SQL injection – Threat Note

From Cyber Security News – Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries

Security researchers have uncovered a critical SQL injection vulnerability (CVE-2025-26794) in Exim, the widely-used mail transfer agent (MTA) that powers over 60% of internet mail servers. The flaw enables authenticated…

shaikh Saqib February 24, 2025

Vulnerabilities

From Cybersecurity Help – China-linked Winnti Group behind RevivalStone campaign targeting Japanese key industries

The attacks leveraged flaws in public-facing applications like IBM Lotus Domino to deliver various types of malware. Read More

shaikh Saqib February 19, 2025

News

From Dark Reading – XE Group Shifts From Card Skimming to Supply Chain Attacks

The likely Vietnam-based threat actor has been using two zero-days in VeraCore's warehouse management software in some of its latest cyberattacks. Read More

shaikh Saqib February 11, 2025

News

From Security Week – Microsoft Expands Copilot Bug Bounty Program, Increases Payouts

[[{"value":"Microsoft has added more Copilot consumer products to its bug bounty program and is offering higher rewards for medium-severity vulnerabilities. The post Microsoft Expands Copilot Bug Bounty Program, Increases Payouts…

shaikh Saqib February 10, 2025