A newly discovered set of undocumented commands in the widely used ESP32 microcontroller has raised significant cybersecurity concerns, with potential risks spanning consumer electronics, industrial control systems, and critical infrastructure.Read More →
Cloud security remains an evolving challenge as new attack vectors emerge, often leveraging misconfigurations rather than outright software vulnerabilities. In August 2024, researchers at Datadog Security Labs uncovered a novelRead More →
The National Security Agency (NSA) has officially released Ghidra 11.3, the latest iteration of its open-source Software Reverse Engineering (SRE) suite. This update delivers significant enhancements, including improved debugging infrastructure,Read More →
ESET researchers recently disclosed CVE-2024-7344, a critical vulnerability that compromises UEFI Secure Boot, a cornerstone of firmware-level security for modern systems. This flaw affects a wide range of UEFI-based systemsRead More →
Researchers have discovered a new attack named SysBumps, which targets macOS systems running on Apple Silicon processors. This attack leverages speculative execution vulnerabilities in system calls to bypass critical securityRead More →
In a concerning development within cybersecurity, attackers have been leveraging DocuSign’s API capabilities to send out fraudulent invoices that closely mimic genuine documents. These campaigns have been rising in frequency,Read More →
Microsoft experienced a significant disruption across several Azure cloud services on July 30, 2024, due to a distributed denial-of-service (DDoS) attack. The attack, which targeted Azure and Microsoft 365 services,Read More →
AT&T recently faced a significant cybersecurity breach involving its Snowflake account, leading to the company allegedly paying a ransom to prevent further data leakage. According to various reports, the telecommunicationsRead More →
In a series of unsettling developments, Ticketmaster, the global ticket sales and distribution company, has once again fallen victim to a major cybersecurity breach. This time, hackers claim to haveRead More →