Category: EN

Exposing Infection Techniques Across Supply Chains and Codebases

This entry delves into threat actors’ intricate methods to implant malicious payloads within seemingly legitimate applications and codebases. This article has been indexed from Trend Micro Research, News and Perspectives Read the original article: Exposing Infection Techniques Across Supply Chains……

ShellTorch Flaw Exposes Thousands of AI Servers to RCE Attacks

ShellTorch Serve is an open-source model-serving library developed by PyTorch that simplifies the deployment of machine learning models for inference in production environments.  It provides a scalable and efficient way to serve PyTorch models, making integrating them into applications and……

Exploitation of Critical WS_FTP Server Flaw Spotted in the Wild

As previously reported, Progress-owned WS_FTP was discovered with multiple vulnerabilities associated with cross-site scripting (XSS), SQL injection, cross-site request forgery, unauthenticated user enumeration, and a few others. Progress has warned their users about the WS_FTP vulnerabilities and released a security……

Soft skills continue to challenge the cybersecurity sector

New cybersecurity findings pinpoint areas where cybersecurity experts are lacking, with interpersonal skills, cloud computing, and security measures standing out as the most prominent skill deficiencies in cybersecurity specialists, according to a new ISACA report. 59 percent of cybersecurity leaders……

Patch iPhones, iPads, Apple urges

Apple today released emergency patches for a wide range of iPhones and iPads. Users should ensure their devices are running versions 17.0.3 of the operating systems. The update closes two vulnerabilities: — CVE-2023-42824, a hole in the kernel that could……