Microsoft Azure AD OAuth Process Could Have Led to Full Account Takeover, Researchers Say The Issue: Authentication Implementation Flaw in Microsoft Azure AD A security weakness in the Microsoft Azure Active Directory (AD) Open Authorization (OAuth) process may have allowed hackers to gain access to full account takeover. The vulnerability ... Read More »
Chinese State-Sponsored Actor Targets Foreign Affairs Ministries in the Americas New Backdoor Codenamed Graphican Used in Recent Cyber Attacks Broadcom’s Symantec has reported that a Chinese state-sponsored hacker group named Flea has recently launched cyber attacks on foreign affairs ministries in the Americas. The campaign began in late 2022 and ... Read More »
New Malware Exploits Vulnerability in TP-Link Archer AX21 Wi-Fi Routers A new form of malware called Condi has been discovered, which exploits a security vulnerability in TP-Link Archer AX21 (AX1800) Wi-Fi routers, rendering them vulnerable to distributed denial-of-service (DDoS) botnet attacks. According to Fortinet FortiGuard Labs, the attacks, which are ... Read More »
VMware Patched Critical Vulnerability Active Exploitation in Aria Operations for Networks VMware has recently patched a critical vulnerability, but it appears that it has been already exploited in the wild. The vulnerability is present in Aria Operations for Networks, formerly known as vRealize Network Insight. The Flaw and Its Danger ... Read More »
OT security practices.” Three Security Vulnerabilities Found in OT Products Recently, cybersecurity firm Forescout discovered three security vulnerabilities in operational technology (OT) products from Wago and Schneider Electric. These flaws are part of the broader set of shortcomings called OT:ICEFALL, which consists of a total of 61 issues spanning across ... Read More »
Zyxel Security Flaw Fixed in Network-Attached Storage Devices Networking hardware and software company, Zyxel, recently released security updates to address a critical security flaw in its network-attached storage (NAS) devices. This flaw could result in the execution of arbitrary commands on affected systems, posing a significant security risk to users. ... Read More »
owned and operated, the same technology is used across the entire network, making it easier to manage and maintain. With the rise of digitalization, QSRs are now incorporating new technology into their operations to increase efficiency, improve customer experience, and collect data to drive business decisions. One technology trend that ... Read More »
security company Bitdefender suggests that a sophisticated cyber attack targeted an East Asian IT company. The attack involved the use of a custom malware called RDStealer, which was written in the programming language Golang. According to Bitdefender researcher Victor Vrabie, the operation was active for over a year, with the ... Read More »
RT-AX920, RT-AX86U/AX82U, RT-AX88U, RT-AX5700/AX58U, RT-AC54U/AC58U/ACRH13, RT-AX68U, and RT-AX66U. The vulnerabilities impact both consumer and business-grade equipment. The firmware updates include fixes for vulnerabilities that could allow attackers to execute arbitrary code, steal sensitive information, or launch denial-of-service attacks. ASUS recommends that users install the firmware updates as soon as possible ... Read More »
compromised OpenAI ChatGPT account credentials being sold on dark web marketplaces is alarming.” Group-IB says that over 100,000 of these credentials were discovered in information stealer logs that were offered for sale on the cybercrime underground between June 2022 and May 2023. India accounted for the largest number at 12,632, ... Read More »
