Aggregator

Cyber Security News Letter – Data Breaches, Vulnerability, Cyber Attack & Other Stories

Cyber Security News
1 year 7 months ago

The “Weekly Cyber Security News Letter – Data Breaches, Vulnerability, Cyber Attack & More” provides a comprehensive overview of the latest developments in the cybersecurity landscape. Each edition highlights significant data breaches, emerging vulnerabilities, and notable cyber attacks, offering insights into the evolving threats that organizations face. By staying informed through this newsletter, readers can […]

The post Cyber Security News Letter – Data Breaches, Vulnerability, Cyber Attack & Other Stories appeared first on Cyber Security News.

Guru Baran

SECURITY AFFAIRS MALWARE NEWSLETTER – ROUND 7

Security Affairs
1 year 7 months ago
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Deciphering the Brain Cipher Ransomware   Ideal typosquat ‘solana-py’ steals your crypto wallet keys   Ransomware attackers introduce new EDR killer to their arsenal Beyond the wail: deconstructing the BANSHEE infostealer   A Deep Dive into a New ValleyRAT […]
Pierluigi Paganini

CVE-2024-7917 | DouPHP 1.7 Release 20220822 Favicon /admin/system.php site_favicon unrestricted upload

VulDB Recent Entries
1 year 7 months ago
A vulnerability, which was classified as critical, has been found in DouPHP 1.7 Release 20220822. Affected by this issue is some unknown functionality of the file /admin/system.php of the component Favicon Handler. The manipulation of the argument site_favicon leads to unrestricted upload. This vulnerability is handled as CVE-2024-7917. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com

CVE-2024-7916 | nafisulbari/itsourcecode Insurance Management System 1.0 Add Nominee Page addNominee.php Nominee-Client ID cross site scripting

VulDB Recent Entries
1 year 7 months ago
A vulnerability classified as problematic was found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file addNominee.php of the component Add Nominee Page. The manipulation of the argument Nominee-Client ID leads to cross site scripting. This vulnerability is known as CVE-2024-7916. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Security Affairs newsletter Round 485 by Pierluigi Paganini – INTERNATIONAL EDITION

Security Affairs
1 year 7 months ago
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Large-scale extortion campaign targets publicly accessible environment variable files (.env) OpenAI dismantled an Iranian influence operation targeting the […]
Pierluigi Paganini

Large-scale extortion campaign targets publicly accessible environment variable files (.env)

Security Affairs
1 year 7 months ago
A large-scale extortion campaign compromised multiple organizations by exploiting publicly accessible environment variable files (.env). Palo Alto Unit 42 researchers uncovered a large-scale extortion campaign that successfully compromised and extorted multiple victim organizations by leveraging exposed environment variable files (.env files). The exposed files contained sensitive variables such as credentials belonging to various applications. This extortion […]
Pierluigi Paganini

Weekly Update 413

不安全
1 year 7 months ago
Sponsored by: Whilst there definitely weren't 2.x billion people in the National Public Dat

Weekly Update 413

Troy Hunt
1 year 7 months ago

Whilst there definitely weren't 2.x billion people in the National Public Data breach, it is bad. It really is fascinating how much data can be collected and monetised in this fashion and as we've seen many times before, data breaches do often follow. The NPD

Troy Hunt

Managed ad