25Mar
[webapps] Online Diagnostic Lab Management System v1.0 – Remote Code Execution (RCE) (Unauthenticated)
Online Diagnostic Lab Management System v1.0 – Remote Code Execution (RCE) (Unauthenticated)
25Mar
[webapps] “camp” Raspberry Pi camera server 1.0 – Authentication Bypass
“camp” Raspberry Pi camera server 1.0 – Authentication Bypass
25Mar
[webapps] Translatepress Multilinugal WordPress plugin < 2.3.3 – Authenticated SQL Injection
Translatepress Multilinugal WordPress plugin
25Mar
[local] System Mechanic v15.5.0.61 – Arbitrary Read/Write
System Mechanic v15.5.0.61 – Arbitrary Read/Write
25Mar
24Mar
Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data
A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick to evade detection and deploy an info-stealing malware.
The package in question, named onyxproxy, was uploaded to PyPI on March 15, 2023, …
24Mar
ChatGPT leaks bits of users’ chat history
|
Categories: News Tags: ChatGPT Tags: privacy Tags: chat history ChatGPT suddenly started showing users the titles of other users’ chats. |
The post ChatGPT leaks bits of users’ chat history appeared first on Malwarebytes Labs.
24Mar
USB bombs sent to news organizations
|
Categories: News Tags: usb Tags: bomb Tags: mail Tags: post Tags: letter USB sticks repurposed as explosive devices provide a dramatic reminder of how little you know about unknown USB devices. |
The post USB bombs sent to news organizations appeared first on Malwarebytes Labs.
24Mar
THN Webinar: Inside the High Risk of 3rd-Party SaaS Apps
Any app that can improve business operations is quickly added to the SaaS stack. However, employees don’t realize that this SaaS-to-SaaS connectivity, which typically takes place outside the view of the security team, significantly increases risk.
Whet…
24Mar
Mimicry – Security Tool For Active Deception In Exploitation And Post-Exploitation
Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a low…
