Contrabando — Exploitation Summary

Apple has released emergency security updates for iOS, iPadOS, and macOS to fix a zero-day vulnerability in its ImageIO framework being actively exploited.

Biomedical research firm Inotiv has disclosed a ransomware attack that encrypted its systems, disrupting operations and putting sensitive research data at risk.

TPG Telecom's iiNet brand has suffered a data breach, exposing the details of nearly 300,000 customers, including email addresses and phone numbers.

A critical vulnerability in the Ollama desktop tool allowed attackers to hijack local AI models and read private conversations with a single website visit.

A UK man linked to the "Spider Team" and "Yemen Cyber Army" has been sentenced for hacking websites and stealing credentials from millions.

North Korea is accused of stealing £17 million in crypto from the Lykke exchange, forcing its collapse. The theft is linked to the notorious Lazarus Group.

A new book reveals critical vulnerabilities in Google's Privacy Sandbox, showing how its new APIs could be exploited to harvest user data.

A Red Canary report reveals attackers are exploiting an Apache ActiveMQ flaw to breach Linux systems, then patching the vulnerability to hide their presence.

The iconic hacker journal Phrack celebrates its 40th anniversary with its 72nd issue, featuring new research on exploits, rootkits, and vulnerabilities.

A new report uncovers the "Stealer Ecosystem," a professionalized cybercrime network with specialized roles for creating and distributing infostealers.

Have you ever left a door slightly ajar, thinking no one would notice? In the world of web development, forgetting to remove sensitive data…

Let’s be honest. When most people hear “SOC,” they think of blinking dashboards, loud alarms, and analysts typing furiously in a dark…

Smartphones have become the most trusted devices in the enterprise. They sit in executive boardrooms, travel across global airports, and…

Alle snakker om mulighetene KI gir. Færre snakker om skyggesiden: de nye sikkerhetsutfordringene.  Når vi bygger løsninger med…

Apple has published out-of-band security updates to address a critical zero-day flaw that security researchers have identified as being…

In this week’s edition of Malloc’s Weekly Analysis, we discuss the most important recent cybersecurity events concerning mobile security…

almost everything we do is connected to technology. From online shopping to mobile banking and workplace collaboration tools, data is…

Cross-Site Scripting (XSS) Prevention in React.js

India’s information security sector is globally renowned, but beneath the surface of legitimate consulting and compliance, a parallel…