Ivanti has issued a warning about a critical security vulnerability affecting Ivanti Connect Secure, Policy Secure, and ZTA Gateways that has been actively exploited since mid-December 2024. The specific security flaw, known as CVE-2025-0282 with a CVSS score of 9.0, …
Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure Read More »
Prior to September 2024, Telegram’s policy regarding encrypted communications stated that user data would only be shared with law enforcement in cases of terrorism. However, this stance shifted when the company’s CEO, Pavel Durov, who is of Russian descent, was …
Sharing of Telegram User Data Surged After CEO Arrest Read More »
Google’s AI Breakthrough Google has recently released a groundbreaking white paper that sheds light on how AI agents are revolutionizing the way we interact with technology. By harnessing advanced reasoning capabilities, real-time data access, and autonomous decision-making, these AI agents …
Google maps the future of AI agents: Five lessons for businesses Read More »
130 Users of Sophos firewall devices are urged to update their systems with the latest patches to address several security vulnerabilities. Exploiting these vulnerabilities could lead to potentially harmful actions, including code execution attacks. Multiple Security Flaws Fixed in Sophos …
Sophos Firewall Vulnerabilities Could Allow Remote Attacks Read More »
î ‚Jan 04, 2025î „Ravie LakshmananVulnerability / Software Security A critical security vulnerability has been revealed in ProjectDiscovery’s Nuclei, a popular open-source vulnerability scanner. If exploited successfully, attackers could bypass signature checks and potentially execute malicious code. Identified as CVE-2024-43405 with a …
Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution Read More »
Despite the urgent warnings of Chinese state-sponsored threat actors exploiting a critical vulnerability in unpatched BeyondTrust systems, a surprising number of instances remain connected to the Internet. The vulnerability, known as CVE-2024-12356, with a CVSS score of 9.8, impacts Privileged …
Thousands of Buggy BeyondTrust Systems Remain Exposed Read More »
77 Reports have surfaced regarding a sophisticated phishing attack leveraging Google Calendar to circumvent security measures. The cybercriminals behind the attack are aggressively targeting multiple organizations across different industries within a short span of time. Exploiting Google Calendar for Phishing …
New Phishing Campaign Exploits Google Calendar To Evade Filters Read More »
î ‚Jan 01, 2025î „Ravie LakshmananWeb Security / Vulnerability Threat hunters have revealed a new “widespread timing-based vulnerability class” that exploits a double-click sequence to enable clickjacking attacks and account takeovers on nearly all major websites. The method has been named DoubleClickjacking …
New “DoubleClickjacking” Exploit Bypasses Clickjacking Protections on Major Websites Read More »
The digital landscape in the Middle East is rapidly evolving, with tech giants investing heavily in cities like Dubai, Riyadh, and Abu Dhabi to establish themselves as global innovation hubs. However, this growth also brings increased cybersecurity risks, as the …
Cybersecurity Lags in Middle East Business Development Read More »
2025 Cybersecurity Budget Benchmarks for Optimizing Spending and Strategic Impact With 90% of cybersecurity and risk leaders predicting they’ll see budget increases in 2025, many are facing a new era of accountability. Read More
