Cyber News 80

Slack Patches AI Bug That Let Attackers Steal Data From Private Channels

A prompt injection flaw in the AI feature of the workforce collaboration suite makes malicious queries of data sources appear…

Cyber Insight

Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control

Details have emerged about a China-nexus threat group’s exploitation of a recently disclosed, now-patched security flaw in Cisco switches as…

Cyber Insight

New ‘ALBeast’ Vulnerability Exposes Weakness in AWS Application Load Balancer

As many as 15,000 applications using Amazon Web Services’ (AWS) Application Load Balancer (ALB) for authentication are potentially susceptible to…

Cyber Insight

Why End of Life for Applications Is the Beginning of Life for Hackers

In the next year, more than 35,000 applications will move to end-of-life status. To manage risk effectively, we need to…

Cyber Insight

The Facts About Continuous Penetration Testing and Why It’s Important

What is Continuous Attack Surface Penetration Testing or CASPT? Continuous Penetration Testing or Continuous Attack Surface Penetration Testing (CASPT) is…

Cyber Insight

GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges

GitHub has released fixes to address a set of three security flaws impacting its Enterprise Server product, including one critical…

Cyber Insight

Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

Cybersecurity researchers have disclosed a critical security flaw in the LiteSpeed Cache plugin for WordPress that could permit unauthenticated users…

Cyber Insight

Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild

Google has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has…

Cyber Insights

Breaking

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

2 Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Be Mindful of Social Media Privacy

Twitter CEO’s account hacked via SIM-card swap attack

No one is immune to phishing attack

Password – the Gate of Hell of the Digital Age

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Slack Patches AI Bug That Let Attackers Steal Data From Private Channels

Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control

New ‘ALBeast’ Vulnerability Exposes Weakness in AWS Application Load Balancer

Why End of Life for Applications Is the Beginning of Life for Hackers

The Facts About Continuous Penetration Testing and Why It’s Important

GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges

Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild

You Missed

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records