Security researchers have uncovered a secret vulnerability in software that high-level executives use for financial transactions. The software, which has not been named, was found to be vulnerable to an attack that…
Category: English
Critical Vulnerability Discovered in Jenkins
Jenkins, the open-source automation server used for continuous integration and delivery, has a critical security vulnerability that could allow attackers to execute arbitrary code on affected systems. The vulnerability, assigned CVE-2023-4567, is…
Majority of Android apps contain third-party trackers
A study conducted by the Mozilla Foundation has revealed that safety labels for Android apps on the Google Play Store have “serious loopholes” that can result in misleading or incorrect information being…
CISA Warns of Actively Exploited Plex Bug
CISA has added a high-severity remote code execution vulnerability that has been active for almost three years on Plex Media Server to its security flaw list. This vulnerability, known as CVE-2020-5741, allows…
Hackers using trojanized macOS apps to spy on users
Hackers are targeting macOS users with trojanized versions of legitimate apps. These apps contain a backdoor that allows attackers to spy on users and steal sensitive data. Researchers have discovered several popular…
Clasiopa: New Cyberattack Cluster in Southeast Asia
Kaspersky researchers have identified a new cyberattack cluster named Clasiopa, which is actively targeting government organizations, military entities, and critical infrastructure in Southeast Asia. The group has been operational since at least…
Lazarus Group Uses New Winordll64 Backdoor
The notorious North Korean APT group, Lazarus, has deployed a new malware dubbed Winordll64 backdoor, according to researchers at Kaspersky. The Winordll64 backdoor shares similarities with Lazarus’ previous malware, which has targeted…
“S1deLoad” Malware Hijacks Updates
A new malware dubbed “S1deLoad” has been identified by cybersecurity researchers, which infects users’ devices by taking advantage of legitimate software updates. The malware has been responsible for delivering banking Trojans, ransomware,…
Python Developers Warned of Malicious Package
Python developers have been warned of a malicious package named “noblesse” uploaded to the PyPI repository. The package is believed to contain a backdoor that could allow attackers to execute arbitrary code…
AI used for hidden messages.
A group of researchers from the University of Oxford and Carnegie Mellon propose using artificial intelligence algorithms like ChatGtp or other systems that can generate images or audio messages to create hidden…