Cybersecurity researchers have disclosed two unpatched security vulnerabilities[1] in the open-source U-Boot boot loader. The issues, which were uncovered in the IP defragmentation[2] algorithm implemented …
Be Proactive! Shift Security Validation Left
“Shifting (security)” left approach in Software Development Life Cycle (SDLC) means starting security earlier in the process. As organizations realized that software never comes out …
Microsoft Seizes 41 Domains Used in Spear-Phishing Attacks by Bohrium Hackers
Microsoft’s Digital Crimes Unit (DCU) last week disclosed that it had taken legal proceedings against an Iranian threat actor dubbed Bohrium in connection with a …
CISA Warned About Critical Vulnerabilities in Illumina’s DNA Sequencing Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Food and Drug Administration (FDA) have issued an advisory about critical security vulnerabilities in Illumina’s next-generation …
State-Backed Hackers Exploit Microsoft ‘Follina’ Bug to Target Entities in Europe and U.S
A suspected state-aligned threat actor has been attributed to a new set of attacks exploiting the Microsoft Office “Follina” vulnerability to target government entities in …
Atlassian Releases Patch for Confluence Zero-Day Flaw Exploited in the Wild
Atlassian on Friday rolled out fixes to address a critical security flaw[1] affecting its Confluence Server and Data Center products that have come under active …
GitLab Issues Security Patch for Critical Account Takeover Vulnerability
GitLab has moved to address a critical security flaw in its service that, if successfully exploited, could result in an account takeover. Tracked as CVE-2022-1680, …
Chinese LuoYu Hackers Using Man-on-the-Side Attacks to Deploy WinDealer Backdoor
An “extremely sophisticated” Chinese-speaking advanced persistent threat (APT) actor dubbed LuoYu has been observed using a malicious Windows tool called WinDealer that’s delivered by means …
Researchers Uncover Malware Controlling Thousands of Sites in Parrot TDS Network
The Parrot traffic direction system (TDS) that came to light earlier this year has had a larger impact than previously thought, according to new research. …
Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies
Microsoft on Thursday said it took steps to disable malicious activity stemming from abuse of OneDrive by a previously undocumented threat actor it tracks under …
