The Breach News

Cisco Issues Security Updates for Critical Vulnerabilities in Its Products

February 26, 2021

Cisco has released a critical security patch for a severe vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO). This flaw potentially enables unauthenticated remote attackers to bypass authentication on compromised devices. According to a recent advisory from the company, “An attacker could exploit this vulnerability by sending a crafted request to the affected API.” A successful exploit could allow the attacker to obtain a token with administrator-level privileges, enabling authentication to the affected MSO and Cisco Application Policy Infrastructure Controller (APIC) devices. Identified as CVE-2021-1388, this vulnerability scores a 10 (out of 10) on the CVSS vulnerability scale and arises from improper token validation in an API endpoint of the Cisco ACI MSO installed on the Application Services Engine. It impacts ACI MSO versions running on the 3.0 software release. The ACI Multi-Site Orchestrator enables customers to monitor and manage their network infrastructure effectively.

Cisco Issues Critical Security Fixes for Major Vulnerabilities in Its Products February 26, 2021 Cisco has announced the release of security patches addressing a vulnerability of maximum severity within its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO). This flaw could allow an unauthenticated remote attacker to bypass authentication on affected…

Read More

Cisco Issues Security Updates for Critical Vulnerabilities in Its Products

February 26, 2021

Cisco has released a critical security patch for a severe vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO). This flaw potentially enables unauthenticated remote attackers to bypass authentication on compromised devices. According to a recent advisory from the company, “An attacker could exploit this vulnerability by sending a crafted request to the affected API.” A successful exploit could allow the attacker to obtain a token with administrator-level privileges, enabling authentication to the affected MSO and Cisco Application Policy Infrastructure Controller (APIC) devices. Identified as CVE-2021-1388, this vulnerability scores a 10 (out of 10) on the CVSS vulnerability scale and arises from improper token validation in an API endpoint of the Cisco ACI MSO installed on the Application Services Engine. It impacts ACI MSO versions running on the 3.0 software release. The ACI Multi-Site Orchestrator enables customers to monitor and manage their network infrastructure effectively.

Leveraging Wazuh for Achieving Regulatory Compliance

Published on: Aug 18, 2025

In industries that manage sensitive data and personally identifiable information (PII), adherence to regulatory compliance standards is critical. This necessity extends to sectors such as healthcare, finance, government contracting, and education. Key compliance frameworks include:

  • Payment Card Industry Data Security Standard (PCI DSS)
  • General Data Protection Regulation (GDPR)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • NIST Special Publication 800-53
  • Trust Services Criteria (TSC)
  • Cybersecurity Maturity Model Certification (CMMC)

Importance of Compliance

Meeting compliance requirements is essential for several reasons:

  • Protecting organizations from cybersecurity threats, risks, and data breaches.
  • Establishing effective organizational processes that support continuous compliance.

Wazuh: A Key Player in Ensuring Regulatory Compliance As of August 18, 2025, organizations that manage sensitive data, including personally identifiable information (PII), are under increasing pressure to adhere to various regulatory compliance standards. This need for compliance is particularly acute for entities operating in highly regulated sectors such as…

Read More

Leveraging Wazuh for Achieving Regulatory Compliance

Published on: Aug 18, 2025

In industries that manage sensitive data and personally identifiable information (PII), adherence to regulatory compliance standards is critical. This necessity extends to sectors such as healthcare, finance, government contracting, and education. Key compliance frameworks include:

  • Payment Card Industry Data Security Standard (PCI DSS)
  • General Data Protection Regulation (GDPR)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • NIST Special Publication 800-53
  • Trust Services Criteria (TSC)
  • Cybersecurity Maturity Model Certification (CMMC)

Importance of Compliance

Meeting compliance requirements is essential for several reasons:

  • Protecting organizations from cybersecurity threats, risks, and data breaches.
  • Establishing effective organizational processes that support continuous compliance.

Updated ‘unc0ver’ Tool Now Jailbreaks All iPhone Models Running iOS 11.0 – 14.3

March 2, 2021

The popular jailbreaking tool “unc0ver” has received an update that allows it to jailbreak a wide range of iPhone models running iOS versions from 11.0 to 14.3. This update, known as unc0ver v6.0.0, leverages a kernel vulnerability, identified as CVE-2021-1782, which Apple acknowledged was actively exploited as of January. Lead developer Pwn20wnd announced the release on Sunday, emphasizing that the tool can now unlock devices across various iOS versions, including 12.4.9-12.5.1, 13.5.1-13.7, and 14.0-14.3. The vulnerability allows malicious apps to escalate their privileges due to a race condition in the kernel. According to Pwn20wnd, “We wrote our own exploit based on CVE-2021-1782 for #unc0ver to achieve optimal exploit speed and stability.” Apple has since addressed this flaw in its updates for iOS and iPadOS 14.

Updated ‘unc0ver’ Tool Enables Jailbreak for All iPhone Models Running iOS 11.0 to 14.3 On March 2, 2021, the renowned jailbreaking utility known as “unc0ver” received a significant update, allowing it to jailbreak all iPhone models operating on iOS versions from 11.0 to 14.3. This development comes in light of…

Read More

Updated ‘unc0ver’ Tool Now Jailbreaks All iPhone Models Running iOS 11.0 – 14.3

March 2, 2021

The popular jailbreaking tool “unc0ver” has received an update that allows it to jailbreak a wide range of iPhone models running iOS versions from 11.0 to 14.3. This update, known as unc0ver v6.0.0, leverages a kernel vulnerability, identified as CVE-2021-1782, which Apple acknowledged was actively exploited as of January. Lead developer Pwn20wnd announced the release on Sunday, emphasizing that the tool can now unlock devices across various iOS versions, including 12.4.9-12.5.1, 13.5.1-13.7, and 14.0-14.3. The vulnerability allows malicious apps to escalate their privileges due to a race condition in the kernel. According to Pwn20wnd, “We wrote our own exploit based on CVE-2021-1782 for #unc0ver to achieve optimal exploit speed and stability.” Apple has since addressed this flaw in its updates for iOS and iPadOS 14.

WikiLeaks Under Siege: DDoS Attack Strikes Again

Dec 01, 2010

WikiLeaks experienced a significant distributed denial of service (DDoS) attack on Tuesday morning, as detailed by Fast Company. This assault was more severe than a previous one on Sunday, yet it failed to completely disrupt the site. The perpetrator, a hacker known as “The Jester,” took credit for the cyber attack that targeted WikiLeaks just before it released a trove of classified U.S. embassy cables.

The Jester, an ex-soldier, defended his actions by alleging that WikiLeaks was “endangering the lives of our troops, ‘other assets,’ and foreign relations.” After his military service, he positioned himself as a “hacktivist for good,” aiming to combat terrorism and groups linked to Islamic extremism. Cybersecurity expert Mikko Hypponen from F-Secure expressed belief that The Jester was indeed the mastermind behind the attack.

WikiLeaks Targeted by Intensified DDoS Attack On December 1, 2010, WikiLeaks experienced a significant distributed denial of service (DDoS) attack early in the morning, amplifying the cyber challenges faced by the organization following a previous incident just days prior. While this latest attack proved to be more severe than the…

Read More

WikiLeaks Under Siege: DDoS Attack Strikes Again

Dec 01, 2010

WikiLeaks experienced a significant distributed denial of service (DDoS) attack on Tuesday morning, as detailed by Fast Company. This assault was more severe than a previous one on Sunday, yet it failed to completely disrupt the site. The perpetrator, a hacker known as “The Jester,” took credit for the cyber attack that targeted WikiLeaks just before it released a trove of classified U.S. embassy cables.

The Jester, an ex-soldier, defended his actions by alleging that WikiLeaks was “endangering the lives of our troops, ‘other assets,’ and foreign relations.” After his military service, he positioned himself as a “hacktivist for good,” aiming to combat terrorism and groups linked to Islamic extremism. Cybersecurity expert Mikko Hypponen from F-Secure expressed belief that The Jester was indeed the mastermind behind the attack.

Open Source Package with 1 Million Monthly Downloads Compromises User Credentials

Urgent Security Advisory for Developers: Action Required After Vulnerability Discovered A significant security incident has emerged involving version 0.23.3 of the popular elementary-data Python package, compelling developers who have installed this version to undertake immediate mitigation measures. Users are advised to conduct a review of their installed software to ascertain…

Read MoreOpen Source Package with 1 Million Monthly Downloads Compromises User Credentials

⚡ Weekly Roundup: NFC Scams, Curly COMrades, N-able Exploits, Docker Vulnerabilities & More

Aug 18, 2025
Cybersecurity / Hacking Insights

Power doesn’t vanish in a single breach; it gradually erodes through overlooked patches, misconfigured settings, and unmonitored systems. Security doesn’t fail in an instant; it declines slowly, then suddenly. Staying safe isn’t about knowing everything—it’s about taking swift, decisive action before issues accumulate. Clarity fosters control, while hesitation breeds risk. Below are this week’s key developments—each highlighting where prompt action is essential.

⚡ Threat of the Week

Ghost Tap NFC Mobile Fraud on the Rise
— A new Android Trojan, PhantomCard, has emerged as the latest malware targeting near-field communication (NFC) to execute relay attacks aimed at defrauding banking customers in Brazil. Users who inadvertently install the malicious app are guided to place their credit/debit card on the back of their phone to initiate verification, only for their card information to be transmitted to an attacker-controlled NFC relay…

Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More In the ever-evolving landscape of cybersecurity, breaches and vulnerabilities often do not manifest in dramatic incidents but rather emerge in a series of overlooked details—missed patches, incorrect settings, or unmonitored systems. This gradual erosion of security often culminates…

Read More

⚡ Weekly Roundup: NFC Scams, Curly COMrades, N-able Exploits, Docker Vulnerabilities & More

Aug 18, 2025
Cybersecurity / Hacking Insights

Power doesn’t vanish in a single breach; it gradually erodes through overlooked patches, misconfigured settings, and unmonitored systems. Security doesn’t fail in an instant; it declines slowly, then suddenly. Staying safe isn’t about knowing everything—it’s about taking swift, decisive action before issues accumulate. Clarity fosters control, while hesitation breeds risk. Below are this week’s key developments—each highlighting where prompt action is essential.

⚡ Threat of the Week

Ghost Tap NFC Mobile Fraud on the Rise
— A new Android Trojan, PhantomCard, has emerged as the latest malware targeting near-field communication (NFC) to execute relay attacks aimed at defrauding banking customers in Brazil. Users who inadvertently install the malicious app are guided to place their credit/debit card on the back of their phone to initiate verification, only for their card information to be transmitted to an attacker-controlled NFC relay…

Urgent: New Chrome 0-Day Vulnerability Under Active Exploitation – Update Your Browser Immediately!

On March 3, 2021, just a month after addressing an actively exploited zero-day flaw, Google has released updates for another critical vulnerability in Chrome, which is reportedly being targeted by attackers. The latest version, Chrome 89.0.4389.72, available for Windows, Mac, and Linux, includes a total of 47 security enhancements. The most severe issue addresses an “object lifecycle problem in audio,” tracked as CVE-2021-21166. This vulnerability was among two reported by Alison Huffman of Microsoft Browser Vulnerability Research on February 11. A separate audio-related object lifecycle flaw was reported to Google on February 4, coinciding with the launch of Chrome 88. Though details are limited, it’s unclear whether the two issues are interconnected. Google has confirmed the existence of exploits in the wild but hasn’t provided further specifics. Users are urged to update their browsers without delay.

New Chrome Zero-Day Vulnerability Under Active Exploitation—Update Your Browser Immediately March 3, 2021 In a critical update, Google has announced the release of patches for a newly identified zero-day vulnerability within its Chrome web browser, which is reportedly being actively targeted by attackers. This follows just a month after the…

Read More

Urgent: New Chrome 0-Day Vulnerability Under Active Exploitation – Update Your Browser Immediately!

On March 3, 2021, just a month after addressing an actively exploited zero-day flaw, Google has released updates for another critical vulnerability in Chrome, which is reportedly being targeted by attackers. The latest version, Chrome 89.0.4389.72, available for Windows, Mac, and Linux, includes a total of 47 security enhancements. The most severe issue addresses an “object lifecycle problem in audio,” tracked as CVE-2021-21166. This vulnerability was among two reported by Alison Huffman of Microsoft Browser Vulnerability Research on February 11. A separate audio-related object lifecycle flaw was reported to Google on February 4, coinciding with the launch of Chrome 88. Though details are limited, it’s unclear whether the two issues are interconnected. Google has confirmed the existence of exploits in the wild but hasn’t provided further specifics. Users are urged to update their browsers without delay.

Indian Cyber Army Breaches OGRA Website in Retaliation

On December 4, 2010, the Indian Cyber Army executed a hack on the Oil & Gas Regulatory Authority (OGRA) website [www.ogra.org.pk] as part of an escalating cycle of cyberattacks. The website was quickly restored by its administrators. The defacement message claimed the attack was a response to the compromise of over 200 Indian websites by a group known as the Pakistan Cyber Army. The displayed message read: “You Have Been Hacked By The ‘INDIAN CYBER ARMY’. This Is a Retaliation Of Hacking ‘CBI’.” This incident follows an earlier wave of cyberattacks by Pakistani hackers, calling themselves ‘Predators PK,’ in response to a cyber offensive launched by the Indian Cyber Army (ICA), which they framed as revenge for the 26/11 attacks. Unlike the ICA, the Pakistani hackers did not present an ideological motive behind their assault.

Indian Cyber Army Compromises OGRA Website in Retaliatory Attack On December 4, 2010, the Indian Cyber Army, a notable group of hackers, successfully targeted the Oil & Gas Regulatory Authority (OGRA) website, located at www.ogra.org.pk. This incident forms part of an ongoing trend of cyber retaliation between Indian and Pakistani…

Read More

Indian Cyber Army Breaches OGRA Website in Retaliation

On December 4, 2010, the Indian Cyber Army executed a hack on the Oil & Gas Regulatory Authority (OGRA) website [www.ogra.org.pk] as part of an escalating cycle of cyberattacks. The website was quickly restored by its administrators. The defacement message claimed the attack was a response to the compromise of over 200 Indian websites by a group known as the Pakistan Cyber Army. The displayed message read: “You Have Been Hacked By The ‘INDIAN CYBER ARMY’. This Is a Retaliation Of Hacking ‘CBI’.” This incident follows an earlier wave of cyberattacks by Pakistani hackers, calling themselves ‘Predators PK,’ in response to a cyber offensive launched by the Indian Cyber Army (ICA), which they framed as revenge for the 26/11 attacks. Unlike the ICA, the Pakistani hackers did not present an ideological motive behind their assault.