22 Sep, 2024

Hackers use PHP exploit to backdoor Windows systems with new malware

Unknown attackers have deployed a newly discovered backdoor dubbed Msupedge on a university’s Windows systems in Taiwan, likely by exploiting a recently patched PHP remote code execution vulnerability (CVE-2024-4577). CVE-2024-4577 is a critical PHP-CGI argument injection flaw patched in June that impacts PHP installations running on Windows systems with PHP running in CGI mode. It allows unauthenticated attackers […]

2 mins read

New Windows updates break dual boot on some Linux systems

According to user reports following this month’s Patch Tuesday, the August 2024 Windows updates are breaking dual boot on Linux systems with Secure Boot enabled. This issue is caused by Microsoft’s decision to apply a Secure Boot Advanced Targeting (SBAT) update to block Linux boot loaders unpatched against the CVE-2022-2601 GRUB2 Secure Boot bypass vulnerability, which could […]

2 mins read

Realme 13 Pro+ 5G Review: Best Camera Phone in Its Segment?

The Realme 13 Pro+ 5G smartphone, will thrill photographers and style icons alike, but the barrage of bloatware in the device will irritate others While megapixels were once the currency used to evaluate a smartphone camera’s power, Realme believes that AI imaging will be the new metric that defines the quality of a smartphone camera and, by […]

10 mins read

US warns of Iranian hackers escalating influence operations

The U.S. government is warning of increased effort from Iran to influence upcoming elections through cyber operations targeting Presidential campaigns and the American public. In a joint statement from the Office of the Director of National Intelligence (ODNI), the FBI, and the Cybersecurity and Infrastructure Security Agency (CISA), the U.S. says that Iran carried out cyberattacks […]

2 mins read

Windows driver zero-day exploited by Lazarus hackers to install rootkit

The notorious North Korean Lazarus hacking group exploited a zero-day flaw in the Windows AFD.sys driver to elevate privileges and install the FUDModule rootkit on targeted systems. Microsoft fixed the flaw, tracked as CVE-2024-38193 during its August 2024 Patch Tuesday, along with seven other zero-day vulnerabilities. CVE-2024-38193 is a Bring Your Own Vulnerable Driver (BYOVD) vulnerability in the Windows Ancillary Function […]

3 mins read

Toyota confirms breach after stolen data leaks on hacking forum

Toyota confirmed that its network was breached after a threat actor leaked an archive of 240GB of data stolen from the company’s systems on a hacking forum. “We are aware of the situation. The issue is limited in scope and is not a system wide issue,” Toyota told GeekFeed when asked to validate the threat […]

2 mins read

CISA warns of Jenkins RCE bug exploited in ransomware attacks

​CISA has added a critical Jenkins vulnerability that can be exploited to gain remote code execution to its catalog of security bugs, warning that it’s actively exploited in attacks. Jenkins is a widely used open-source automation server that helps developers automate the process of building, testing, and deploying software through continuous integration (CI) and continuous delivery […]

2 mins read

Android 15 Update: When Is It Coming to Your Phone?

The early versions of Android 15 are already out, giving us a sneak peek at the exciting features and enhancements coming to our devices. However, it’s only the stable build that promises to unleash the full force of the next Android version. Google follows a three-step strategy for the Android OS release, and that applies […]

4 mins read

Wi-Fi vs Internet: What’s The Difference? [Beginner’s Guide]

Today, we’re breaking down Wi-Fi vs Internet! What’s the difference between these two often-conflated terms and what do those differences mean for you? How do these technologies even work? I’ll be giving you the definitive beginner’s guide to Wi-Fi vs Internet in this article, so let’s get into it! Wi-Fi vs Internet: What’s The Difference? So, […]

8 mins read

FlightAware configuration error leaked user data for years

Flight tracking platform FlightAware is asking some users to reset their account login passwords due to a data security incident that may have exposed personal information. The technology company is based in Houston, Texas and provides real-time as well as historical flight tracking data. FlightAware is considered the world’s largest flight-tracking platform with a network […]

2 mins read