Spring4Shell: Spring Confirmed the RCE in Spring Framework, Advisory Released
Update: Apache Tomcat releases versions 10.0.20, 9.0.62, and 8.5.78 as part of the mitigation effort. Manual Workarounds for Apache Tomcat upgrade…
Posts
Spring4Shell Details and Exploit Analysis
Update as of 31st March: Spring has Confirmed the RCE in Spring Framework . The team has just published the statement along with the mitigation guide…
Google Docs got Markdown Feature
With the online version of your Microsoft Word, Google Docs (web) is now featured with the Markdown supports. In a blog post announcing the feature,…
Lapsus Group Leaked Globant Data and Expose Credentials
Update: Globant confirmed the hacking incident and released a press release . "We have recently detected that a limited section of our company’s…
SpringShell: Spring Core RCE 0-day Vulnerability
Update as of 31st March: Spring has Confirmed the RCE in Spring Framework . The team has just published the statement along with the mitigation guide…
Axie Infinity’s Ronin Network Hacked - $625 Crypto Heist
An unknown hacker has stolen about $625 million worth of cryptocurrencies from the Ronin blockchain, which is the basis of the popular crypto game Ax…
Hackers Hack WordPress Sites to Carry out DDoS Attacks on Ukrainian Resources
Hackers hack WordPress sites to inject malicious scripts that use visitors' browsers to carry out DDoS attacks on Ukrainian resources. MalwareHun…
RCE 0-day Vulnerability found in Spring Cloud (SPEL)
Update: Spring team has published the CVE for Spring Cloud Function aka CVE-2022-22963: Spring Expression Resource Access Vulnerability . The Spri…
US Authorities added Kaspersky Lab to the list of National Security Threats
The US Federal Communications Commission (FCC) included Kaspersky Lab JSC, China Telecom Corp., and China Mobile International in a list of communic…
Seven Teenagers Arrested in Connection with Lapsus$ Hacker Group
Police in Britain have arrested seven people aged 16 to 21 over connections to Lapsus$ following a series of hacks that targeted major firms includin…