Application Security

eScan Antivirus Compromised Supply Chain Security Breach Uncovered
Application Security
eScan Antivirus Compromised: Supply Chain Security Breach Uncovered
Hackers breached an update server at MicroWorld Technologies, delivering malware to customers through eScan Antivirus software. This supply chain attack exposed vulnerabilities within the software's ...
Chrome Extensions Prove Malicious with Data Hijacking Tricks
Application Security
Chrome Extensions Prove Malicious with Data Hijacking Tricks
Security experts have discovered Chrome extensions hijacking data and targeting OpenAI ChatGPT tokens. One identified extension, "Amazon Ads Blocker," falsely claims to remove sponsored content ...
Microsoft Sets Retirement for NTLM Protocol in Windows for Enhanced Security
Application Security
Microsoft Sets Retirement for NTLM Protocol in Windows for Enhanced Security
To bolster cybersecurity, Microsoft announced plans to phase out the NTLM authentication protocol, which has been part of Windows for over three decades, citing vulnerabilities ...
More Than 175,000 Exposed Hosts Pose Risks for Ollama LLM Misuse
Application Security
More Than 175,000 Exposed Hosts Pose Risks for Ollama LLM Misuse
Research identifies 175,000 exposed Ollama hosts potentially facilitating LLM misuse, with 23,000 persistently active. Highlighted by SecurityWeek, this cybersecurity risk could enable unauthorized access to ...
SolarWinds Web Help Desk Critical Vulnerabilities Patched
Application Security
SolarWinds Web Help Desk Critical Vulnerabilities Patched
SolarWinds has released updates for six vulnerabilities in its Web Help Desk. Among these were four critical flaws enabling unauthenticated remote code execution or authentication ...
Critical Vulnerabilities Found in n8n's Sandbox Mechanism Potential for Remote Code Execution
Application Security
Critical Vulnerabilities Found in n8n’s Sandbox Mechanism: Potential for Remote Code Execution
Two newly identified vulnerabilities within n8n's sandbox could allow attackers to execute remote code. Weaknesses in the AST sanitization logic are key factors.
Insecure Deployments of Moltbot Pose Risks in Enterprise Settings
Application Security
Insecure Deployments of Moltbot Pose Risks in Enterprise Settings
Insecure deployments of Moltbot, an AI assistant, in enterprise environments raise severe risks of leaking sensitive data such as API keys, OAuth tokens, and conversation ...
Microsoft Office and Linux Kernel Among Newly Cataloged Vulnerabilities
Application Security
Microsoft Office and Linux Kernel Among Newly Cataloged Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency updated its Known Exploited Vulnerabilities catalog with newly identified security flaws, including those in Microsoft Office and the ...
Meta Introduces Enhanced WhatsApp Security for High-Risk Users
Application Security
Meta Introduces Enhanced WhatsApp Security for High-Risk Users
Meta's initiative to enhance the security of high-risk individuals on WhatsApp involves a trade-off between functionality and security, providing an extra layer of defense through ...
ShinyHunters Allegedly Breach Panera Bread and Other Companies via Microsoft Entra SSO
Application Security
ShinyHunters Allegedly Breach Panera Bread and Other Companies via Microsoft Entra SSO
ShinyHunters, an extortionist gang, claims to have accessed data from Panera Bread, CarMax, and Edmunds, using Microsoft Entra Single Sign-On (SSO). Understanding the technical breach ...