Threat landscape: EV charging infrastructure under attack
As electric vehicles (EVs) gain traction, their reliance on interconnected systems and widespread public charging infrastructure introduces significant cybersecurity risks. Vulnerabilities inherent in EV software and charging stations...
Browser-based credential theft: a growing threat
In the evolving cybersecurity landscape, web browsers have become a primary target for cybercriminals seeking to steal users’ credentials. This shift has significant implications for individuals and organizations...
Critical Zero-Day vulnerability in Microsoft’s App Control
Microsoft has released a critical security update to address an actively exploited zero-day vulnerability affecting its Windows Smart App Control (SAC) and SmartScreen security features. This vulnerability has...
Critical RCE vulnerabilities in Ivanti Endpoint Manager grant remote server access to attackers
Ivanti has released security updates for its Endpoint Manager (EPM) 2024 and 2022 SU6 versions to address multiple severe and critical vulnerabilities that could lead to unauthorized access...
WhatsApp’s view once privacy flaw: exploited and abusable
WhatsApp’s “View Once” feature, designed to enhance privacy by allowing users to share disappearing photos and videos, has come under fire due to a critical security flaw. This...
Alert: CISA warns of three actively exploited vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding three critical vulnerabilities that are currently being exploited in the wild. These vulnerabilities affect widely used...
Quad7 Botnet: expanding threat landscape targets routers and VPNs
The Quad7 botnet, also known as the 7777 and xlogin botnets, has gained notoriety for utilizing compromised routers to launch attacks on Microsoft 365 accounts. This sophisticated botnet...
GeoServer RCE vulnerability: a threat to geospatial data infrastructure
GeoServer, an open-source Java-based server, enables the sharing and management of geospatial data. However, a critical vulnerability (CVE-2024-36401) has emerged, allowing attackers to remotely execute commands and deploy...