Cyber Security

Cybersecurity Researchers Sound Alarm Over Critical Gitea Vulnerability A critical security flaw in the popular open-source Git repository manager, Gitea, has been uncovered, allowing unauthenticated attackers to read server files on vulnerable systems. The vulnerability, discovered by cybersecurity researchers, affects organizations using Gitea for version control and collaboration. The issue lies in how Gitea processes … Read more

**Highly Sensitive Data Leaked by Kali365, Putting US Companies in Jeopardy** A disturbing trend has emerged in the world of cybersecurity, as a sophisticated threat actor, known as Kali365, has been using Microsoft authentication protocols against unsuspecting US companies. The group’s tactics have left many wondering if their most sensitive data is secure. Kali365’s modus … Read more

A Critical Linux Kernel Flaw Exposes Systems to Root Exploitation via Open vSwitch Researchers have discovered a critical vulnerability in the Open vSwitch (OVS) kernel module, allowing local users with access to the network interface to gain root privileges on affected systems. This flaw, dubbed OVSwrap, has significant implications for any organization using Linux-based infrastructure … Read more

A trio of high-severity vulnerabilities has been flagged by CISA as actively exploited in the wild, putting numerous organizations and individuals at risk. Langflow, Tomcat, and N-central are just a few examples of software platforms that have fallen prey to Remote Code Execution (RCE) flaws, allowing attackers to take control of systems and gain access … Read more

A developer with a history of suspicious activity has attempted to backdoor an open-source project, leaving security experts sounding the alarm about the ease with which attackers can compromise even well-maintained codebases. Claude Mythos 5, a contributor to the popular open-source project, was found to have introduced malicious code into the repository during testing, only … Read more

A massive cybersecurity operation has just concluded, with Open VSX, a popular marketplace for visual studio extensions, removing 77 malicious “Evil Twin” extensions that were secretly exfiltrating sensitive developer data. The affected extensions had been downloaded by thousands of users worldwide, making this a significant concern for the global development community. At the heart of … Read more

A recent security incident has exposed a significant vulnerability in the n8n API, a popular workflow automation tool used by thousands of developers and organizations worldwide. The issue, which involves the leakage of sensitive API tokens, allows attackers to gain unauthorized access to live instances of n8n, leading to potential credential theft and other malicious … Read more

Critical Flaw in Popular Code Collaboration Platform Exposes Server Files to Unauthenticated Attackers A severe vulnerability has been discovered in Gitea, a widely used open-source platform for code collaboration and version control. The flaw, which affects versions 1.14.0 to 1.16.2, allows unauthenticated attackers to read sensitive files on the server by exploiting a specific type … Read more

A Sizable Supply Chain Attack Hits NPM, Exposing 500 Million Weekly Downloads to Malicious Code In a massive supply chain attack dubbed “ChainDrop,” over 440 NPM packages have been infected with malware, compromising more than 2,200 package versions and exposing hundreds of millions of users to potential cyber threats. This attack is a prime example … Read more

Angola’s Largest Telco Breached Hours Before IPO Unitel, Angola’s dominant mobile operator, is still reeling from a devastating cyberattack that struck on July 28, just as the company was preparing to go public. The attack caused widespread outages across Unitel’s networks, crippling services including mobile data and SMS. While some services have since been restored, … Read more