March, 2024

• 26 March

  Checkmarx blog post
  170K+ Python Developers GitHub Accounts Hacked

  

  The Checkmarx Research team found out that hackers attacked the software supply chain and managed to breach the Top.gg GitHub organization, which has over 170,000 users, and also targeted individual developers. These hackers took over accounts by stealing browser cookies, added bad code with verified commits, created a fake Python …

  Read More »
• 26 March

  ChatGPT is down worldwide: OpenAI fixed issues

  

  Many users around the world are experiencing issues with OpenAI’s ChatGPT, such as not being able to log in, missing chat histories, and chat screens that won’t load correctly. Sometimes when you open ChatGPT, you might get a blank screen that just says “How can I help you today?” without …

  Read More »
• 26 March

  “Tycoon 2FA”: MFA-bypassing phishing kit targets Microsoft 365

  

  In October 2023, Sekoia analysts discovered a new Adversary-in-The-Middle (AiTM) phishing kit used by several hackers for widespread attacks. This kit is linked to the Tycoon 2FA Phishing-as-a-Service (PhaaS) platform, active since at least August 2023. The Sekoia Threat Detection & Research (TDR) team analyzed the Tycoon 2FA PhaaS kit …

  Read More »
• 25 March

  Unpatched PHP Deserialization Vulnerability in Artica Proxy

  

  SonicWall Capture Labs found a vulnerability with the Artica Proxy appliance. This vulnerability affects over 100K servers globally. Artica Proxy is a proxy solution that performs tasks like web filtering, SSL inspection, and bandwidth management. SonicWall has developed measures to mitigate the vulnerability. There is a security vulnerability called CVE-2024-2054 …

  Read More »
• 24 March

  How Henry Discovered Google’s Vulnerability and got recognition

  

  The writing is first published to medium where Henry N. Caga wrote about how he find out Google’s vulnerability and achieved hall of fame recognition. Henry N. Caga wrote I stumbled upon a discovery that sent shockwaves through my system: an XSS (Cross-Site Scripting) vulnerability lurking within one of Google’s …

  Read More »
• 24 March

  Microsoft to limit access 50 cloud services for Russia: TASS

  

  Microsoft to restrict access to 50 of its cloud products in Russia, as reported by the Russian company Softline. The restrictions will also affect local software, with the deactivation of license keys. Russian media TASS reported the list primarily includes corporate applications such as those for business management, accounting, automation, …

  Read More »
• 23 March

  Microsoft releases emergency fix for Windows Server crashes

  

  Microsoft released urgent updates to fix a problem causing Windows domain controllers to crash after installing the March 2024 Windows Server security updates. Microsoft released the following emergency Windows Server cumulative updates that should fix the LSASS memory leak and prevent impacted servers from crashing and restarting: KB5037422 (Windows Server …

  Read More »
• 23 March

  Unit42 report
  StrelaStealer Hit Over 100 Organizations in E.U. and U.S.

  

  StrelaStealer malware steals email login data from popular email clients and sends it to the attacker’s server. The attacker can then use this information to launch more attacks. Since its first appearance in 2022, the threat actor has carried out many email campaigns and shows no sign of stopping. Unit42 …

  Read More »
• 23 March

  29 0-days Uncovered : Hackers Earned $1,132,500 at Pwn2Own

  

  Pwn2Own Vancouver 2024 hacking competition is over. Hackers earned $1,132,500 for showing 29 unique zero-days. Participants in the Pwn2Own Vancouver 2024 hacking competition earned $1,132,500 for demonstrating 29 unique zero-days. On the first day, Team Synacktiv successfully demonstrated exploits against a Tesla car. The researcher Manfred Paul (@_manfp) won the …

  Read More »
• 22 March

  Investigation committee formed
  Justin Trudeau’s birth place Pabna, Bangladesh; Birth certificate issued

  

  Justin Trudeau is the current Prime Minister of Canada but according to a recently issued birth certificate his birth place is in Pabna. Surprising but true ‍such an birth certificate has been issued by Ahmedpur Union Parishad in Pabna. As shown in the birth certificate, name is Justin Trudeau, father- …

  Read More »