The US government is racing against the clock to patch a critical vulnerability in Zimbra Collaboration Suite (ZCS) after it was discovered that attackers are actively exploiting the flaw. The Cybersecurity and Infrastructure Security Agency (CISA) has ordered all US government agencies to apply the necessary patches within three days, by August 24. The vulnerability, … Read more
Microsoft’s August Patch Tuesday Update Breaks Printing and PDF Export in Some Apps A critical issue has emerged with Microsoft’s recent .NET Framework update, which is causing problems for users trying to print or export documents as PDFs in certain applications. The affected software includes apps that rely on the Windows Presentation Foundation (WPF) UI … Read more
TikTok Agrees to $400 Million Settlement Over COPPA Violations, Marking a Significant Win for Child Online Safety A landmark settlement has been reached between TikTok and the US Department of Justice (DoJ), with the social media platform agreeing to pay a staggering $400 million over allegations that it violated the Children’s Online Privacy Protection Act … Read more
Cybersecurity experts are sounding the alarm about a critical vulnerability affecting thousands of WordPress websites. Hackers have been exploiting two authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin, which allows users to log into their sites using corporate identity platforms rather than separate WordPress credentials. The miniOrange SAML SSO plugin is … Read more
Microsoft has rolled out a new feature to its popular team collaboration platform, Teams, aimed at protecting users from external bots joining meetings. The company is allowing administrators to automatically block all identified external bots from participating in Teams meetings, adding an extra layer of security to its existing bot protection policies. This move comes … Read more
ReliaQuest Falls Victim to Elaborate Social Engineering Attack, but Security Measures Keep Breach at Bay A sophisticated social engineering attack has targeted cybersecurity firm ReliaQuest, with hackers impersonating a member of the security team to trick employees into accessing a fake single sign-on (SSO) page. Although the attackers were able to gain temporary access to … Read more
TikTok Agrees to $400 Million Settlement with US Over Alleged COPPA Violations A major settlement has been reached between TikTok, its parent company ByteDance, and the US Department of Justice. The social media platform will pay a staggering $400 million to resolve allegations that it violated the Children’s Online Privacy Protection Act (COPPA), a law … Read more
Cybersecurity researchers have discovered a pair of critical vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress, allowing hackers to forge SAML responses and log in as administrators without needing valid credentials. This exploit has been observed in exploitation attempts targeting several thousand websites running the affected plugins. The miniOrange SAML SSO … Read more
As it turns out, a small but significant group of AI users – about 5% of the total – pose an outsized threat to cybersecurity. These individuals, often unwittingly, expose sensitive identities that can be leveraged by malicious actors to carry out devastating attacks. But what exactly is going on here? How are these seemingly … Read more
South Korea’s government-backed startup platform suffered a devastating data breach in July, revealing a critical failure in encryption key management that left sensitive information exposed. The incident highlights the importance of proper encryption key management and serves as a stark reminder that even encrypted data can be compromised when organizations fail to protect their keys. … Read more