Cybersecurity Blog
Ubuntu Addresses Multiple OpenJDK 8 Vulnerabilities
Canonical has released security fixes for multiple OpenJDK 8 vulnerabilities that could result in denial of service, ...
Novel Phishing Method Used in Android and iOS Financial Fraud Campaigns
This method was first disclosed by CSIRT KNF in Poland in July 2023 and later observed in Czechia by ESET analysts. ...
Critical Remote Code Execution Vulnerability Addressed in GiveWP Plugin
The vulnerability, identified as CVE-2024-5932, arises from inadequate validation of user-provided serialized data, ...
TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset
Iran-linked TA453 targeted a religious figure with a fake podcast interview invitation, attempting to deliver the ...
Researcher Details Microsoft Outlook Zero-Click Vulnerability (CVE-2024-38021)
The vulnerability stems from how Outlook handles hyperlink objects in image tags in emails, enabling attackers to ...
TLS Bootstrap Attack on Azure Kubernetes Services can Leak Sensitive Credentials
A new threat known as “WireServing” has been identified in Azure Kubernetes Services (AKS) by Mandiant. This ...
Critical Heap Overflow Vulnerability Discovered in FFmpeg, PoC Published
CVE-2024-7272 is a critical heap overflow vulnerability found in FFmpeg, the popular multimedia framework. The ...
It’s Time To Untangle the SaaS Ball of Yarn
It’s no great revelation to say that SaaS applications have changed the way we operate, both in our personal and ...