Category: Application Security
-
A data scraping service known as Spy Pet has sparked privacy concerns by selling extensive user data from Discord. With a claimed 600 million user database, Spy Pet offers user profiles and activity details for a minimal fee. Discord is actively investigating the matter. The incident emphasizes the need for clearer regulations protecting user privacy.
-
Telegram addressed a critical security issue in its Windows desktop app, debunking initial rumors of a zero-click flaw. After a typo in the code enabled Python scripts to run without warning, exploiters disguised them as videos. Telegram swiftly fixed the issue and plans to enhance security for future versions.
-
CVE-2024-31497 is a critical vulnerability in PuTTY SSH client versions 0.68 to 0.80, allowing recovery of a user’s private key due to biased nonce generation. Attackers can exploit this, posing serious threats. Several applications are also affected. Users must upgrade, revoke vulnerable keys, and update dependent applications to mitigate the risk and prevent breaches.
-
Palo Alto Networks has released critical updates to fix a zero-day vulnerability (CVE-2024-3400) in its firewall operating system PAN-OS. The flaw allows unauthenticated attackers to gain root access through command injection in the GlobalProtect gateway/portal. Hotfixes are available, and customers are advised to apply mitigation measures. The U.S. CISA has also mandated actions to address…
-
A new “Loop DoS” attack exploits UDP-based application-layer protocols, potentially affecting thousands of systems. It involves servers engaging in continuous communication, depleting their resources and rendering them unresponsive. Despite no reported real-world instances, an estimated 300,000 hosts could be exploited. Initiatives like BCP38 filtering spoofed traffic aim to mitigate risks.
-
The XZ Compression Backdoor Timeline details a supply chain attack on the xz compression library by “Jia Tan,” who gained trust and eventually inserted a backdoor, affecting systems using the library. The attack was detected in March 2024, prompting industry response and highlighting vulnerabilities in open source supply chain security.
-
A recent backdoor in xz/liblzma has raised concerns in the software industry. The culprit, who posed as a benign contributor, managed to introduce vulnerabilities into the open-source software. The security community has since taken action, but the incident highlights the challenges of open-source development..
-
Online retailer PandaBuy was compromised, exposing 1.3 million customers’ data, prompting users to change passwords and enable two-factor authentication. Similarly, a ransomware attack affected over 2.8 million individuals through Massachusetts Health Insurer, triggering lawsuits and the offer of credit monitoring.
-
Security vulnerabilities pose a significant threat to businesses. Netizen’s Security Operations Center (SOC) has identified five critical vulnerabilities from March. These include RCE vulnerabilities in Microsoft Windows Hyper-V and Open Management Infrastructure, as well as EoP vulnerabilities in Microsoft’s Azure Kubernetes Service and desktop versions of Firefox. Immediate patching or mitigation is essential.
-
Sam Bankman-Fried, founder of the defunct cryptocurrency exchange FTX, has been sentenced to 25 years in prison for extensive financial misconduct. The case highlights the urgency of enhanced Anti-Money Laundering (AML) and Countering Financing of Terrorism (CFT) measures in the cryptocurrency sector. The industry must strengthen AML/CFT protocols and collaboration with regulators to ensure market…
