169 Microsoft’s AI flagship, Copilot Studio, faced a potential threat to its internal infrastructure. A critical SSRF vulnerability was discovered in Microsoft Copilot Studio, which had the potential to expose sensitive internal data to malicious actors. The vulnerability was promptly …
Microsoft Copilot Studio Vulnerability Could Expose Sensitive Data Read More »
î ‚Aug 29, 2024î „Ravie LakshmananCyber Espionage / Malware A non-profit supporting Vietnamese human rights has been the target of a multi-year campaign designed to deliver a variety of malware on compromised hosts. Cybersecurity company Huntress attributed the activity to a threat …
Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32 Read More »
In a recent cybersecurity incident, a South Korean APT group exploited a critical vulnerability in WPS Office, a popular office software widely used in China, to spy on high-profile targets. This breach shed light on other security issues within the …
South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel Read More »
Discover how AI and machine learning are revolutionizing patch management by providing real-time risk assessments. This innovative approach guides IT and security teams in prioritizing critical patches to reduce vulnerabilities and enhance cybersecurity. AI/ML-driven patch management is becoming increasingly essential …
How AI is helping cut the risks of breaches with patch management Read More »
24 WordPress website administrators who utilize the Litespeed Cache plugin are urged to promptly update their sites with the latest plugin release to address a critical vulnerability. This vulnerability could potentially allow an unauthorized attacker to gain control of targeted …
LiteSpeed Cache Plugin Vulnerability Risked 5+ Million Websites Read More »
î ‚Aug 25, 2024î „Ravie LakshmananLaw Enforcement / Digital Privacy Pavel Durov, founder and chief executive of the popular messaging app Telegram, was arrested in France on Saturday, according to French television network TF1. Durov is believed to have been apprehended pursuant …
Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures Read More »
A newly discovered variant of the XenoRAT malware, dubbed MoonPeak, is being distributed by a threat actor believed to have ties to North Korea’s Kimsuky group. This sophisticated malware is equipped with a complex infrastructure of command-and-control servers, staging systems, …
Constantly Evolving MoonPeak RAT Linked to North Korean Spying Read More »
CrowdStrike 2024 Report Exposes North Korea’s Covert Workforce in U.S. Tech Firms In April 2024, CrowdStrike Services responded to the first of several incidents in which North Korea’s FAMOUS CHOLLIMA malicious insiders targeted U.S. firms. This report sheds light on …
CrowdStrike 2024 report exposes North Korea’s covert workforce in U.S. tech firms Read More »
43 Security researchers have issued a warning to macOS users regarding multiple unpatched vulnerabilities found in Microsoft apps designed for the system. These vulnerabilities could potentially allow malicious actors to gain unauthorized access to sensitive device permissions. Unpatched Vulnerabilities in …
Unpatched Vulnerabilities In Microsoft macOS Apps Pose Threat Read More »
î ‚Aug 21, 2024î „Ravie LakshmananSoftware Security / Vulnerability Cybersecurity researchers have disclosed a critical security flaw impacting Microsoft’s Copilot Studio that could be exploited to access sensitive information. Tracked as CVE-2024-38206 (CVSS score: 8.5), the vulnerability has been described as an …
Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data Read More »
