Recent Security News
-
New Microsoft bug bounty program focuses on AI-powered Bing
October 12, 2023 at 01:36PM Microsoft has introduced a new AI bounty program for the AI-driven Bing experience, offering rewards up to $15,000. The program covers vulnerabilities found in AI-powered Bing experiences across various services and products, including bing.com, Microsoft Edge, Microsoft Start Application, and Skype Mobile Application. Qualified submissions are eligible for bounty rewards…
-
SEC Investigating Progress Software Over MOVEit Hack
October 12, 2023 at 01:12PM The US Securities and Exchange Commission (SEC) has launched an investigation into Progress Software’s MOVEit transfer tool vulnerability, which exposed the data of over 2,000 organizations and 60 million individuals. The flaw, tracked as CVE-2023-34362, was exploited by the Cl0p ransomware group to steal data. Progress Software received a subpoena…
-
The Cyberwar Between the East and the West Goes Through Africa
October 12, 2023 at 01:03PM Nation-state hackers play a significant role in cyber warfare. Understanding the geopolitical dynamics is crucial for addressing nation-backed cyber threats. Africa, particularly South Africa, serves as a bridge between the East and West, making it vulnerable to cyberattacks. Collaboration between the West and Africa is essential for countering these attacks…
-
Apple fixes iOS Kernel zero-day vulnerability on older iPhones
October 12, 2023 at 12:46PM Apple has released security updates for older iPhones and iPads to address two zero-day vulnerabilities that were being exploited in attacks. The first vulnerability allows local attackers to elevate privileges on vulnerable devices, while the second vulnerability could allow threat actors to execute arbitrary code. Although Apple has not confirmed…
-
Backdoor Malware Found on WordPress Website Disguised as Legitimate Plugin
October 12, 2023 at 10:55AM A WordPress backdoor that disguises itself as a legitimate plugin has been discovered by security firm Defiant. The backdoor can run as a plugin and perform various functions, including creating an admin account and serving malicious content based on specific filters. It can also be operated remotely by the threat…