Intel has revealed a new class of vulnerabilities impacting all modern Intel chips, which can potentially leak sensitive data from a system’s CPU. Company officials said that the flaws, named Microarchitectural Data Sampling (MDS), comprise four different attacks, all of which depend on different ways side channel attacks to stealRead More…

A major remote code execution vulnerability has been discovered in products from Kaspersky Lab, which pushed out a patch to customers in early April. The flaw, called CVE-2019-8285 and assigned a CVSS score of 8.0, was reported to Kaspersky by a team called “Imaginary.” The experts found a way to remotely execute arbitraryRead More…

Officials at Qihoo 360, a leading Chinese cybersecurity firm, have revealed an ongoing credit card scam that steals the card payment information of thousands of customers visiting leading e-commerce websites. Researchers discovered that attackers have been injecting malicious JS scripts hosted on a malicious domain, www.magento-analytics [.] com, onto onlineRead More…

A French online shop named “Kook King Shop”, which sells Burger King products focused on kids, was maintaining an unprotected database that includes sensitive information of thousand of customers. According to reports, the unprotected cluster contained all of the exposed information in a plain-text form, so there was no encryptionRead More…

A National Cyber Security Centre (UK) report states that the most common password is “123456” and that it has been found 23 million times in cybersecurity breach databases. This underscores the importance of not reusing a password, and mixing and matching numbers, letters and characters when choosing one. The topRead More…