Saturday, July 27, 2024

Communications

Twilio Authy and IE Flaws Now Added to Exploited Vulnerabilities List 

The United States Cybersecurity and Infrastructure Security Agency (CISA) has officially added two critical vulnerabilities to its Known Exploited Vulnerabilities catalogue. These vulnerabilities have...

Introduction To Application Security

What is Application Security Application security is a crucial aspect of software development that aims to protect the application code and the data it handles...

CrowdStrike Update Crashes Windows Systems Worldwide

Businesses worldwide faced significant disruptions as a recent CrowdStrike update caused Windows workstations to crash, leading to the infamous “blue screen of death.” CrowdStrike...

Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments

A vulnerability tracked as CVE-2024-39929 with a CVSS score of 9.1, has been addressed. This flaw previously allowed threat actors to craft and deliver...

Torrents Harbor ViperSoftX Malware 

Researchers have discovered ViperSoftX, a sophisticated malware previously detected by Fortinet in 2020, lurking within torrents disguised as eBooks. ViperSoftX dynamically loads and runs...

Supply Chain Attack Targets jQuery Packages.

Cybersecurity professionals have uncovered a sophisticated supply chain attack involving GitHub, npm, and jsDelivr code repositories. The attacker cleverly embedded malware within the rarely...

VPN Apps Removed from Russian App Store Sparks Controversies

Apple recently yielded to government pressure and removed several virtual private network (VPN) apps from the Russian App Store. The action affected 25 mobile...

Zergeca Botnet Becomes a Formidable DDoS Threat

Cybersecurity researchers recently confirmed the existence of Zergeca, a powerful botnet written in Golang. Unlike typical DDoS botnets, Zergeca boasts an impressive array of...

Multiple Websites Suffer the Effects of Hijack Polyfill Supply Chain Attack

According to a report by Sansec, no fewer than 110,000 sites using polyfill.io have suffered the effects of a supply chain attack orchestrated by...

FIN9-Linked Vietnamese Hackers In Trouble Over $71M Cybercrime

An unsealed indictment charges four Vietnamese nationals with involvement in a series of cyber intrusions that collectively caused U.S. companies to suffer over $71...