Iceberg

With the right processes and tools, organizations can implement advanced AI security frameworks that make hidden risks visible, enabling security…

Cyber Insight

BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

The threat actors behind the BlackByte ransomware group have been observed likely exploiting a recently patched security flaw impacting VMware…

Cyber Insight

Matthew Green on Telegram’s Encryption

Matthew Green wrote a really good blog post on what Telegram’s encryption is and is not. Matthew Green wrote a…

Cyber Insights

Breaking

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

2 Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Be Mindful of Social Media Privacy

Twitter CEO’s account hacked via SIM-card swap attack

No one is immune to phishing attack

Password – the Gate of Hell of the Digital Age

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Attackers Exploit Critical Atlassian Confluence Flaw for Cryptojacking

Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability

Manufacturing Sector Under Fire From Microsoft Credential Thieves

APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

Hitachi Energy Vulnerabilities Plague SCADA Power Systems

Why LLMs Are Just the Tip of the AI Security Iceberg

BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

Matthew Green on Telegram’s Encryption

You Missed

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records