Cybersecurity researchers have discovered a new class of attacks that can bypass webmail defenses and steal sensitive credentials, including passwords and tokens. The attacks, which exploit vulnerabilities in CSS (Cascading Style Sheets) code, allow hackers to break through even the most secure email accounts. The impact of these attacks is significant, with reports suggesting that … Read more
A Serious Vulnerability in Atlassian Rovo Exposes Jira and Confluence Data to Attackers Atlassian’s Rovo service has been found vulnerable to a clever attack that tricks it into sending sensitive data from its customers’ Jira and Confluence platforms to malicious actors. This breach of trust highlights the importance of vigilance in defending against sophisticated cyber … Read more
Cybersecurity experts have long known that Linux systems can be notoriously difficult to track due to their sparse logging capabilities. However, one area where this lack of visibility has been particularly problematic is in shell activity logs. Most shells, including Bash and others, only record a limited history of commands in a flat file located … Read more
A major cyberattack has disrupted operations at North Carolina’s three key ports, leaving behind a trail of uncertainty and concern for the region’s critical infrastructure. The US Coast Guard is leading the investigation into the breach, which affected all three port facilities – the Port of Wilmington, the Port of Morehead City, and the Charlotte … Read more
A Critical Flaw in Progress Kemp LoadMaster Exposes Thousands of Organizations to Cyber Threats The US Cybersecurity and Infrastructure Security Agency (CISA) has just added a new vulnerability to its Catalog of Known Exploits (KEV), highlighting a critical flaw in the Progress Kemp LoadMaster application delivery controller (ADC). The issue, which affects various versions of … Read more
Cybersecurity firm N-able has issued a critical hotfix for its N-central platform after attackers exploited vulnerabilities in the system, allowing them to reach and persist within managed networks. The issue is particularly concerning due to the widespread use of N-central among managed service providers (MSPs) and small-to-medium-sized businesses (SMBs). N-able’s N-central platform is a remote … Read more
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication, Leaving Thousands Vulnerable A critical zero-day vulnerability has been discovered in Metabase, a popular open-source business intelligence platform used by thousands of organizations worldwide. The flaw allows attackers to gain admin access without authentication, effectively bypassing all security measures and paving the way for devastating … Read more
A Cyberattack Disrupts North Carolina’s Ports, Sparking Concerns Over Critical Infrastructure The US Coast Guard is currently monitoring a cyberattack that has disrupted gate operations at three major ports in North Carolina. The breach, which affected the Port of Wilmington, the Port of Morehead City, and the Charlotte Inland Port, forced authorities to delay gate … Read more
Cybersecurity community left reeling as new research reveals nearly half of AI-generated patches are ineffective A growing concern in the cybersecurity world has just taken a significant turn for the worse. Research conducted by 1Password has found that more than half of AI-generated patches, designed to fix vulnerabilities and protect systems from attack, are actually … Read more
Google’s latest Chrome update has addressed a staggering 41 critical- and high-severity vulnerabilities in the browser. The patches, included in version 151 of Chrome, cover a wide range of security flaws that could have allowed hackers to execute arbitrary code, steal data, or take control of users’ systems. Among the most concerning issues are six … Read more