RCE Bug found in Multiple Cisco Small Business Routers
Recently, Cisco issued a security advisory that fixes multiple vulnerabilities in several small business routers. A vulnerability exists in the web-b…
Posts
Log4j Hotpatch Bug Leads to Privilege Escalation in Amazon Linux Distro
Amazon Linux team has released an advisory regarding a race condition bug that could lead to a local privilege escalation affecting the versions of …
Hertzbleed — New Side-Channel Attack Affects Intel, AMD CPUs
A new side-channel attack known as Hertzbleed allows remote attackers to steal full cryptographic keys from remote servers that were previously belie…
Pacman Attacks: Researchers Discovered Vulnerability in Apple M1
The Apple M1 is fast and extremely power efficient, but like all processors, it's not bulletproof. Researchers from the Massachusetts Institute o…
Microsoft Follina Bug also affects PDF Readers
Last week cybersecurity researcher Nao_sec discovered a zero-day vulnerability in Microsoft Office dubbed Follina . The bug can be exploited through …
Atlassian Released Patch for Confluence Zero-day Vulnerability
Atlassian has finally released the fix for an unauthenticated remote code execution vulnerability dubbed CVE-2022-26134 , which was discovered by th…
New Zero-day RCE Vulnerability Uncovered in Atlassian Confluence
Update (10:30 am IST): Affected version Section Workarounds Update (8:00 pm IST) Atlassian released the patch PoC Exploit released Researchers from t…
Microsoft Entra - Microsoft's New Identity and Access Solutions
Today, Microsoft has announced another suite of identity and access products called " Microsoft Entra ". Entra brings together Microsoft&#…
Follina — Microsoft Office Zero-day Remote Code Execution Bug
Cybersecurity researcher Nao_sec discovered a malicious Word document uploaded to VirusTotal by a user in Belarus. The document uses the remote templ…
npm Users and Internal data Affected by Stolen OAuth Attack Campaign
The security incident, which was disclosed by GitHub on April 12, related to an unidentified attacker leveraging stolen OAuth user tokens issued to t…