Web browsers and vulnerabilities


SQL injection bug was actively exploited by hackers in the wild Sophos is one of the prominent security vendors around, specializing in network, email, and communication security products for mainly enterprise sectors. Recently, the firm received several reports about Sophos’ XG Firewall zero-day[1] vulnerability related to the SQL infection process, […]

Sophos Firewall zero-day vulnerability patched


SBA takes PPP and EIDL services down temporarily due to a data breach affecting 8,000 applicants US government is taking various measures to help small businesses to survive the current Coronavirus pandemic. A Small Business Association (SBA)[1] is one of the federal agencies expanded by Congress to grant law authorized […]

A flaw in SBA servers exposed credentials of 8,000 applicants


Stolen passwords can be used to access internet networks of companies that have patched Pulse Secure VPN products Pulse Secure VPNs got compromised, and attackers managed to stole credentials, passwords, and other information that is possibly now used to hack customers.[1] CISA alerts[2] organizations to be cautious and change their […]

Patched Pulse Secure VPN customers still vulnerable for hacks



Login credentials of 4 mln Quidd users shared on the black market for free Nearly 4 million credentials of registered Quidd users’ have been spotted circulated on the web hacking forum in an uncontrollable manner, researchers revealed. While the company stays silent, security experts express concern about 3.9 million email […]

Quidd data breach: nearly 4 million registered users affected


Critical security flaw forces Bisq Bitcoin exchange trading platform to stop services after a cyber attack The decentralized exchange reported that the trading would be temporarily halted while the hotfix tries to resolve the security vulnerability.[1] The cyberattack during which the critical flaw was exploited resulted in the theft of […]

Over $250k in cryptocurrency stolen from Bisq Bitcoin exchange users


Marriott International suffers a second massive data breach  Marriott International Inc., one of the largest hotel chains worldwide, officially disclosed a data breach[1] that may have exposed the credentials of more than 5.2 million registered hotel guests. The company consisting of 30 brands and owning more than 7,000 properties across […]

A new Marriott data breach exposed credentials of 5.2 million ...



CVE-2020-0688 was patched by Microsoft, yet companies are still not updating Microsoft Exchange Security firm Rapid7 has uncovered that more than 350,000 Microsoft Exchange servers remain open to security vulnerability within its servers.[1] Despite that Microsoft shipped a patch in its Patch Tuesday on February 11 and urged admins to apply it without […]

350,000 organizations remain vulnerable to Microsoft Exchange flaw


The pre-installed HP Support Assistant software on Windows computers is riddled with vulnerabilities An independent security researcher Bill Demirkapi has uncovered several critical vulnerabilities in HP Support Assistant software.[1] According to his research, upon successful exploitation, malicious actors could perform remote code execution, escalate privileges locally, and delete arbitrary files. […]

HP computer owners beware: HP Support Assistant flaws remain unpatched


Ryuk ransomware does not leave hospitals alone despite the fact that doctors are already busy with Coronavirus disease patients Since the end of 2019, hospitals worldwide are having a hard time dealing with Coronavirus-infected patients and also trying to protect themselves. According to cybersecurity researchers, Ryuk ransomware developers still do […]

While dealing with COVID-19, hospitals also have to deal with ...



A significant five-year vulnerability in Intel Chipsets discovered, only the latest Intel 10th generation CPUs not affected It seems that hackers can compromise almost all Intel processors released in the past 5 years because of the unpatchable vulnerability found in a widely distributed model of chipsets released by Intel.[1] Also identified […]

The unfixable Intel bug affects more people than it was ...