Sign in Subscribe

Security

How Adult Sites Exploit SVG Files for Facebook Likes

How Adult Sites Exploit SVG Files for Facebook Likes

In recent days, numerous adult websites have resorted to a surreptitious method to boost their presence on social media, notably Facebook, by infusing malware within .svg files. These malicious tactics enable the sites to gain 'likes' without users' direct interaction. The SVG (Scalable Vector Graphics) format, a

Critical Encryption Issues Found in Police and Military Radios

Critical Encryption Issues Found in Police and Military Radios

In a breakthrough revelation, researchers from the Netherlands unveiled vulnerabilities in an encryption algorithm embedded in radios used globally by vital infrastructure sectors, including police, intelligence agencies, and military forces. This design flaw, discovered just two years ago, left these communications susceptible to eavesdropping attacks. Following the public disclosure of

TETRA Radio Encryption Vulnerability: A Growing Concern

TETRA Radio Encryption Vulnerability: A Growing Concern

In recent revelations, vulnerabilities have been found in the encryption algorithms used in radios for critical infrastructures such as police and military worldwide. Researchers in the Netherlands, including Carlo Meijer and his team from Midnight Blue, discovered that radios employing the TETRA encryption standard are susceptible to being cracked. Initially,

Critical WinRAR 0-day Exploited by Cybercrime Groups

Critical WinRAR 0-day Exploited by Cybercrime Groups

A recently uncovered high-severity zero-day vulnerability in the popular WinRAR file compression utility has been under active exploitation by two Russian cybercriminal factions. These attackers deploy backdoor tactics on computers through malicious archives attached to phishing emails, some of which are highly personalized. Security firm ESET reported on detecting these

Critical WinRAR Zero-Day Exploited by Cybercrime Groups

Critical WinRAR Zero-Day Exploited by Cybercrime Groups

A severe zero-day vulnerability in the widely-used WinRAR file compression software has been actively exploited by two cybercrime groups, leading to compromised computer systems. The attacks utilized malicious archive files sent via phishing emails, some of which were specifically tailored for the target. ESET, a notable security firm, detected this

AI Site Perplexity Accused of Bypassing No-Crawl Directives Using Stealth Tactics

AI Site Perplexity Accused of Bypassing No-Crawl Directives Using Stealth Tactics

The AI search platform, Perplexity, has been accused of utilizing stealthy bots to bypass websites' no-crawl mandates. This situation raises concerns about violating longstanding Internet protocols, according to Cloudflare, a service focused on network security and optimization. Cloudflare reported in a blog post that complaints were received from site

Voice Phishing Strikes Cisco, User Data at Risk

Voice Phishing Strikes Cisco, User Data at Risk

Cisco recently revealed that a voice phishing attack compelled one of its representatives to unwittingly allow cyber attackers to download user data from a third-party customer relationship management (CRM) system. The breach involved personal details from users registered on Cisco.com, including names, organization names, addresses, email addresses, phone numbers,