The Security Blog From Gridinsoft
Critical SAP Auth Bypass and SSRF Flaws Fixed, Update Now
SAP, the developer of business management software, released a huge security update that fixes numerous vulnerabilities in their software. Among…
1Password Vulnerability for MacOS Causes Credentials Leak
A critical vulnerability was discovered in 1Password that allows attackers to steal vault items by bypassing the app’s security measures.…
Windows COM Vulnerability Exploited by Chinese Hackers
A vulnerability in Windows COM, first discovered in 2018, has become the target of attacks once again. A Chinese hacker…
Apache OFBiz RCE Vulnerability Discovered, Patch Now
A vulnerability, CVE-2024-38856, has been discovered in Apache OFBiz that allows unauthenticated remote code execution. A patch is currently available,…
Ubiquiti G4 Vulnerability Discovered, Allowing for DDoS Attacks
Researchers found a flaw in Ubiquiti G4 Wi-Fi cameras, that exposes the selection of important chunks of information. They suppose…
WeChat and Kaspersky Ban in Canada – What You Should Know?
The Canadian government has instituted a ban on the use…
New Confluence Vulnerability Leads to Unauthorised Access
Another vulnerability in the flagship product of Atlassian corporation, Confluence,…
Octo Tempest Threat Actor – The Most Dangerous Cybercrime Gang?
Octo Tempest, a financially-motivated hacking group, has been labeled “one…
IoT Malware Attacks Grow by 400% in 2023
IoT malware has been a major concern over the last…
WinRAR Vulnerability Allows Arbitrary Code Execution
Over the past few weeks, Google’s Threat Analysis Group (TAG)…
VMware Releases Patch for Critical vCenter Server RCE Vulnerability
VMware has released a patch for a critical vulnerability in…
1Password Hacked Following the Okta Hack
Recent security breach in the 2FA provider Okta appears to…
Skype & Microsoft Teams Spam Spreads DarkGate Loader
Over the past few years, DarkGate has been relatively inactive.…
Fake Amazon and Microsoft Tech Support call centers busted
Amazon and Microsoft are partnering with CBI to crack down…
Ragnar Locker Ransomware Shutdown, Infrastructure Seized
On October 19, 2023, a group of international law enforcement…
Trigona Ransomware Hacked by Ukrainian Cyber Alliance
Trigona ransomware, a novice threat actor active since late 2022,…
Exim Vulnerability Allows RCE, No Patches Available
Exim Internet Mailer, a program massively used as a basis…
