Cybersecurity Researchers Unveil Vulnerability in Google Cloud Platform In the realm of cybersecurity, researchers have brought to light a critical privilege escalation vulnerability lurking within Google Cloud Platform’s Cloud Functions service. This flaw could potentially pave the way for malicious actors to breach other essential services and lay their hands on sensitive data, all without…
The Vulnerabilities of Modern Browsers In today’s digital landscape, the browser reigns supreme as the nerve center of the modern workspace. It’s where we access our emails, collaborate on documents, attend virtual meetings, and even do our online shopping. However, this crucial tool is also one of the least protected threat surfaces for many organizations….
The Importance of Patching Vulnerabilities The Internet Systems Consortium (ISC) has shown once again the importance of promptly addressing security vulnerabilities in software systems. In this case, the vulnerabilities affect the Berkeley Internet Name Domain (BIND) 9 Domain Name System (DNS) software suite. This software is crucial for translating domain names into IP addresses and…
Docker Warns of Critical Flaw Allowing Authorization Bypass Docker, a popular container platform, has issued a warning about a critical vulnerability affecting certain versions of Docker Engine. This flaw could potentially enable attackers to sidestep authorization plugins (AuthZ) in specific scenarios. Tracked as CVE-2024-41110, this bypass and privilege escalation vulnerability has been assigned a CVSS…
Google Enhances Security Warnings in Chrome Browser In a bid to bolster security measures, Google has announced the addition of new security warnings for potentially harmful files being downloaded through its Chrome web browser. This proactive step aims to provide users with more detailed and informative alerts when encountering suspicious or malicious files during browsing…
Novi napadi Kimsuky skupine: Kaj vemo in kako se zaščititi? Severnokorejska hekerska skupina Kimsuky, ki deluje pod izvidniškim generalnim uradom (RGB), je razvila nov napad, ki cilja na krhke točke varnostnih sistemov. Skupina uporablja nov custom phishing tool, ki se osredotoča na socialni inženiring, prek katerega uspelo prevara uporabnike in pridobiti njihovo zaupanje ter dostop…
The Telegram’s Android App Vulnerability: EvilVideo Zero-Day In the vast world of mobile applications, security loopholes can often slip through the cracks. And that’s exactly what happened with Telegram’s Android app in the form of a zero-day security flaw known as EvilVideo. This flaw allowed cyber attackers to disguise malicious files as innocent-looking videos, potentially…
Revolutionizing Security Questionnaires: A Solution in Sight In the world of cybersecurity, security questionnaires have developed a reputation as a necessary evil. While they play a crucial role in assessing a company’s security posture, they can also be a major headache for security and sales teams alike. The time-consuming nature of filling out these questionnaires…
V zadnjih letih smo priča naraščajočemu številu kibernetskih napadov, še posebej tistih, ki jih izvajajo skupine izsiljevanja. Med njimi je skupina DarkVault, ki je nedavno prevzela odgovornost za napad na Eurovillo, eno izmed vodilnih nepremičninskih agencij na Hrvaškem. Ta incident ne le da opozarja na ranljivost podjetij v nepremičninskem sektorju, temveč tudi odpira vprašanja o…
The Perils of Unchecked SaaS Adoption: A Double-Edged Sword In the ever-evolving landscape of business technology, the surge in Software as a Service (SaaS) adoption stands out as a double-edged sword. The primary catalyst behind this trend? Productivity. With purpose-built tools readily available for every facet of modern business operations, it’s no wonder that employees…