US Senator Exposes NSA Purchase of Americans’ Internet Records
US Senator Ron Wyden of Oregon has unveiled documents last week substantiating claims that the National Security Agency (NSA) is...
Month: January 2024
Microsoft Provides Defense Guidance After Nation-State Compromise
Microsoft has provided new details for responders to the Russian nation-state attack that compromised its systems earlier in January, and...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: Apple Releases Security Updates for Multiple Products
Apple Releases Security Updates for Multiple Products Apple has released security updates for iOS and iPadOS, macOS, Safari, watchOS, and tvOS....
CISA: CISA Joins ACSC-led Guidance on How to Use AI Systems Securely
CISA Joins ACSC-led Guidance on How to Use AI Systems Securely CISA has collaborated with the Australian Signals Directorate’s Australian...
CISA: Mozilla Releases Security Updates for Thunderbird and Firefox
Mozilla Releases Security Updates for Thunderbird and Firefox Mozilla has released security updates to address vulnerabilities in Thunderbird and Firefox....
CISA: CISA Releases Six Industrial Control Systems Advisories
CISA Releases Six Industrial Control Systems Advisories CISA released six Industrial Control Systems (ICS) advisories on January 23, 2024. These...
CISA: CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...
CISA: Cisco Releases Security Advisory for Multiple Unified Communications and Contact Center Solutions Products
Cisco Releases Security Advisory for Multiple Unified Communications and Contact Center Solutions Products Cisco released a security advisory to address...
CISA: Guidance: Assembling a Group of Products for SBOM
Guidance: Assembling a Group of Products for SBOM Today, CISA published Guidance on Assembling a Group of Products created by the Software...
CISA: CISA Releases Two Industrial Control Systems Advisories
CISA Releases Two Industrial Control Systems Advisories CISA released two Industrial Control Systems (ICS) advisories on January 25, 2024. These...
CISA: Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series
Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series Juniper Networks released a security...
BlackCat/ALPHV Ransomware Victim: Dutton Brock
BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
US-CERT Vulnerability Summary for the Week of January 22, 2024
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and...
HackerOne Bug Bounty Disclosure: b-argo-cd-csrf-leads-to-kubernetes-cluster-compromise-b-tint
Company Name: b'Internet Bug Bounty' Company HackerOne URL: https://hackerone.com/ibb Submitted By:b'tint0'Link to Submitters Profile:https://hackerone.com/b'tint0' Report Title:b'Argo CD CSRF leads to...
HackerOne Bug Bounty Disclosure: b-xss-on-terra-indriverapp-com-b-maxdha
Company Name: b'inDrive' Company HackerOne URL: https://hackerone.com/indrive Submitted By:b'maxdha'Link to Submitters Profile:https://hackerone.com/b'maxdha' Report Title:b'XSS on terra-6.indriverapp.com'Report Link:https://hackerone.com/reports/1969696Date Submitted:29 January 2024...
HackerOne Bug Bounty Disclosure: b-html-injection-in-event-description-b-khaledx
Company Name: b'LinkedIn' Company HackerOne URL: https://hackerone.com/linkedin Submitted By:b'khaledx'Link to Submitters Profile:https://hackerone.com/b'khaledx' Report Title:b'Html injection in event Description 'Report Link:https://hackerone.com/reports/2215418Date...
HackerOne Bug Bounty Disclosure: b-pickle-deserialization-vulnerability-in-xcoms-b-zpbrent
Company Name: b'Internet Bug Bounty' Company HackerOne URL: https://hackerone.com/ibb Submitted By:b'zpbrent'Link to Submitters Profile:https://hackerone.com/b'zpbrent' Report Title:b'Pickle deserialization vulnerability in XComs'Report...
CISA: Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series
Juniper Networks Releases Security Bulletin for J-Web in Junos OS SRX Series and EX Series Juniper Networks released a security...
Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords
A now-patched security flaw in Microsoft Outlook could be exploited by threat actors to access NT LAN Manager (NTLM) v2...
Riding the AI Waves: The Rise of Artificial Intelligence to Combat Cyber Threats
In nearly every segment of our lives, AI (artificial intelligence) now makes a significant impact: It can deliver better healthcare...
Albabat, Kasseika, Kuiper: New Ransomware Gangs Rise with Rust and Golang
Cybersecurity researchers have detected in the wild yet another variant of the Phobos ransomware family known as Faust. Fortinet FortiGuard...
493 Companies Share Their SaaS Security Battles – Get Insights in this Webinar
In today's digital world, security risks are more prevalent than ever, especially when it comes to Software as a Service...
Ministry of Agriculture, Forestry and Fisheries Electronic Delivery Check System XML external entity injection | CVE-2024-22380
NAME__________Ministry of Agriculture, Forestry and Fisheries Electronic Delivery Check System XML external entity injectionPlatforms Affected:Japanese Ministry of Agriculture Forestry and...
