A significant security vulnerability has emerged in Gogs, an open-source self-hosted Git service, allowing authenticated users to execute arbitrary code under specific conditions. This flaw, rated 9.4 on the CVSS scale, has not yet been assigned a Common Vulnerabilities and Exposures (CVE) identifier, raising concerns about its oversight in the…
WhatsApp Vulnerability Exposes Users to Potential Hacks via Video Calls Recently, a significant security flaw in WhatsApp was unveiled by Google Project Zero researcher Natalie Silvanovich. This vulnerability allows an attacker to gain complete control over a user’s WhatsApp account simply by initiating a video call, a scenario that may…
Emerging AI Cybersecurity Models Raise Concerns Among Experts The cybersecurity landscape is rapidly shifting as organizations like Anthropic unveil advanced AI models designed to enhance security measures. Tarah Wheeler, chief security officer of TPO Group, cautions against the assumption that Anthropic’s innovations are unique. She suggests other companies may already…
In a significant cybersecurity breach, the ShinyHunters group has exploited a previously unaddressed vulnerability in Oracle PeopleSoft to infiltrate enterprise systems. Their campaign has primarily targeted universities, leveraging the exploit to extract sensitive data while demanding ransom payments for its confidentiality. The operation was observed between May 27 and June…
A critical vulnerability has emerged in the Secure Shell (SSH) library, Libssh, potentially allowing unauthorized access to vulnerable servers for the past four years. This issue, referred to as CVE-2018-10933, enables attackers to bypass authentication methods entirely, granting them administrative control without requiring a password. This authentication bypass vulnerability was…
The Home Office has stated that its implementation of face scanning technology is intended to serve as an “additional” resource for border personnel, emphasizing that it will not “supersede or undermine human judgment.” However, the department has not clarified how this technology will be applied in practical situations. According to…
Cyber Attack Exploits SSL VPNs: Significant Breaches Uncovered Recent findings from Hudson Rock reveal that a sophisticated cyberattack has significantly compromised multiple organizations across several countries. The attackers employed advanced methods to intercept SSL VPN authentication hashes, utilizing a powerful 45-GPU cluster managed through Hashtopolis to crack these hashes. By…
A significant cybersecurity incident has emerged as a security researcher identified multiple critical vulnerabilities in FreeRTOS and its variants, which include Amazon FreeRTOS, OpenRTOS, and SafeRTOS. These vulnerabilities jeopardize a broad spectrum of Internet of Things (IoT) devices and critical infrastructures, raising alarms among industry stakeholders. FreeRTOS is a widely…
Cybercriminals Exploit Fake AI Tools in Targeted Attack on JetBrains Marketplace Cybercriminals have launched a coordinated supply chain attack targeting software developers through the JetBrains Marketplace, utilizing counterfeit artificial intelligence (AI) tools. This breach was uncovered by Aikido Security, a firm specializing in code security, which identified 15 fraudulent plugins…