Alerts

Stay updated with CyberLabs’ latest news alerts covering critical cybersecurity incidents, breaking threats, and important industry developments that matter to your digital safety.

Categories:

Sort By:

The Surge of 8Base Ransomware Group

29 Jun 2023

Ransomware attacks have become increasingly sophisticated and damaging, causing significant financial losses and disruptions for businesses. The emergence of 8Base as a prominent ransomware gang raises concerns about the evolving nature of cyber threats. This article delves into the activities and characteristics of the 8Base ransomware gang, shedding light on their operations and impact.

Microsoft Release Optional Fix for Vulnerability

15 Jun 2023

In a recent update, Microsoft has released an optional fix to address a kernel information disclosure vulnerability that affects systems running multiple versions of Windows, including the latest Windows 10, Windows Server, and Windows 11 releases.

Apple Fixes Bug Allowing Bypass of SIP Root Restrictions

1 Jun 2023

In recent findings, researchers from Microsoft have identified a critical vulnerability, labeledCVE-2023-32369and given the name Migraine. This vulnerability enables attackers with root privileges to bypass System Integrity Protection (SIP), a macOS security feature introduced in OS X El Capitan.

Google launches bug bounty program

24 May 2023

Google has recently unveiled the Mobile Vulnerability Rewards Program (Mobile VRP), a new bug bounty initiative aimed at incentivizing security researchers to identify and report vulnerabilities within the company’s Android applications. This program presents an exciting opportunity for bug hunters to actively participate in making Google’s mobile apps more secure.

‘Security Incident’ in Twitter Circle

9 May 2023

Twitter introduce Twitter Circle in August 2022. This allows users to send tweets to a selected set of people (up to 150 users).

ChatGPT is Back in Italy after ban

2 May 2023

Following the company’s compliance with regulatory requirements, OpenAI announced that access to its chatbot service ChatGPT is once again permitted in Italy. Due to the improper gathering of personal information and the lack of procedures for determining a child’s age, the Italian Data Protection Authority temporarily prohibited ChatGPT. The Authority drew attention to the fact that OpenAI fails to inform users that it is gathering their data.

VMware patches critical product vulnerabilities

25 Apr 2023

In order to address significant security flaws in the VMware Aria Operations for Logs (previously vRealize Log Insight) product line, VMware has urgently published updates. The company has also issued a warning about the possibility of pre-authentication remote root attacks. The VMware Aria Operations for Logs package contains two distinct vulnerabilities, CVE-2023-20864 and CVE-2023-20865, which are documented in a critical-level advisory from VMware. The warning also offers recommendations to help businesses avoid the problems.

Emergency Update from Google Chrome

18 Apr 2023

You must immediately check your browser after Google issued an urgent Chrome warning! Every Chrome user should check their settings and confirm that the most recent version of this well-known browser is set up on their computers.

Apple updates fix security vulnerabilities

11 Apr 2023

A significant iOS security update from Apple has been released to address two zero-day flaws that are already being used in the wild. The most recent patches for iOS 16.4.1 and iPadOS 16.4.1 fix code execution vulnerabilities in IOSurfaceAccelerator and WebKit, indicating that a sophisticated attack chain targeting the newest iPhone models was discovered in the wild.

3CX desktop app faces supply chain attack

4 Apr 2023

According to experts from various cybersecurity firms, a threat actor is currently actively using a compromised desktop communications app from 3CX to target 3CX clients. The compromised app was infected by malicious code in a software supply chain attack. According to analysts from various security organizations, hackers working for the North Korean government launched a significant supply chain attack against 3CX customers running Windows and macOS. 3CX is a popular desktop client for audio and video chatting.

Twitter takes down leaked source code

28 Mar 2023

Apparently, the source code for Twitter was posted online. According to the lawsuit, the business took action on Friday to get the compromised code removed by sending a copyright infringement notification to GitHub, an online community for software professionals where the code was posted.

Ferrari Reveals Cyber Incident

21 Mar 2023

Following a ransom demand received after attackers obtained access to certain of the company’s IT systems, Ferrari has acknowledged a data breach.