Recent developments concerning LibreOffice raise significant cybersecurity concerns for its users. As of now, businesses utilizing this popular open-source software must exercise heightened caution when opening document files. A critical unpatched code execution vulnerability has been identified, which could facilitate malware infiltration simply by opening a maliciously crafted document. LibreOffice,…
An online clothing store affiliated with FBI Director Kash Patel was taken offline on Friday following the discovery that it was facilitating the spread of an Infostealer malware to its visitors. The site, known as Based Apparel, had been compromised by hackers who targeted macOS users, tricking them into downloading…
A significant security vulnerability has been uncovered in Docker Engine that may allow attackers to circumvent authorization plugins under certain circumstances. This issue is assigned the identifier CVE-2026-34040, with a critical CVSS score of 8.8. The flaw arises from an incomplete resolution of CVE-2024-41110, which was a severe vulnerability discovered…
Security researchers have identified multiple zero-day vulnerabilities, collectively named URGENT/11, within VxWorks, a prevalent real-time operating system (RTOS) embedded in over 2 billion devices across various sectors, including aerospace, medical, and industrial applications. This newly uncovered threat poses significant risk, especially given that six of the eleven vulnerabilities are classified…
Rising Challenges in the Bug Bounty Landscape: Trends and Implications Organizations across the tech landscape are grappling with the increasing threat posed by both nation-state and criminal actors, as highlighted by cybersecurity expert Hultquist. While nation-state concerns are indeed significant, it is criminal activity that comprises the majority of incidents…
OpenAI Discloses Compromise in macOS App Signing Workflow OpenAI has issued a statement regarding a significant security incident that occurred on March 31, revealing that a GitHub Actions workflow tied to the signing of its macOS applications inadvertently downloaded a malicious Axios library. Fortunately, the company has confirmed that this…
A recent cybersecurity investigation has unveiled a significant vulnerability in small aircraft that allows potential hackers to manipulate the plane’s electronic systems, raising serious safety concerns. The risks associated with this vulnerability include the alarming possibility of hackers tricking a plane’s electronic systems into displaying inaccurate flight data to pilots,…
The U.S. Federal Bureau of Investigation (FBI) and the Indonesian National Police have successfully disrupted a global phishing operation that relied on a commercially available toolkit known as W3LL. This initiative is reported to have facilitated the theft of account credentials from thousands of victims and aimed to defraud over…
Cisco Settles $8.6 Million Lawsuit Over Security Vulnerabilities in Surveillance Software Cisco Systems has reached an $8.6 million settlement concerning a lawsuit that alleged the company knowingly sold a flawed video surveillance system to U.S. federal and state agencies, despite being aware of critical security vulnerabilities. This case marks a…