security

Affected customers of NetScaler ADC and NetScaler Gateway are strongly advised to upgrade to the fixed versions.  ​ Read More  ​ 

The campaign is targeting an extensive list of Magento and WooCommerce websites.  ​ Read More  ​ 

A threat actor known as Storm-0062 has been exploiting the bug since September 14.  ​ Read More  ​ 

The vendor has also fixed an actively exploited vulnerability known as the HTTP/2 Rapid Reset attack.  ​ Read More  ​ 

Microsoft has released its Patch Tuesday updates for October 2023, addressing a total of 103 flaws in its software, two of which have come under active exploitation in the wild. Of the 103 flaws, 13 are rated Critical and 90 are rated Important in severity. This is apart from 18 security vulnerabilities addressed in its Chromium-based Edge browser since the second Tuesday of September. The two

Microsoft has linked the exploitation of a recently disclosed critical flaw in Atlassian Confluence Data Center and Server to a nation-state actor it tracks as Storm-0062 (aka DarkShadow or Oro0lxy). The tech giant's threat intelligence team said it observed in-the-wild abuse of the vulnerability since September 14, 2023. "CVE-2023-22515 is a critical privilege escalation vulnerability in

October's CVE update is here. Here's which security vulnerabilities to patch now to exorcise your Microsoft systems demons. Read More  

Ongoing Rapid Reset DDoS flood attacks exposed organizations need to patch CVE-2023-44487 immediately to head off crippling outages and business disruption. Read More  

Amazon Web Services (AWS), Cloudflare, and Google on Tuesday said they took steps to mitigate record-breaking distributed denial-of-service (DDoS) attacks that relied on a novel technique called HTTP/2 Rapid Reset. The layer 7 attacks were detected in late August 2023, the companies said in a coordinated disclosure. The cumulative susceptibility to this attack is being tracked as CVE-2023-44487,

One of the most interesting aspects of the campaign is the use of a distinctive DLL sideloading technique.  ​ Read More  ​ 

The released source code is the legitimate 2020 HelloKitty version used when the ransomware operation was first launched.  ​ Read More  ​ 

The campaign uses CVE-2023-3519 to insert a malicious script into the HTML content of the authentication web page.  ​ Read More  ​ 

Between August and September 2023, UAC-0006 attempted to steal millions of hryvnias from organizations.  ​ Read More  ​