Tag
Two US senators accuse carmakers of deceptive language and shifty practices in sharing and resale of driver data.
AMPLE BILLS version 1.0 suffers from a cross site scripting vulnerability.
Aero CMS version 0.0.1 suffers from a cross site request forgery vulnerability.
SchoolPlus LMS version 1.0 suffers from a remote SQL injection vulnerability.
AccPack Khanepani version 1.0 suffers from an insecure direct object reference vulnerability.
AccPack Cop version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
AccPack Buzz version 1.0 suffers from an arbitrary file upload vulnerability.
The threat actors behind an ongoing malware campaign targeting software developers have demonstrated new malware and tactics, expanding their focus to include Windows, Linux, and macOS systems. The activity cluster, dubbed DEV#POPPER and linked to North Korea, has been found to have singled out victims across South Korea, North America, Europe, and the Middle East. "This form of attack is an
We’ll TL;DR the FUDdy introduction: we all know that phishing attacks are on the rise in scale and complexity, that AI is enabling more sophisticated attacks that evade traditional defenses, and the never-ending cybersecurity talent gap means we’re all struggling to keep security teams fully staffed. Given that reality, security teams need to be able to monitor and respond to threats
A new malicious campaign has been observed making use of malicious Android apps to steal users' SMS messages since at least February 2022 as part of a large-scale campaign. The malicious apps, spanning over 107,000 unique samples, are designed to intercept one-time passwords (OTPs) used for online account verification to commit identity fraud. "Of those 107,000 malware samples, over 99,000 of