In an alarming turn of events, Microsoft has recently faced a serious security breach, resulting in the compromise of Microsoft Account (MSA) keys. As an essential aspect of user authentication and data protection, the theft of MSA keys poses a significant threat to millions of users worldwide. In this blog, we will delve into the …
Hacking Alert: Microsoft MSA Key Compromised – Protecting Your Data Read More »
A serious security flaw has been discovered in the open-source WooCommerce Payments plugin for WordPress, which could allow attackers to pretend to be any user on the website and potentially take control of site administrator accounts. The WooCommerce Payments plugin, developed by Automattic, is used by over 500,000 websites and provides a payment solution for …
Fortinet patches critical FortiGate vulnerability that can be exploited by an unauthenticated attacker for remote code execution, according to the researchers who reported the flaw to the vendor. Today, Fortinet published a CVSS Critical PSIRT Advisory (FG-IR-23-097 / CVE-2023-27997) along with several other SSL-VPN related fixes. This blog adds context to that advisory, providing our customers with …
Fortinet Patches Critical FortiGate SSL VPN Vulnerability Read More »
Chinese hackers have been discovered engaging in cyberespionage activities, raising concerns due to the potential impact on future conflicts between China and Taiwan. Microsoft, which named the campaign “Volt Typhoon,” described it as a stealthy and targeted operation focused on gaining unauthorized access to credentials and identifying network systems. In a note documenting the Advanced …