Threat actors have been using the JavaScript-based framework SocGholish since 2017 to obtain initial access to computers. To infect systems, SocGholish employs social engineering.…
API
Cybersecurity News
Microsoft was prosecuted for open-source theft via GitHub Copilot.
Programmer and attorney Matthew Butterick have filed lawsuits against Microsoft, GitHub, and OpenAI. He argued that GitHub Copilot infringes on programmers’ rights and breaches…
Vulnerabilities
Checkmk IT infrastructure monitoring software has Vulnerabilities
The Checkmk IT Infrastructure monitoring software has vulnerabilities that have been publicly revealed and could be exploited by a remote, unauthenticated attacker to completely…
Vulnerabilities
Jira Align vulnerabilities allow getting super admin rights
The researcher says that it was theoretically conceivable to move laterally or upward beyond the instance. Jira Align vulnerabilities allow getting super admin rights.…
Vulnerabilities
SQLite Database Library Reported a 22-Year-Old Vulnerability
The SQLite database library has a high-severity vulnerability that was introduced as part of a code update that dates all the way back to…
Malware
New PHP Malware Disseminated Through Cracked Microsoft Office Apps, Telegram, and Other Methods
The Zscaler ThreatLabz research team discovered a PHP (malware) version of the ‘Ducktail’ Infostealer distributed as a cracked application installer for a variety of…
Android malware
Hackers trick victims into installing Android banking malware by using the Vishing scam.
The Vulnerability According to recent data from ThreatFabric, malicious actors are using voice phishing (vishing) techniques to trick victims into installing Android banking malware…
cyberattack
Cyber Attack Suspected in Hartnell College Network Outage
Cyber attack suspected in Hartnell college on its network early on Sunday morning. The public community college in California shut down its servers. It…
Vulnerabilities
Hackers Using Zimbra Collaboration Suite’s Unpatched RCE Flaw
There is currently no patch available to fix a serious remote code execution vulnerability(RCE Flaw) in the enterprise collaboration software and email platform provided…
General
The Boeing 737 MAX disaster demonstrates that you can no longer avoid culpability due to improperly written code.
There are a few occasions in situational law where a single landmark ruling reshapes or reframes the legal environment. That is exactly what happened…