2024-03-26 Post a Comment

Hackers poison source code from largest Discord bot platform

By Bill Toulas: The Top.gg Discord bot community with over 170,000 members has been impacted by a supply-chain attack aiming to infect developers with malware that steals sensitive information. The threat actor has been using several tactics, techniques, and procedures (TTPs) over the yearsÂ including hijacking GitHub accounts, distributing malicious Python packages, using aÂ fake Python infrastructure, and social engineering. One of the more recent victims of the attacker is Top.gg,Â a popular […]

alt= Individual wearing hoodie, seated at laptop - potential hacker.

Cyber security

2024-03-26 Post a Comment

GEPF concerned about pension fund data leak in ransomware attack

By Ernest Mabuza: Notorious cybercrime gang LockBit was behind the attempt-GEPF concerned The Government Employees Pension Fund (GEPF) said on Tuesday it was concerned that data purportedly from its administrator, the Government Pensions Administration Agency (GPAA), has been released by ransomware group LockBit. â€œThe GEPF concerned with this alleged security breach, as it was informed by GPAA that no data breach had occurred when it was notified of an attempt […]

alt=. Cutting-edge technology featuring virtual reality and artificial intelligence.

Cyber security

2024-03-26 Post a Comment

Major CPU, Software Vendors Impacted by New GhostRace Attack

By Eduard Kovacs A team of researchers from IBM and the VU Amsterdam university in the Netherlands on Tuesday disclosed the details of a new type of data leakage attack impacting all major CPU makers, as well as some widely used software.Â The new attack, dubbedÂ GhostRace, is related to what the researchers describe as speculative race conditions (SRCs). Such an attack could allow threat actors to obtain potentially sensitive information […]

Cyber security

2024-03-14 Post a Comment

Fortinet warns of critical RCE bug in endpoint management software

By Sergiu Gatlan: Fortinet patched a critical vulnerability in its FortiClient Enterprise Management Server (EMS) software that can allow attackers to gain remote code execution (RCE) on vulnerable servers. FortiClient EMS enables admins to manage endpoints connected to an enterprise network, allowing them to deploy FortiClient software and assign security profiles on Windows devices. The security flaw (CVE-2023-48788) is an SQL injection in the DB2 Administration Server (DAS) component, which […]

alt=Fortinet's security platform safeguards business data.

Cyber security

2024-03-13 Post a Comment

Vulnerability in 150K+ Fortinet Devices Let Hackers Execute Arbitary Code Remotely

By Guru Baran A critical security flaw identified as CVE-2024-21762 has been discovered in Fortinetâ€™s FortiOS and FortiProxy secure web gateway systems, potentially impacting around 150,000 devices worldwide. The vulnerability allows for unauthenticated remote code execution (RCE) by sending specially crafted HTTP requests to the affected machines. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers actively exploit the flaw, adding it to its Known Exploited Vulnerabilities […]