+91-9820096678
·
admin@apslaw.co.in
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Month

December 2024
20
Dec

Important Judgments of Calcutta High Court (2024) – Legal Bites Year Update

December 20, 2024
Legal Bites brings you a roundup of Important decisions of the Calcutta High Court (2024), which played a significant role. It will help the readers to remember all legal and current updates of 2024 pertaining to the Calcutta High Court in the most efficient and easy way. Important Judgments of Calcutta High Court (2024) –...
Read More
20
Dec

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

December 20, 2024
The developers of Rspack have revealed that two of their npm packages, @rspack/core and @rspack/cli, were compromised in a software supply chain attack that allowed a malicious actor to publish malicious versions to the official package registry with cryptocurrency mining malware. Following the discovery, versions 1.1.7 of both libraries have been unpublished from the npm...
Read More
20
Dec

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

December 20, 2024
Sophos has released hotfixes to address three security flaws in Sophos Firewall products that could be exploited to achieve remote code execution and allow privileged system access under certain conditions. Of the three, two are rated Critical in severity. There is currently no evidence that the shortcomings have been exploited in the wild. The list...
Read More
20
Dec

Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

December 20, 2024
A now-patched critical security flaw impacting Fortinet FortiClient EMS is being exploited by malicious actors as part of a cyber campaign that installed remote desktop software such as AnyDesk and ScreenConnect.  The vulnerability in question is CVE-2023-48788 (CVSS score: 9.3), an SQL injection bug that allows attackers to execute unauthorized code or commands by sending...
Read More
20
Dec

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

December 20, 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability, tracked as CVE-2024-12356 (CVSS score: 9.8), is a command injection flaw that
Read More
20
Dec

The Role of Consumer Rights in the Digital Era: Legal Safeguards for Online Users

December 20, 2024
The rapid digital transformation has brought convenience and innovation to our daily lives. From e-commerce platforms to online entertainment, the digital world offers endless opportunities. However, with these opportunities come unique challenges, especially concerning consumer rights. In this article, we delve into the critical legal safeguards every online user should know, ensuring they are protected...
Read More
19
Dec

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

December 19, 2024
Threat actors have been observed uploading malicious typosquats of legitimate npm packages such as typescript-eslint and @types/node that have racked up thousands of downloads on the package registry. The counterfeit versions, named @typescript_eslinter/eslint and types-node, are engineered to download a trojan and retrieve second-stage payloads, respectively. “While typosquatting attacks are
Read More
19
Dec

Juniper Warns of Mirai Botnet Targeting SSR Devices with Default Passwords

December 19, 2024
Juniper Networks is warning that Session Smart Router (SSR) products with default passwords are being targeted as part of a malicious campaign that deploys the Mirai botnet malware. The company said it’s issuing the advisory after “several customers” reported anomalous behavior on their Session Smart Network (SSN) platforms on December 11, 2024. “These systems have...
Read More
19
Dec

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

December 19, 2024
Fortinet has issued an advisory for a now-patched critical security flaw impacting Wireless LAN Manager (FortiWLM) that could lead to disclosure of sensitive information. The vulnerability, tracked as CVE-2023-34990, carries a CVSS score of 9.6 out of a maximum of 10.0. “A relative path traversal [CWE-23] in FortiWLM may allow a remote unauthenticated attacker to...
Read More
19
Dec

CISA Mandates Cloud Security for Federal Agencies by 2025 Under Binding Directive 25-01

December 19, 2024
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 25-01, ordering federal civilian agencies to secure their cloud environments and abide by Secure Cloud Business Applications (SCuBA) secure configuration baselines. “Recent cybersecurity incidents highlight the significant risks posed by misconfigurations and weak security controls,
Read More
1 … 8 9 10 11 12 … 26