RaidForums Hacking Marketplace Seized Europol’s Operation TOURNIQUET was successful in taking down one of the...
Impact System / Technologies affected Cisco Nexus Insights Cisco AMP Virtual Private Cloud Appliance Cisco...
Multiple vulnerabilities were identified in Google Chrome, a remote attacker could exploit some of...
The Hong Kong Monetary Authority (HKMA) announced today (13 December) a plan to suitably increase...
The “Hong Kong Cyber Security New Generation Capture the Flag Challenge 2021”, jointly organised by...
The People’s Bank of China (PBoC) and the Hong Kong Monetary Authority (HKMA) co-organised a...
The Hong Kong Monetary Authority (HKMA) wishes to alert members of the public to a...
The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could...
Ireland’s Health Service Executive (HSE) was almost paralysed by ransomware after a single user opened...
Cyber Alerts
- Over 2,000 Palo Alto firewalls hacked using recently patched bugs November 21, 2024Hackers have already compromised thousands of Palo Alto Networks firewalls in attacks exploiting two recently patched zero-day vulnerabilities
- It's Near-Unanimous: AI, ML Make the SOC Better November 20, 2024Efficiency is the name of the game for the security operations center — and 91% of cybersecurity pros say
- MITRE shares 2024's top 25 most dangerous software weaknesses November 20, 2024MITRE has shared this year's top 25 list of the most common and dangerous software weaknesses behind more
- Oracle warns of Agile PLM file disclosure flaw exploited in attacks November 19, 2024Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as
- D-Link urges users to retire VPN routers impacted by unfixed RCE flaw November 19, 2024D-Link is warning customers to replace end-of-life VPN router models after a critical
- Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation November 18, 2024Now-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the
- Chinese hackers exploit Fortinet VPN zero-day to steal credentials November 18, 2024Chinese threat actors use a custom post-exploitation toolkit named 'DeepData' to exploit a zero-
- Security plugin flaw in millions of WordPress sites gives admin access November 16, 2024A critical authentication bypass vulnerability has been discovered impacting the WordPress plugin 'Really Simple Security' (formerly '
- CISA warns of more Palo Alto Networks bugs exploited in attacks November 14, 2024CISA warned today that two more critical security vulnerabilities in Palo Alto Networks' Expedition migration tool are now actively
- Microsoft Power Pages Leak Millions of Private Records November 13, 2024Less-experienced users of Microsoft's website building platform may not understand all the implications of the access
- Microsoft Exchange adds warning to emails abusing spoofing flaw November 12, 2024Microsoft has disclosed a high-severity Exchange Server vulnerability that allows attackers to forge legitimate senders on incoming emails
- FBI, CISA, and NSA reveal most exploited vulnerabilities of 2023 November 12, 2024The FBI, the NSA, and cybersecurity authorities of the Five Eyes intelligence alliance have released today a
- Palo Alto Networks warns of potential PAN-OS RCE vulnerability November 8, 2024Palo Alto Networks warned customers to restrict access to their next-generation firewalls because of a potential remote code
- Malicious PyPI package with 37,000 downloads steals AWS keys November 8, 2024A malicious Python package named 'fabrice' has been present in the Python Package Index (PyPI) since
- D-Link won’t fix critical flaw affecting 60,000 older NAS devices November 8, 2024More than 60,000 D-Link network-attached storage devices that have reached end-of-
- OWASP Beefs Up GenAI Security Guidance Amid Growing Deepfakes November 4, 2024As businesses worry over deepfake scams and other AI attacks, organizations are adding guidance for cybersecurity teams on how
- DocuSign's Envelopes API abused to send realistic fake invoices November 4, 2024Threat actors are abusing DocuSign's Envelopes API to create and mass-distribute fake invoices that appear genuine
- Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine November 3, 2024Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large
- Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning November 3, 2024Cybersecurity researchers have disclosed six security flaws in the Ollama artificial intelligence (AI) framework that could be exploited
- ChatGPT-4o can be used for autonomous voice-based scams November 2, 2024Researchers have shown that it's possible to abuse OpenAI's real-time voice API for ChatGPT