+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Month

April 2024
04
Apr

Ivanti Rushes Patches for 4 New Flaw in Connect Secure and Policy Secure

April 4, 2024
Ivanti has released security updates to address four security flaws impacting Connect Secure and Policy Secure Gateways that could result in code execution and denial-of-service (DoS). The list of flaws is as follows – CVE-2024-21894 (CVSS score: 8.2) – A heap overflow vulnerability in the IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy...
Read More
03
Apr

Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

April 3, 2024
Google has disclosed that two Android security flaws impacting its Pixel smartphones have been exploited in the wild by forensic companies. The high-severity zero-day vulnerabilities are as follows – CVE-2024-29745 – An information disclosure flaw in the bootloader component CVE-2024-29748 – A privilege escalation flaw in the firmware component “There are indications that the [
Read More
03
Apr

Case Analysis: Rajnarain Singh v. Chairman, Patna Administration Committee (1954) | Delegated Legislation

April 3, 2024
The case of Raj Narain Singh v. Chairman, Patna Administration Committee, is a significant legal precedent that deals with the principles of natural justice and the scope of administrative authority Case Name: Rajnarain Singh v. Chairman, Patna Administration Committee Court: Supreme Court of India Citation: AIR 1954 SC 569 Judges: Vivian Bose(J), Mehar Chand Mahajan(J),...
Read More
03
Apr

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

April 3, 2024
The U.S. Cyber Safety Review Board (CSRB) has criticized Microsoft for a series of security lapses that led to the breach of nearly two dozen companies across Europe and the U.S. by a China-based nation-state group called Storm-0558 last year. The findings, released by the Department of Homeland Security (DHS) on Tuesday, found that the...
Read More
03
Apr

Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks

April 3, 2024
Google on Tuesday said it’s piloting a new feature in Chrome called Device Bound Session Credentials (DBSC) to help protect users against session cookie theft by malware. The prototype – currently tested against “some” Google Account users running Chrome Beta – is built with an aim to make it an open web standard, the tech...
Read More
03
Apr

Attack Surface Management vs. Vulnerability Management

April 3, 2024
Attack surface management (ASM) and vulnerability management (VM) are often confused, and while they overlap, they’re not the same. The main difference between attack surface management and vulnerability management is in their scope: vulnerability management checks a list of known assets, while attack surface management assumes you have unknown assets and so begins with discovery....
Read More
03
Apr

Mispadu Trojan Targets Europe, Thousands of Credentials Compromised

April 3, 2024
The banking trojan known as Mispadu has expanded its focus beyond Latin America (LATAM) and Spanish-speaking individuals to target users in Italy, Poland, and Sweden. Targets of the ongoing campaign include entities spanning finance, services, motor vehicle manufacturing, law firms, and commercial facilities, according to Morphisec. “Despite the geographic expansion, Mexico remains the
Read More
03
Apr

Master CPC Mains: Legal Bites’ CPC Solved Questions Series for Judiciary, APO & University Exams

April 3, 2024
Legal Bites presents the ultimate resource for aspirants preparing for Judiciary, APO, or University Exams – the Solved CPC Mains Questions Series. With over 200 questions sourced from various Judicial Services examinations, this series is meticulously arranged section-wise to aid students in their preparation journey. Comprehensive Preparation: The series offers a comprehensive analysis of the...
Read More
03
Apr

Critical Security Flaw Found in Popular LayerSlider WordPress Plugin

April 3, 2024
A critical security flaw impacting the LayerSlider plugin for WordPress could be abused to extract sensitive information from databases, such as password hashes. The flaw, designated as CVE-2024-2879, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of SQL injection impacting versions from 7.9.11 through 7.10.0....
Read More
02
Apr

Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution

April 2, 2024
The malicious code inserted into the open-source library XZ Utils, a widely used package present in major Linux distributions, is also capable of facilitating remote code execution, a new analysis has revealed. The audacious supply chain compromise, tracked as CVE-2024-3094 (CVSS score: 10.0), came to light last week when Microsoft engineer and PostgreSQL developer Andres Freund
Read More
1 … 16 17 18 19 20