InfoSecBulletin Cybersecurity for mankind

Google on Friday joined the list of vendors dealing with zero-day attacks, rolling out a major Chrome Desktop update to fix a security defect that’s already been exploited in the wild. The high-severity vulnerability, tracked as CVE-2023-2033, is described as a type confusion in the Chrome V8 JavaScript engine. “Google is …

Video surveillance giant Hikvision this week informed customers that it has patched a critical vulnerability affecting its Hybrid SAN and cluster storage products. The vulnerability, tracked as CVE-2023-28808, has been described by the vendor as an access control issue that can be exploited to obtain administrator permissions by sending specially crafted messages …

The threat actor known as APT36 or Transparent Tribe has been observed targeting the education sector in India with malicious Office documents distributing Crimson RAT. The group has been active since at least 2013, but according to a new advisory by SentinelOne, it is now shifting from attacking Indian military and government personnel …