Since its emergence in April 2022, the cybercriminal group Black Basta has extorted no less than $100 million in ransoms from its victims, as evidenced by joint research conducted by Corvus Insurance and the...
The Los Angeles Police Department (LAPD) has engaged in a multimillion-dollar agreement with the Israeli firm Cobwebs Technologies to acquire a comprehensive software suite designed for the extensive collection and analysis of citizens’ geolocation...
Apple has released emergency security updates to address two critical zero-day vulnerabilities that have been actively exploited in attacks targeting iPhone, iPad, and Mac devices. These vulnerabilities, collectively known as CVE-2023-42916 and CVE-2023-42917, reside...
Zyxel, a leading provider of networking solutions, has recently released patches addressing a series of critical vulnerabilities affecting their NAS products. These vulnerabilities pose a significant risk to device security, potentially allowing unauthorized access...
In the ever-evolving landscape of cybersecurity, vigilance is paramount. Even widely used and trusted software packages are not immune to vulnerabilities. One such vulnerability, CVE-2023-49083 (CVSS score of 9.1), has been discovered in the...
User credentials – logins and passwords for accessing various services – have become some of the most prized assets for cybercriminals. According to Verizon’s 2023 report, 83% of data breaches occur due to third-party...
In a sobering revelation, a new study from Georgia Tech’s School of Cybersecurity and Privacy has found that three out of four of the world’s most popular websites are failing to implement basic password...
In the realm of wireless connectivity, Bluetooth stands as a ubiquitous technology, seamlessly connecting billions of devices worldwide. From smartphones and laptops to headsets and speakers, its pervasive presence underscores the critical need for...
Google, a frontrunner in digital security, recently announced the rollout of patches addressing seven critical security flaws, including a particularly menacing zero-day vulnerability in its Chrome browser. This actively exploited flaw, tracked as CVE-2023-6345,...
An independent cybersecurity researcher has released a Proof-of-Concept (PoC) exploit for the RCE vulnerability CVE-2023-46214 in the widely used data monitoring and analysis system Splunk, specifically in its corporate product, Enterprise. This exploit enables...
Apache Tomcat, a popular open-source Java web application server, has been found to harbor a critical vulnerability that could allow attackers to execute arbitrary code on affected servers. This vulnerability, dubbed CVE-2023-46589, has been...
Apache Superset, a popular open-source data visualization and exploration platform, has recently been identified as harboring three critical security vulnerabilities. These vulnerabilities pose a significant risk to organizations that rely on Apache Superset to...
