Vice Media Data Breach Exposes Personal and Financial Information of Over 1,700 Individuals
Vice Media data breach of personal and financial information of over 1,700 individuals. Read on for details and remediation efforts.
TheCISO
Published items (165)
Zero-Day Vulnerability Found in Fortra’s GoAnywhere MFT
A zero-day vulnerability in Fortra's GoAnywhere MFT, later tracked as CVE-2023-0669, was exploited in the wild. Over 1,000 on-premise instances were publicly accessible. Fortra fixed it in version 7.1.2 in February 2023.
Binwalk Security Tool Vulnerable to Path Traversal Attack
A security vulnerability in Binwalk, a popular Linux command-line tool used for analyzing and extracting firmware images, could lead to remote code execution. The path traversal issue is caused by a failed attempt to mitigate risk in the Professional File System extractor plugin. The vulnerabilit…
Cyberattack Disrupts ION Group Transactions
A subsidiary of the Dublin-based financial technology and trading firm ION Group, ION Cleared Derivatives, has been hit by a cyberattack that has disrupted
F5 BIG-IP Vulnerability: A Threat to System Stability
F5 has issued a warning about a high-severity format string vulnerability in BIG-IP. An authorized attacker may cause a denial-of-service or execute arbitrary code. Versions of BIG-IP from 13.1.5 to 17.0.0 are vulnerable. Protect your system by checking if your product is affected and using iHeal…
Apple Announces New Security Features
Apple has announced the introduction of three new advanced security features focused on protecting against threats to user data in the cloud.
Interpol Seizes Over $129 Million and Arrests Almost 1000 Suspects
In an operation lasting over five months, from the 28th of June to the 23rd of November, Interpol arrested almost 1000 suspects and seized 129 million.
Pro-Russian Group Attacked The EU Parliament Website
The website of EUs Parliament was inaccessible for hours after a distributed denial-of-service (DDoS) attack by "Pro-Kremlin" attackers.
CSRF Vulnerability Discovered in Plesk API
In Plesk versions starting from Plesk 17.8 attacker can execute commands and/or alter settings including the change of the admin's password.
Google Pixel Phone Lock Bypass
The vulnerability could allow an attacker to bypass lock-screen protections such as fingerprint or PIN authentication and obtain physical access to a target device.
Critical Vulnerabilities Affecting Citrix Gateway and ADC
Critical vulnerabilities have been discovered in Citrix Gateway and Citrix ADC which can allow an attacker to gain unauthorized access, perform remote desktop takeover and bypass user login brute force protection.
Public Exploit is Available for NSX-V, VMware Urges Customers to Upgrade
VMware warns that an exploit has been made publicly available, and urges its customers to upgrade to the latest release.
Apple patches its ninth vulnerability for this year
Since the start of 2022, Apple has addressed nine vulnerabilities with the latest one affecting iOS and iPad OS.
How to Detect and Fix the “Text4Shell” Vulnerability
Similar to the Spring4Shell and Log4Shell vulnerabilities, Text4Shell is a new vulnerability in the Apache Commons Text library.
Free Information Security Courses
Learning is a choice, you just pay in time and effort instead of money. Dive into free information security courses.
Instagram fined $400M for abuse of children’s data
Ireland's data privacy regulator has agreed to impose a record fine of $402M against Instagram following an investigation into its handling of children's data.
Customer data leaked in a newly disclosed Samsung breach
Samsung said that hackers have obtained some customer data in a newly disclosed breach.
Critical vulnerability discovered in Bitbucket Server and Data Center
This vulnerability could allow remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request.