Security
Headlines
HeadlinesLatestCVEs

Tag

#git

Ubuntu Security Notice USN-7130-1

Ubuntu Security Notice 7130-1 - It was discovered that GitHub CLI incorrectly handled username validation. An attacker could possibly use this issue to perform remote code execution if the user connected to a malicious server.

Packet Storm
#vulnerability#ubuntu#git#rce
Ubuntu Security Notice USN-7125-1

Ubuntu Security Notice 7125-1 - It was discovered that RapidJSON incorrectly parsed numbers written in scientific notation, leading to an integer underflow. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.

How Learning to Fly Made Me a Better Cybersecurity CEO

The lessons I've learned soaring through the skies have extended far beyond the runway.

Medical testing company LifeLabs failed to protect customer data, report finds

LifeLabs managed to hold up a report about a ransomware incident in court for four years. It's now been published.

AmberWolf Launches NachoVPN Tool to Tackle VPN Security Risks

Researchers reveal major vulnerabilities in popular corporate VPN clients, allowing remote attacks. Discover the NachoVPN tool and expert…

Russian Script Kiddie Assembles Massive DDoS Botnet

Over the past year, "Matrix" has used publicly available malware tools and exploit scripts to target weakly secured IoT devices — and enterprise servers.

APT-C-60 Exploits WPS Office Vulnerability to Deploy SpyGlace Backdoor

The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deliver the SpyGlace backdoor. That's according to findings from JPCERT/CC, which said the intrusion leveraged legitimate services like Google Drive, Bitbucket, and StatCounter. The attack was carried out around August 2024. "In this attack,

Is Bitcoin Still a Secure and Reliable Trading Option? 

Cryptocurrencies are a relatively new asset class, and over the years, they have continued to be the subject…

OpenSea Phishers Aim to Drain Crypto Wallets of NFT Enthusiasts

Cyberattackers have been targeting the online NFT marketplace with emails claiming to make an offer to a targeted user; in reality, clicking on a malicious link takes victims to a crypto-draining site.