+44 (0)203 88 020 88

Menu

Search

News

Actively Exploited Vulnerabilities in D-Link Devices

News, Vulnerabilities /

Four vulnerabilities in D-Link routers have been added to the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities Catalog this week. Also included in this week’s catalogue updates were now-patched zero-day vulnerabilities in Google Chrome, and Photo Station QNAP software.    Three of the D-Link vulnerabilities identified as exploited by their addition to this list […]

Actively Exploited Vulnerabilities in D-Link Devices Read More »

Five Malicious Chrome Extensions Identified

News, Tools /

Threat researchers at McAfee Labs have discovered 5 malicious extensions for Google Chrome, that track the browsing activity of the user, with a total of 1.4 million users affected. The identified extensions are: Netflix Party, Netflix Party 2, Full Page Screenshot Capture – Screenshotting, FlipShope – Price Tracker Extension, and AutoBuy Flash Sales. Although these

Five Malicious Chrome Extensions Identified Read More »

Critical Atlassian Bitbucket Vulnerability

News, Vulnerabilities /

A critical vulnerability has been identified in multiple versions of Atlassian’s Bitbucket Server and Bitbucket Data Center. A recent advisory released by Bitbucket Support explains that all versions after 6.10.17, including 7.0.0 and later, have been affected by this flaw. However, this vulnerability is not present in Atlassian Cloud sites, so users who access Bitbucket

Critical Atlassian Bitbucket Vulnerability Read More »

GitLab Patch Critical Remote Code Execution Flaw

News, Vulnerabilities /

GitLab have published a critical security release this week to notify their users about an update that contains important security fixes. Versions 15.3.1, 15.2.3, and 15.1.5 were released for GitLab Community Edition (CE) and Enterprise Edition (EE), in order to patch a remote code execution (RCE) vulnerability. GitLab is used as a DevOps platform for

GitLab Patch Critical Remote Code Execution Flaw Read More »

Palo Alto Networks Exploited in DoS Attacks

News, Vulnerabilities /

A denial-of-service vulnerability was identified this month in Palo Alto Networks PAN-OS software. This week, the Cybersecurity and Infrastructure Agency (CISA), a branch of the US government, have added this vulnerability to their list of known exploited vulnerabilities. Tracked as CVE-2022-0028, this flaw affects the URL filtering policy in multiple versions of PAN-OS running on

Palo Alto Networks Exploited in DoS Attacks Read More »

Microsoft Patches Critical Zero-Day Vulnerabilities

News, Vulnerabilities /

Microsoft’s August patch Tuesday security update included fixes for 138 vulnerabilities, 17 of which were classified as ‘Critical’ flaws. The security patches issued cover 40 different Microsoft and Windows products and features, including critical Windows system operations, and popular applications such as Microsoft Edge, Microsoft Office, and the Microsoft Exchange Server. Two zero-day vulnerabilities were

Microsoft Patches Critical Zero-Day Vulnerabilities Read More »

Amex and Snapchat used in Open Redirect Attacks

News, Vulnerabilities /

Google Workspace and Microsoft 365 users have been targeted in phishing attacks that have resulted in the attackers stealing credentials. The attackers exploited known flaws in Snapchat and American Express websites to trigger open redirects to specially crafted web pages, where the credential harvesting could then take place. Email security company Inky detected these attacks

Amex and Snapchat used in Open Redirect Attacks Read More »
0

No products in the basket.

No products in the basket.

Continue Shopping