A groundbreaking study titled “Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation” has been released by researchers Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk from Ruhr University Bochum.Read More →
Understanding the business impact of vulnerabilities is crucial in prioritization because it aligns the security efforts with the most critical assets and operations of the organization. This approach ensures thatRead More →
In the dynamic realm of cybersecurity, a new threat has emerged, capturing the attention of experts and users alike: Quishing. This term, a portmanteau of ‘QR code’ and ‘phishing’, representsRead More →
A new research focuses on a newly discovered set of attacks against Active Directory (AD) using Microsoft DHCP servers, which could lead to a full AD takeover. This vulnerability isRead More →
Multiple vulnerabilities have been found in the fingerprint sensors of Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops, which can be exploited to bypass Windows HelloRead More →
The U.S. Securities and Exchange Commission (SEC) has guidelines and rules that relate to how publicly traded companies must handle and disclose data breaches. These rules are primarily focused onRead More →
In a startling revelation, ChatGPT, the advanced AI chatbot developed by OpenAI, has been found to have a significant security vulnerability. The discovery, first reported by renowned security researcher JohannRead More →
CVE-2023-22515 and CVE-2023-22518 are critical vulnerabilities found in Atlassian Confluence, a widely used team collaboration software. CVE-2023-22515 CVE-2023-22518 These vulnerabilities can be particularly dangerous as they can be exploited toRead More →
Google has warned about a method by which hackers could exploit its Calendar service to create a covert Command-and-Control (C2) channel. The technique involves using Google Calendar Events for C2Read More →