A critical bug in Microsoft’s Teams and Outlook applications has been fixed, resolving a frustrating issue affecting users of ARM-based Windows PCs. The problem, which prevented these applications from launching after installing recent security updates, has been plaguing users who rely on their devices for work and communication. The bug specifically targeted users running Windows … Read more
GitLab’s Latest Security Alert Highlights Need for Urgent Patching GitLab, a popular DevSecOps platform used by over 50% of Fortune 100 companies, has issued an urgent warning to its users to patch their servers immediately against a maximum-severity path traversal vulnerability. The security flaw, discovered by a researcher and reported through GitLab’s HackerOne bug bounty … Read more
A Critical Bug Fixed: Microsoft Resolves Teams and Outlook Launch Issues on ARM-based Windows PCs In a timely update, Microsoft has addressed a long-standing issue affecting users of its popular productivity apps, Teams and Outlook, on certain ARM-based Windows devices. The bug, which prevented these essential tools from launching after installing recent updates, has been … Read more
A Critical Vulnerability in Cisco’s FMC Software Exposes Organizations to Ransomware Attacks A severe flaw in Cisco’s Firepower Management Center (FMC) software has been exploited by attackers to steal sensitive credentials and deploy the Qilin ransomware, putting thousands of organizations at risk. The vulnerability, which was disclosed in July 2023, allows hackers to gain unauthorized … Read more
**Critical Patch Cycle Shifts into High Gear as PaperCut Responds to Exploited Vulnerabilities** The cybersecurity landscape has just gotten a lot more intense, with the latest development from paper management software giant PaperCut. The company has replaced emergency patches for two actively exploited vulnerabilities with permanent fixes, affecting an estimated 100,000 organizations worldwide. For those … Read more
A China-linked threat actor has been exploiting a critical vulnerability in Sogou Input Method, a widely used input software on Chinese devices, to deploy a sophisticated backdoor known as GRAYRABBIT. The attack vector, attributed to UNC3569, marks a significant escalation of cyber threats targeting the Asian region. The Sogou Input Method is a popular keyboard … Read more
A group of threat actors has exploited a combination of vulnerabilities in JFrog Artifactory, a popular software repository manager, to gain administrative control and plant backdoors on affected systems. The attack highlights the importance of robust identity management and vulnerability patching in preventing lateral movement within an organization’s network. The attackers’ modus operandi involves chaining … Read more
Trezor Scrambles to Contain Phishing Campaign After Brevo Email Provider Breach A staggering 347,000 Trezor customers have been targeted in a recent wave of phishing attacks, with 2,500 users falling prey to malicious emails sent from compromised email accounts. The campaign, which exploited the security breach at third-party email provider Brevo, highlights the vulnerability of … Read more
Critical Flaws in Cisco FMC Software Expose Users to Ransomware Attacks and Credential Theft A pair of severe vulnerabilities in Cisco’s Firepower Management Center (FMC) software has left organizations exposed to a range of cyber threats, including ransomware attacks and credential theft. The flaws, which have been actively exploited by attackers, put users at risk … Read more
The print management software company PaperCut has issued emergency patches for two actively exploited vulnerabilities, but instead of replacing them with more comprehensive fixes, they’re providing a new set of patches that address these specific issues. This decision comes as a surprise to security experts, who warn that this approach may not be sufficient to … Read more