ENV file vulnerabilities resulted in massive exploitation. Over 110,000 domains have been affected by a significant ransomware campaign that Palo Alto Networks has detected. Attackers gained access to data stored in cloud storage by using wrongly set up ENV files in AWS and demanding a ransom for it. How did they do it ? The …
AWS Hacked : Error In Configuration Affects 110,000 Domains Read More »
Alert: IPv6 systems are vulnerable to TCP/IP bugs that spread without input from users. Users should be aware that all Windows computers with IPv6 setup by default are vulnerable to remote code execution (RCE) due to a major TCP/IP vulnerability, as disclosed by Microsoft. What is the Bug About ? This security flaw, discovered by …
Microsoft Windows Is Hacked : Zero Click Vulnerability Found in all version Read More »
A surprising pattern has been discovered by a recent study: smartphones may be used to locate people’ homes quite accurately while secretly monitoring their activities. Partially processed information can be accessed without the owners’ knowledge by taking use of GPS data in different apps. With an amazing 99.6% accuracy rate, this data helps in determining …
Android phones can turn into spy :Alert GPS Tracking Vulnerability Read More »
Alert: The password manager 1Password is alerting users about a flaw that makes all Mac users using versions before 8.10.36 vulnerable to the loss of vault items by hackers. A high-severity vulnerability that allowed attackers to target Mac users and obtain private information has been fixed in the well-known password manager 1Password. About the Issue …
1Password Mac Users Update passwords asap : Here’s How you do it Read More »
Microsoft has found many vulnerabilities in OpenVPN, a popular VPN software that is incorporated into millions of PCs, routers, mobile devices, firmware, and other smart devices. They could be used in privilege escalation and remote code execution (RCE) attacks when chained together. Microsoft Says “Attack-chained: OpenVPN flaws that could cause RCE and LPE found” Certain …
Microsoft Discovers multiple vulnerabilities on OpenVPN Read More »
In A NutShell: A tool to take benefit of the MAP Account hijack attack over Bluetooth Classic is called mapAccountHijack. Affected Version of IOS and Android are as follows: What is MAP (Message Access Profile) ? Device message exchange is controlled by a collection of features and protocols defined by the Message Access Profile (MAP) …
Map Account Hijack: An Indepth Guide to New attack for Android and iOS Not patched Read More »
The “0.0.0.0 Day” vulnerability affects all popular online browsers, including Apple Safari, Mozilla Firefox, and Google Chrome. The browser developers’ responses differ: In a NutShell: The research team at Oligo security has discovered a serious flaw known as “0.0.0.0 Day,” which enables malicious websites to communicate with local network services and get beyond browser protection. …
“0.0.0.0 Day” Vulnerability Affects Apple Safari, Mozilla Firefox, and Google Chrome Read More »
Hackingblogs : Employee passwords and an incredible amount of users’ GPS locations have been exposed by the Moonly app. Additionally, the disclosure raises the possibility that the supposedly US-based corporation may actually be run mostly out of Russia. The Cybernews research team found a publicly accessible Google Cloud Storage bucket on June 18. The bucket …
Famous Astrology App Moonly Hacked: 6M Users Data Is Exposed Read More »
Hackingblogs: An Azure damage that affected users in North and South America for more than two hours has been resolved by Microsoft. According to the company, as services that use Azure Front Door (AFD), a modern cloud Content Delivery Network (CDN), were affected by the issue, which began at roughly 18:22 UTC. The first time …
New Outage : Microsoft Azure Outage Leaves North America’s Digital World in Chaos Read More »
A flaw caused a significant loss for PVR Cinemas! A vulnerability on their website enabled attackers to purchase gift cards for just ₹1, causing losses of more than ₹50 lakh. The gift card option was eliminated by PVR, and cyber cells are looking into the matter. PVR Cinemas, is an Indian multiplex chain based in Delhi. It was formed as …
