A new high-severity vulnerability has been discovered in multiple Cisco products, which could potentially allow HTTP/2 Rapid Reset Attack. A new technique for launching distributed denial of service (DDoS) attacks has been discovered. It is identified as CVE-2023-44487 and has a high severity rating of 7.5. In addition, this vulnerability …
Read More »HTTP/2 Rapid Reset Attack
CIRT alert on CVEs
BD CIRT published CVE of f5, Apache, Juniper, Citrix and Atlassian
Bangladesh Government’s Computer Incident Response Team (BGD e-GOV CIRT) proactively releases critical threat intelligence information to ensure the security of Bangladesh’s cyberspace. Following this, CIRT has recently identified critical vulnerabilities for critical information infrastructure (CII). CIRT published cyber alert for critical information infrastructure (CII) on Thursday (23 November). The report …
Read More »Microsoft launches new bounty program with $20,000 rewards
Microsoft has launched a bug bounty program for the Microsoft Defender security platform. Rewards range from $500 to $20,000. Microsoft has the authority to decide how much money people will receive as a reward for finding and reporting vulnerabilities. The amount will depend on how serious the vulnerability is, how …
Read More »
Securelist report
Modern Asian APT groups’ tactics, techniques and procedures
Research is regularly published about Asian APT groups targeting organizations from different industries. These campaigns and incidents don’t only happen in one region. Research like this usually includes detailed information about the tools used by APT actors, the vulnerabilities they exploit, and sometimes even specific attribution. Despite the abundance of …
Read More »
Treasury Board of Canada Secretariat statment
Canadian government discloses data breach
The Canadian government reported that two contractors have been hacked, revealing sensitive information of an unknown number of government employees. Last month, there were security breaches that affected two companies: Brookfield Global Relocation Services (BGRS) and SIRVA Worldwide Relocation & Moving Services. These companies provide relocation services to Canadian government …
Read More »Cisco launched AI Readiness Index, Check it now!
The Cisco AI Readiness Index is based on a double-blind survey of 8,161 business leaders with responsibility for AI integration and deployment at organizations with 500 or more employees based across 30 markets globally. The Index uses six pillars, each with an individual weightage, to benchmark AI readiness – Strategy …
Read More »CSA Launches First Zero Trust Certification
CSA has introduced the CCZT, which is the industry’s first zero trust certification. CSA explained that the certification addresses the changing world of widespread technology and the shortcomings of outdated security approaches. Its goal is to provide security experts with the necessary knowledge to create and execute a zero trust …
Read More »
Change it now
your password can be cracked in seconds, if?
It is important to regularly update your passwords. Many people still use very simple passwords, which can be easily cracked by cybercriminals. According to NordPass research, some popular passwords can be cracked in less than a second. Research says that 31 percent of people worldwide still use common passwords like …
Read More »Why ChatGPT CEO fired from his job?
Sam Altman, the chief executive officer (CEO) of OpenAI has lost his job. The company said in a statement on Friday that Sam Altman was fired due to lack of confidence in his ability to manage the company. ChatGPT is a powerful machine learning model or machine learning through artificial …
Read More »
Microsoft pacthes November
Microsoft November 2023 Patch fixes 5 zero-days, 58 flaws
Microsoft Patch Tuesday security updates for November 2023 addressed 63 new vulnerabilities in Microsoft Windows and Windows Components; Exchange Server; Office and Office Components; ASP.NET and .NET Framework; Azure; Mariner; Microsoft Edge (Chromium-based), Visual Studio, and Windows Hyper-V. The IT giant has addressed vulnerabilities with different severity ratings. Three are …
Read More »