Articles
Critical bug in GitLab allows you to take over other people’s accounts
GitLab has fixed a critical vulnerability that allowed remote attackers to gain access to user accounts using hard-coded passwords. CVE-2022-1162 affected both GitLab Community Edition (CE) and Enterprise Edition...
Articles
Okta: Lapsus$ tried to hack into a support engineer’s laptop in January
The hackers dispute Okta's claim that the hack was unsuccessful.
Approximately 375 customers (2.5%) of Okta were allegedly affected by a cyber attack by the Lapsus$ ransomware...
Articles
CISA adds 95 new CVEs to its list of exploited vulnerabilities
CISA called for bug fixes in software from Cisco, Microsoft, Adobe, Oracle, and other companies.
The US Cybersecurity and Infrastructure Security Agency (CISA) has added 95 new...
Articles
Google Releases Hotfix for 0-Day Vulnerability in Chrome
Google developers have released Chrome version 98.0.4758.102 (for Windows, Mac and Linux), which fixes a zero-day vulnerability that has already been exploited by hackers.
The issue in...
Articles
50% reduction in Google account hacks after enabling 2SV
One of the main problems is the lack of understanding by users of the benefits of additional authorization procedures.
It turns out that with just...
Articles
Hackers who hacked cybersecurity companies are back again after five years
As part of Operation #LeakTheAnalyst, hackers allegedly hacked into F5 Networks and released customer data.
The hacker group 31337 appears to be back again after...
Articles
Trickbot ransomware wanted to open 6 offices in St. Petersburg
Internal correspondence between the leaders of the group sheds light on its structure and activities.
The Wired edition managed to get acquainted with previously unpublished...
Articles
Let’s Encrypt revokes 2 million certificates
This Friday (January 28, 2022), non-profit organization Let's Encrypt plans to revoke approximately two million SSL/TLS certificates because they were not issued correctly.
In a white paper,...