Recent reports reveal significant vulnerabilities in several leading self-encrypting solid state drives (SSDs), raising alarm for users who rely on these devices for securing sensitive information. Security researchers from Radboud University, Carlo Meijer and Bernard van Gastel, have uncovered critical flaws that could potentially allow unauthorized individuals to bypass encryption…
Emergence of “SearchLeak” Exploit Targeting Microsoft Copilot In a significant cybersecurity breach, researchers have unveiled a new attack vector dubbed “SearchLeak,” which exploits the functionality of Microsoft’s Copilot tool. The method involves an attacker sending a crafted email containing a URL that directs Copilot to extract sensitive information from a…
If you operate an eCommerce website using WordPress with the WooCommerce plugin, it is crucial to be aware of a recent vulnerability that could jeopardize the integrity of your online store. A researcher from RIPS Technologies GmbH, Simon Scannell, has uncovered an arbitrary file deletion vulnerability within the widely used…
Oracle VirtualBox Vulnerability Exposed: A Critical Threat to Cybersecurity A new zero-day vulnerability in Oracle’s renowned open-source virtualization software, VirtualBox, has been exposed by an independent exploit developer and vulnerability researcher. This flaw presents a significant risk, as it permits malicious programs to breach the boundaries of a virtual machine…
The Iranian-affiliated hacking group known as Handala has executed another cyberattack, this time targeting the California Water Service (Cal Water). This incident, which the group claims is a response to U.S. actions in Iran, raises significant concerns about the security of public infrastructure. Cal Water, a key utility provider serving…
Potential Vulnerability Discovered in DJI Drone Web App: Implications for User Security Cybersecurity researchers from Check Point have unveiled details about a significant vulnerability in the DJI Drone web application that posed risks to user accounts and sensitive data. This flaw potentially allowed attackers to access information such as flight…
Lack of Clarity Surrounds AMD’s TSME Support for Consumer CPUs In a recent exchange, AMD engineer Limoncello denied further commentary regarding the company’s stance on Transparent Secure Memory Encryption (TSME) for consumer CPUs, effectively concluding the conversation initiated by Kilpatrick. This abrupt termination leaves users seeking clarity on the implications…
In this month’s Patch Tuesday, Microsoft released a significant round of security updates addressing 63 vulnerabilities within its products, including the Windows operating system. Among these, 12 vulnerabilities have been categorized as critical, 49 as important, one as moderate, and one as low in severity. System administrators are urged to…
Meta is currently assessing the implementation of face-recognition technology developed by Rank One Computing, a company known for supplying surveillance tools to law enforcement and military agencies in the United States. This initiative aims to integrate the technology into Meta’s smart glasses, as confirmed by internal sources. The association between…