+91-9820096678
·
[email protected]
Mon - Sat 09:00-22:00
·
Mumbai
Chennai
Trusted By
10,000+ Clients
Free consultant

Month

January 2025
03
Jan

Launch of Two Essential Books on Child Protection, Justice, and Legal Aid

January 3, 2025
Two pivotal books have been released, addressing critical aspects of Indian law: Child protection under the POCSO Act, 2012, and the frameworks of Public Interest Litigation (PIL), Legal Aid, and Lok Adalat. These comprehensive resources aim to provide readers with both theoretical insights and practical guidance, making them indispensable for law students and legal professionals....
Read More
03
Jan

New AI Jailbreak Method ‘Bad Likert Judge’ Boosts Attack Success Rates by Over 60%

January 3, 2025
Cybersecurity researchers have shed light on a new jailbreak technique that could be used to get past a large language model’s (LLM) safety guardrails and produce potentially harmful or malicious responses. The multi-turn (aka many-shot) attack strategy has been codenamed Bad Likert Judge by Palo Alto Networks Unit 42 researchers Yongzhe Huang, Yang Ji, Wenjun...
Read More
03
Jan

Maintenance Laws in India: Protecting the Vulnerable

January 3, 2025
Maintenance is a critical legal tool that upholds the principle of social justice, ensuring that vulnerable sections of society are not left destitute. Its application and interpretation continue to evolve, reflecting changes in societal norms and judicial understanding. Legal Insights: Maintenance Maintenance as a concept finds its presence in almost all common law jurisdictions, and...
Read More
03
Jan

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

January 3, 2025
A proof-of-concept (PoC) exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol (LDAP) that could trigger a denial-of-service (DoS) condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 (CVSS score: 7.5). It was addressed by Microsoft as part of Patch Tuesday updates for December 2024, alongside CVE-2024-49112 (
Read More
03
Jan

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption

January 3, 2025
Microsoft has announced that it’s making an “unexpected change” to the way .NET installers and archives are distributed, requiring developers to update their production and DevOps infrastructure. “We expect that most users will not be directly affected, however, it is critical that you validate if you are affected and to watch for downtime or other...
Read More
03
Jan

Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations

January 3, 2025
Apple has agreed to pay $95 million to settle a proposed class action lawsuit that accused the iPhone maker of invading users’ privacy using its voice-activated Siri assistant. The development was first reported by Reuters. The settlement applies to U.S.-based individuals current or former owners or purchasers of a Siri-enabled device who had their confidential...
Read More
02
Jan

Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API

January 2, 2025
Details have emerged about three now-patched security vulnerabilities in Dynamics 365 and Power Apps Web API that could result in data exposure. The flaws, discovered by Melbourne-based cybersecurity company Stratus Security, have been addressed as of May 2024. Two of the three shortcomings reside in Power Platform’s OData Web API Filter, while the third vulnerability...
Read More
02
Jan

Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them

January 2, 2025
In the past year, cross-domain attacks have gained prominence as an emerging tactic among adversaries. These operations exploit weak points across multiple domains – including endpoints, identity systems and cloud environments – so the adversary can infiltrate organizations, move laterally and evade detection. eCrime groups like SCATTERED SPIDER and North Korea-nexus adversaries such as FAMOUS
Read More
02
Jan

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT

January 2, 2025
Cybersecurity researchers have discovered a malicious package on the npm package registry that masquerades as a library for detecting vulnerabilities in Ethereum smart contracts but, in reality, drops an open-source remote access trojan called Quasar RAT onto developer systems. The heavily obfuscated package, named ethereumvulncontracthandler, was published to npm on December 18, 2024, by a...
Read More
02
Jan

Three Russian-German Nationals Charged with Espionage for Russian Secret Service

January 2, 2025
German prosecutors have charged three Russian-German nationals for acting as secret service agents for Russia. The individuals, named Dieter S., Alexander J., and Alex D., have been accused of working for a foreign secret service. Dieter S. is also alleged to have participated in sabotage operations as well as taking pictures of military installations with...
Read More
1 … 26 27 28 29