QNAP PATCHES HIGH-SEVERITY FLAWS IN QTS, VIDEO STATION, QUMAGIE, NETATALK PRODUCTS 📗 Date: 08 Jan, 2024Source: Security Week Taiwan-based QNAP Systems on Friday announced patches for a dozen vulnerabilities across its product portfolio, including high-severity flaws in its operating system. The first of the high-severity issues is CVE-2023-39296, which is described as a prototype pollution […]
MALWARE USING GOOGLE MULTILOGIN EXPLOIT TO MAINTAIN ACCESS DESPITE PASSWORD RESET 📗 Date: 04 Jan, 2024Source: The Hacker News Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset. According to CloudSEK, the critical
TERRAPIN ATTACK ALLOWS TO DOWNGRADE SSH PROTOCOL SECURITY 📗 Date: 03 Jan, 2024Source: Security Affairs Researchers discovered an SSH vulnerability, called Terrapin, that could allow an attacker to downgrade the connection’s security. Security researchers from Ruhr University Bochum (Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk) discovered a vulnerability, called Terrapin (CVE-2023-48795, CVSS score 5.9), in the
ALERTS – TERRAPIN ATTACK ALLOWS TO DOWNGRADE SSH PROTOCOL SECURITY Read More »
