Microsoft Issues Patch for aCropalypse Privacy Flaw in Windows Screenshot Tools

27/03/2023 0 Comments 0 tags

Microsoft has released an out-of-band update to address a privacy-defeating flaw in its screenshot editing tool for Windows 10 and Windows 11. The issue, dubbed aCropalypse, could enable malicious actors to recover

New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords

27/03/2023 0 Comments 0 tags

A new information-stealing malware has set its sights on Apple’s macOS operating system to siphon sensitive information from compromised devices. Dubbed MacStealer, it’s the latest example of a threat that uses

Where SSO Falls Short in Protecting SaaS

27/03/2023 0 Comments 0 tags

Single sign-on (SSO) is an authentication method that allows users to authenticate their identity for multiple applications with just one set of credentials. From a security standpoint, SSO is the

OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident

25/03/2023 0 Comments 0 tags

OpenAI on Friday disclosed that a bug in the Redis open source library was responsible for the exposure of other users’ personal information and chat titles in the upstart’s ChatGPT

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

25/03/2023 0 Comments 0 tags

Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched Outlook vulnerability. Tracked as CVE-2023-23397 (CVSS score: 9.8), the critical flaw relates to a

U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals

25/03/2023 0 Comments 0 tags

In what’s a case of setting a thief to catch a thief, the U.K. National Crime Agency (NCA) revealed that it has created a network of fake DDoS-for-hire websites to

33rd Annual FISSEA Conference

24/03/2023 0 Comments 0 tags

Theme: Consumer Fraud Education Agenda: 8:00am – 9:00am Registration and Check-in 9:00am – 10:30am Opening Session Welcome Remarks Opening Keynote 10:30am – 11:00am Break – Exhibit Hall Open 11:00am –

Zero Trust and High Assurance for Cloud-Native Applications

24/03/2023 0 Comments 0 tags

This year’s Multi-Cloud Conference hosted by NIST, DOC, and Tetrate will focus on delivering Zero Trust Architecture (ZTA) through application-tier and network-tier policies in a high-assurance service mesh operating environment.

Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress Sites

24/03/2023 0 Comments 0 tags

Patches have been released for a critical security flaw impacting the WooCommerce Payments plugin for WordPress, which is installed on over 500,000 websites. The flaw, if left unresolved, could enable

Researchers Uncover Chinese Nation State Hackers’ Deceptive Attack Strategies

24/03/2023 0 Comments 0 tags

A recent campaign undertaken by Earth Preta indicates that nation-state groups aligned with China are getting increasingly proficient at bypassing security solutions. The threat actor, active since at least 2012, is tracked by