Hack Reports - Latest Cybersecurity News, Trends & Updates

Sign in Subscribe

Geetansh

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws - BleepingComputer

Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws - BleepingComputer

Microsoft January 2025 Patch Tuesday: Vulnerabilities, Fixes, and Updates Microsoft's January 2025 Patch Tuesday has addressed a significant number of vulnerabilities and introduced several important updates for Windows operating systems. Here are the key details: Vulnerabilities Addressed * Total Vulnerabilities: Microsoft fixed 159 vulnerabilities, including 10 classified as critical

Researchers warn of ‘mass exploitation’ of Fortinet FortiGate zero-day - Cyber Daily

Researchers warn of ‘mass exploitation’ of Fortinet FortiGate zero-day - Cyber Daily

Latest News on Fortinet Zero-Day Vulnerability Exploitation and FortiGate Firewall Security Breach Overview of the Vulnerability A critical zero-day vulnerability in Fortinet's FortiOS and FortiProxy has been identified and is being actively exploited by unknown threat actors. Here are the key details: * Vulnerability Identifier: The vulnerability is tracked

Google OAuth flaw lets attackers gain access to abandoned accounts

Google OAuth flaw lets attackers gain access to abandoned accounts

Google OAuth Security Flaw: Abandoned Account Access Vulnerability A critical vulnerability in Google's "Sign in with Google" authentication flow, discovered and reported in late 2024, has significant implications for data security, particularly affecting former employees of failed startups. The Vulnerability: Domain Ownership and OAuth Interaction The

US govt says North Korea stole over $659 million in crypto last year

US govt says North Korea stole over $659 million in crypto last year

Latest News on North Korea's Cryptocurrency Thefts As of January 2025, there has been a significant escalation in cryptocurrency thefts attributed to North Korean state-sponsored hackers, posing substantial threats to global financial stability and cybersecurity. Scope and Impact of the Thefts * North Korean-linked hackers, particularly the notorious Lazarus

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Google OAuth Vulnerability 2025: Domain Ownership and Data Breaches A critical vulnerability in Google's “Sign in with Google” authentication flow, utilizing OAuth, has been identified, posing significant risks to data security, particularly for individuals who have worked for startups that have failed. The Vulnerability: Domain Ownership Meets OAuth

Windows 11 KB5050009 & KB5050021 cumulative updates released

Windows 11 KB5050009 & KB5050021 cumulative updates released

Here is a detailed overview of the latest news and updates related to Windows 11, focusing on the recent updates KB5050021, cumulative updates, and the impact of Windows security updates. Windows 11 Update KB5050021 The latest patch Tuesday update for Windows 11, version 23H2, is KB5050021, released on January 14,

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

macOS CVE-2024-44243 Vulnerability Analysis A recent discovery by Microsoft's Threat Intelligence team has highlighted a significant security vulnerability in macOS, identified as CVE-2024-44243. Here is a detailed analysis of this vulnerability and its implications for macOS security. Vulnerability Overview CVE-2024-44243 is a medium-severity vulnerability (CVSS score: 5.5)