Month: January 2021

Top Software Testing Services

Discovery Of An Exploit That Allows Kindle E-Reader Takeover Was Awarded $18000 By Amazon

A cybersecurity researcher, Yogev Bar-On at Realmode Labs, an Israel-based cybersecurity consulting firm, discovered an exploit named as KindleDrip in October 2020. According to Amazon, to execute this attack successfully, it involves exploiting three different security flaws. The principal weakness in the exploit was identified with the “Send to Kindle” service, which permits clients to…
Read more

Patched Bugs Of Signal, FB Messenger, JioChat Apps Explained By Google

A severe bug was accounted in January 2019 in Apple’s FaceTime group chats service that made it workable for clients to start a FaceTime video call and snoop on subjects by adding their own numbers as another individual in a gathering talk even earlier than the individual on the opposite side acknowledged the approaching call.…
Read more

DNSpooq Vulnerabilities Allow DNS Cache Poisoning Of Millions of Devices

As per JSOF which is an Israel-based cybersecurity company, that discovered the security issues, explaining that hundreds of thousands of devices, because of seven security defects in dnsmasq, may be vulnerable to DNS cache poisoning (DNS caching and forwarding softwares that are commonly used in various IoT devices, routers, servers, desktop, and mobile phones) and…
Read more

No Simple Fix For SolarWinds Supply Chain Attack – Says FireEye

The cybersecurity firm FireEye, who discovered the SolarWinds Supply Chain Attack, said that this almost seven-month-old cyber attack still remains in its early stage with no development in the analysis of the attack and tracing the intruder. This attack has massively and shockingly impacted the private and government sector of the US. On Tuesday, cybersecurity…
Read more

Access Control Protection Bypass Patched By CoTURN – A VoIP Flaw

Cybersecurity researchers have recently found that using a vulnerability attackers/hackers could avoid the security measures of the CoTURN server’s default access control and gain access to network services past the firewall. One of the analysts presented an assumption that, under particular conditions, an attacker/hacker could proceed to accomplish remote code execution (RCE), in spite of…
Read more

Linux Device Vulnerabilities Being Exploited By FreakOut Malware

Specialists are cautioning about a novel malware version that is focusing on Linux gadgets, to add endpoints to a botnet to be used in DDoS (distributed-denial-of-service) assaults and crypto mining. The malware variation, called FreakOut, has an assortment of abilities. Those incorporate port filtering, data gathering, and data packet and network sniffing. It is effectively…
Read more

Cyber Defense Guidelines For Financial Service Sector Of Singapore Updated To Be More Strict And Secure

Singapore has modified its present arrangement of rules on innovation hazard the executives for monetary foundations to incorporate, among others, “strong oversight” of their partnership with other service providers to guarantee information classification. The refreshed rundown additionally contains refreshed direction on security controls and stress tests just as the arrangement of outsider merchants and senior…
Read more

Beware Of The Sextortion Attempts In Online Dating, Warns UK Police

As legislators play whack-a-mole with COVID-19 disease rates and attempt to adjust the financial harm brought about by lockdowns, stay-at-home requests have likewise affected those out there in the dating scenario. The United Kingdom has force stopped meeting anyone other than your personal group of family and relatives and exploiting that can cause a person…
Read more

FBI Warns About Corporate Accounts Credentials Stealing Via Vishing Attacks

The FBI (Federal Bureau of Investigation) has released a warning notification about the actively ongoing vishing attacks that aim to gain corporate account login credentials for privilege escalation from employees and accessing their network. A vishing attack is a social engineering attack in which the victim is tried to trick in and give in confidential…
Read more

A Report Reveals Worldwide Exposure Of Total 22 Billion Records In All Data Breaches of 2020

The latest report released on Friday reveals that more than 22 billion records have been compromised all around the globe in a total of 730 data breaches that were disclosed in 2020. These data breaches took place from January and through October in 2020. Out of the 730 data breaches, according to Tenable’s Security Response…
Read more