A long-awaited legislative reform to empower Hong Kong authorities to penalise companies over data breaches...
A Network FIREWALL in 2024 There is a common misconception that firewalls are expensive, complex...
GovCERT.HK has released the latest annual report, detailing its accomplishments in 2023 and also the...
The chief financial officer of a Hong Kong company has become the latest victim of...
TikTok has confirmed that its first European data centre in Ireland is now operational and...
Big Tech is bracing for the European Union’s biggest-ever clampdown on anticompetitive practices in the...
The American Federal Bureau of Investigation (FBI) said on Tuesday that it has taken down...
Digitpol – email, Phonecalls / Telegram / Whatsapp / Facebook / Fraudster – Imposter Alert...
AI poses a major threat to cybersecurity The human vulnerability and social engineering are the...
Cyber Alerts
- MITRE shares 2024's top 25 most dangerous software weaknesses November 20, 2024MITRE has shared this year's top 25 list of the most common and dangerous software weaknesses behind more
- It's Near-Unanimous: AI, ML Make the SOC Better November 20, 2024Efficiency is the name of the game for the security operations center — and 91% of cybersecurity pros say
- Oracle warns of Agile PLM file disclosure flaw exploited in attacks November 19, 2024Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as
- D-Link urges users to retire VPN routers impacted by unfixed RCE flaw November 19, 2024D-Link is warning customers to replace end-of-life VPN router models after a critical
- Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation November 18, 2024Now-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the
- Chinese hackers exploit Fortinet VPN zero-day to steal credentials November 18, 2024Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-
- Security plugin flaw in millions of WordPress sites gives admin access November 16, 2024A critical authentication bypass vulnerability has been discovered impacting the WordPress plugin 'Really Simple Security' (formerly '
- CISA warns of more Palo Alto Networks bugs exploited in attacks November 14, 2024CISA warned today that two more critical security vulnerabilities in Palo Alto Networks' Expedition migration tool are now actively
- Microsoft Power Pages Leak Millions of Private Records November 13, 2024Less-experienced users of Microsoft's website building platform may not understand all the implications of the access
- FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023 November 12, 2024The FBI, the NSA, and cybersecurity authorities of the Five Eyes intelligence alliance have released today a
- Microsoft Exchange adds warning to emails abusing spoofing flaw November 12, 2024Microsoft has disclosed a high-severity Exchange Server vulnerability that allows attackers to forge legitimate senders on incoming emails
- Palo Alto Networks warns of potential PAN-OS RCE vulnerability November 8, 2024Palo Alto Networks warned customers to restrict access to their next-generation firewalls because of a potential remote code
- Malicious PyPI package with 37,000 downloads steals AWS keys November 8, 2024A malicious Python package named 'fabrice' has been present in the Python Package Index (PyPI) since
- D-Link won’t fix critical flaw affecting 60,000 older NAS devices November 8, 2024More than 60,000 D-Link network-attached storage devices that have reached end-of-
- OWASP Beefs Up GenAI Security Guidance Amid Growing Deepfakes November 4, 2024As businesses worry over deepfake scams and other AI attacks, organizations are adding guidance for cybersecurity teams on how
- DocuSign's Envelopes API abused to send realistic fake invoices November 4, 2024Threat actors are abusing DocuSign's Envelopes API to create and mass-distribute fake invoices that appear genuine
- Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine November 3, 2024Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large
- Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning November 3, 2024Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited
- ChatGPT-4o can be used for autonomous voice-based scams November 2, 2024Researchers have shown that it's possible to abuse OpenAI's real-time voice API for ChatGPT
- Hack Nintendo's alarm clock to show cat pics? Let's-a-go! November 1, 2024How 'Gary' defeated Bowser broke into the interactive alarm clock A hacker who uses the handle GaryOderNichts has