Month: March 2023

NETGEAR Orbi WiFi Systems command execution |

March 25, 2023

NAME__________NETGEAR Orbi WiFi Systems command executionPlatforms Affected:NETGEAR RBR750 NETGEAR RBS750 NETGEAR RBR840 NETGEAR RBS840 NETGEAR RBR850 NETGEAR RBS850 NETGEAR RBRE960...

Sauter EY-AS525F001 with moduWeb information disclosure | CVE-2023-27927

March 25, 2023

NAME__________Sauter EY-AS525F001 with moduWeb information disclosurePlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Sauter EY-AS525F001 with moduWeb could allow a remote attacker to obtain...

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

March 25, 2023

Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook vulnerability....

U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

March 25, 2023

In what's a case of setting a thief to catch a thief, the U.K. National Crime Agency (NCA) revealed that...

OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

March 25, 2023

OpenAI on Friday disclosed that a bug in the Redis open source library was responsible for the exposure of other...

Procter & Gamble confirms data theft via GoAnywhere zero-day

March 25, 2023

Consumer goods giant Procter & Gamble has confirmed a data breach affecting an undisclosed number of employees after its GoAnywhere...

‘Bitter’ espionage hackers target Chinese nuclear energy orgs

March 25, 2023

A cyberespionage hacking group tracked as 'Bitter APT' was recently seen targeting the Chinese nuclear energy industry using phishing emails...

News

OpenAI: ChatGPT payment data leak caused by open-source bug

March 25, 2023

OpenAI says a Redis client open-source library bug was behind Monday's ChatGPT outage and data leak, where users saw other...

UK creates fake DDoS-for-hire sites to identify cybercriminals

March 25, 2023

The U.K.'s National Crime Agency (NCA) revealed today that they created multiple fake DDoS-for-hire service websites to identify cybercriminals who utilize...

GitHub.com rotates its exposed private SSH key

March 25, 2023

GitHub has rotated its private SSH key for GitHub.com after the secret was was accidentally published in a public GitHub repository. The software...

The Week in Ransomware – March 24th 2023 – Clop overload

March 25, 2023

This week's news has been dominated by the Clop ransomware gang extorting companies whose GoAnywhere services were breached using a...

Windows, Ubuntu, and VMWare Workstation hacked on last day of Pwn2Own

March 25, 2023

On the third day of the Pwn2Own hacking contest, security researchers were awarded $185,000 after demonstrating 5 zero-day exploits targeting...

Australian police arrest four BEC actors who stole $1.7 million

March 25, 2023

The Australian Federal Police (AFP) has arrested four members of a cybercriminal syndicate that has laundered $1.7 million stolen from...

FBI confirms access to Breached cybercrime forum database

March 25, 2023

Today, the FBI confirmed they have access to the database of the notorious BreachForums (aka Breached) hacking forum after the...

Microsoft shares tips on detecting Outlook zero-day exploitation

March 25, 2023

Microsoft today published a detailed guide aiming to help customers discover signs of compromise via exploitation of a recently patched...

TheGradCafe – 310,975 breached accounts

March 25, 2023

HIBP In February 2023, the grad school admissions search website TheGradCafe suffered a data breach that disclosed the personal records...