+91-9820096678
·
[email protected]
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Day

January 14, 2025
14
Jan

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

January 14, 2025
Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as “root” to bypass the operating system’s System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions. The vulnerability in question is CVE-2024-44243 (CVSS score: 5.5), a medium-severity bug
Read More
14
Jan

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

January 14, 2025
New research has pulled back the curtain on a “deficiency” in Google’s “Sign in with Google” authentication flow that exploits a quirk in domain ownership to gain access to sensitive data. “Google’s OAuth login doesn’t protect against someone purchasing a failed startup’s domain and using it to re-create email accounts for former employees,” Truffle Security...
Read More
14
Jan

4 Reasons Your SaaS Attack Surface Can No Longer be Ignored

January 14, 2025
What do identity risks, data security risks and third-party risks all have in common? They are all made much worse by SaaS sprawl. Every new SaaS account adds a new identity to secure, a new place where sensitive data can end up, and a new source of third party risk. Learn how you can protect...
Read More
14
Jan

Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions

January 14, 2025
The Telegram-based online marketplace known as HuiOne Guarantee and its vendors have cumulatively received at least $24 billion in cryptocurrency, dwarfing the now-defunct Hydra to become the largest online illicit marketplace to have ever operated. The figures, released by blockchain analytics firm Elliptic, show that monthly inflows have increased by 51% since July 2024. Huione...
Read More
14
Jan

Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

January 14, 2025
Threat hunters are calling attention to a new campaign that has targeted Fortinet FortiGate firewall devices with management interfaces exposed on the public internet. “The campaign involved unauthorized administrative logins on management interfaces of firewalls, creation of new accounts, SSL VPN authentication through those accounts, and various other configuration changes,” cybersecurity firm
Read More
14
Jan

Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware

January 14, 2025
Russia-linked threat actors have been attributed to an ongoing cyber espionage campaign targeting Kazakhstan as part of the Kremlin’s efforts to gather economic and political intelligence in Central Asia. The campaign has been assessed to be the work of an intrusion set dubbed UAC-0063, which likely shares overlap with APT28, a nation-state group affiliated with...
Read More
14
Jan

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

January 14, 2025
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability in question is CVE-2024-12686 (CVSS score: 6.6), a medium-severity bug that could
Read More
14
Jan

5th National Moot Court Competition 2025 | University Institute of Laws, Panjab University Regional Centre

January 14, 2025
University Institute of Laws (UIL), Panjab University Regional Centre (PURC), Ludhiana, is organising its 5th National Moot Court Competition 2025, scheduled to be held from 6th to 8th March, 2025. About the University Established in July 2003, University Institute of Laws (UIL) at Panjab University Regional Centre (PURC), Ludhiana, is dedicated to providing quality legal...
Read More