[KIS-2023-01] Tiki Wiki CMS Groupware <= 25.0 Two Cross-Site Request Forgery Vulnerabilities
Posted by Egidio Romano on Jan 09 ------------------------------------------------------------------------------ Tiki Wiki CMS Groupware <= 25.0 Two Cross-Site Request Forgery Vulnerabilities ------------------------------------------------------------------------------ [-] Software Link: https://tiki.org [-]...
USN-5792-2: Linux kernel vulnerabilities
Mingwei Zhang discovered that the KVM implementation for AMD processors in the Linux kernel did not properly handle cache coherency with Secure Encrypted Virtualization (SEV)....
Freejacking Campaign By PurpleUrchin Bypasses Captchas
The threat actors also deployed more aggressive techniques for mining CPU resources Read More
ChatGPT Used to Develop New Malicious Tools
These include infostealers, multi-layer encryption tools and dark web marketplace scripts Read More
USN-5797-1: WebKitGTK vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker...
Dark Web Actors Fight For Drug Trafficking and Illegal Pharmacy Supremacy
Following the takedown of the Hydra Marketplace in 2022, 10 darknet markets rose to fill the void Read More
Does a hybrid model for vulnerability management make sense?
Graham Cluley Security News is sponsored this week by the folks at Edgescan. Thanks to the great team there for their support! Edgescan simplifies Vulnerability...
The Case for Your Security at CES 2023
As technology weaves itself into our lives in new and unexpected ways, some of it will get quite personal and close to home. That made...
Identity Thieves Bypassed Experian Security to View Credit Reports
Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian...
USN-5796-1: w3m vulnerability
It was discovered that w3m incorrectly handled certain HTML files. A remote attacker could use this issue to cause w3m to crash, resulting in a...