î ‚Aug 07, 2024î „Ravie LakshmananLinux / Vulnerability Cybersecurity researchers have uncovered a new Linux kernel exploitation method known as SLUBStick that can be used to escalate a limited heap vulnerability to an arbitrary memory read-and-write primitive. “Initially, it leverages a timing …
New Linux Kernel Exploit Technique ‘SLUBStick’ Discovered by Researchers Read More »
It has been found that reputation-based security controls may not be as effective as believed in safeguarding organizations against unsafe web applications and content. Researchers at Elastic Security have discovered that attackers have developed various techniques to circumvent mechanisms that …
Attackers Use Multiple Techniques to Bypass Reputation-Based Security Read More »
1 Google Chrome users may need to consider switching to alternative ad blockers as uBlock Origin may no longer be supported in the browser. Due to Google’s enforcement of Chrome Manifest V3, uBlock Origin is advising users to explore other …
Google Chrome uBlock Origin Users Need To Switch Ad Blocker Read More »
î ‚Aug 03, 2024î „Ravie LakshmananPrivacy / Data Protection The U.S. Department of Justice (DoJ), along with the Federal Trade Commission (FTC), filed a lawsuit against popular video-sharing platform TikTok for “flagrantly violating” children’s privacy laws in the country. The agencies claimed …
DoJ and FTC Sue TikTok for Violating Children’s Privacy Laws Read More »
Dark Angels: The Ransomware Group That Defies Convention A Fortune 50 company made headlines earlier this year by paying $75 million to Dark Angels, a notorious cybercriminal group. This record-breaking ransom payment far surpasses any previous known payouts in history, …
Fortune 50 Co. Pays Record-Breaking $75M Ransomware Demand Read More »
Top Five Insights from Forrester’s Latest Report on Application Security According to Forrester’s latest report on application security, businesses are often faced with the challenge of sacrificing security for speed in order to meet tight deadlines for new app releases. …
Five takeaways from Forrester’s 2024 state of application security Read More »
90 The notorious SideWinder threat actor group has launched a new cyberespionage campaign targeting maritime facilities in a specific region. The success of this campaign once again highlights the vulnerability of humans in cybersecurity, as it heavily relies on social …
Recent SideWinder Campaign Targets Ports And Maritime Facilities Read More »
î ‚Jul 31, 2024î „Ravie LakshmananWeb Security / Compliance Certificate authority (CA) DigiCert has issued a warning that it will be revoking a subset of SSL/TLS certificates within 24 hours due to an oversight in the verification process of domain ownership for …
DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight Read More »
It has been discovered that cybercriminals are now able to purchase Generative AI (GenAI) account credentials on underground hacker markets, along with other illegal goods, as per recent research findings. These GenAI credentials include accounts from platforms like ChatGPT, Quillbot, …
Criminal Hackers Add GenAI Credentials to Underground Markets Read More »
Apple has introduced ‘Apple Intelligence,’ a new AI system for iOS devices. This innovative technology features on-device processing and a privacy-focused design to enable next-generation features without compromising user data. This development marks a significant step forward for Apple in …
iOS gets an AI upgrade: Inside Apple’s new ‘Intelligence’ system Read More »
