Security
Headlines
HeadlinesLatestCVEs

Tag

#amazon

Stop! Are you putting sensitive company data into ChatGPT?

Categories: News Tags: ChatGPT Tags: LLM Tags: Samsung Tags: confidential Several companies have warned their staff about sharing confidential data with ChatGPT. (Read more...) The post Stop! Are you putting sensitive company data into ChatGPT? appeared first on Malwarebytes Labs.

Malwarebytes
#microsoft#amazon#samsung#auth
CVE-2023-24720: ReadiumJS Cloud Reader — Everybody Gets an XSS!

An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file.

Z2U Market Leak Exposes Access to Illicit Services and Malware

By Habiba Rashid According to documents analyzed by Jeremiah Fowler, Z2U sells malware and other malicious services to customers under the guise of online trading. This is a post from HackRead.com Read the original post: Z2U Market Leak Exposes Access to Illicit Services and Malware

Genesis Market’s Clearnet domain seized; Dark Web site still online

By Waqas The FBI and European authorities have seized Genesis Market’s clearnet domains as part of the ongoing Operation Cookie… This is a post from HackRead.com Read the original post: Genesis Market’s Clearnet domain seized; Dark Web site still online

New Strain of Rorschach Ransomware Targeting US- Firms

By Deeba Ahmed Rorschach ransomware boasts advanced encryption technology and can spread automatically on the machine if executed on a domain controller.  This is a post from HackRead.com Read the original post: New Strain of Rorschach Ransomware Targeting US- Firms

GHSA-33pv-vcgh-jfg9: Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files

### Impact A memory exhaustion bug exists in Wagtail's handling of uploaded images and documents. For both images and documents, files are loaded into memory during upload for additional processing. A user with access to upload images or documents through the Wagtail admin interface could upload a file so large that it results in a crash or denial of service. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. It can only be exploited by admin users with permission to upload images or documents. Image uploads are [restricted to 10MB by default](https://docs.wagtail.org/en/stable/reference/settings.html#wagtailimages-max-upload-size), however this validation only happens on the frontend and on the backend after the vulnerable code. ### Patches Patched versions have been released as Wagtail 4.1.4 (for the LTS 4.1 branch) and Wagtail 4.2.2 (for the current 4.2 branch). ### Workarounds Site owners who are unable to upgrade to the ne...

Name That Edge Toon: Tower of Babble

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

ICE Is Grabbing Data From Schools and Abortion Clinics

An agency database WIRED obtained reveals widespread use of so-called 1509 summonses that experts say raises the specter of potential abuse.

TikTok: What’s going on and should I be worried?

Categories: News Categories: Privacy Tags: TikTok Tags: social media Tags: data Tags: app Tags: privacy Tags: algorithm TikTok has garnered a ton of media attention about its alleged risks. But is it really that much worse than other social media apps? (Read more...) The post TikTok: What’s going on and should I be worried? appeared first on Malwarebytes Labs.

Elastic Expands Cloud Security Capabilities for AWS

Launching CSPM, container workload security, and cloud vulnerability management to modernize cloud security operations.