Another day, another zero-day attack hitting widely deployed software from a big tech provider. Google on Friday joined the list of vendors dealing with zero-day attacks, rolling out a major Chrome Desktop update to fix a security defect that’s already been exploited in the wild. The high-severity vulnerability, tracked as CVE-2023-2033, is described as a…
Microsoft is warning of a new Remcos remote access trojan (RAT) campaign that is targeting accounting, tax return preparation firms, and other professional services firms in the United States ahead of the 2023 Tax Day. The malicious tool, Remcos, was released in 2016 as a legitimate tool, but has since been used in numerous malicious…
OpenAI, the creator of the chatbot ChatGPT, has recently confirmed a data breach caused by a bug in an open source library, just as a cybersecurity firm noticed that a recently introduced component is affected by an actively exploited vulnerability. The bug, introduced by OpenAI on March 20, exposed user information in the form of…
The potential of artificial intelligence (AI) has been demonstrated in the form of ChatGPT, a chatbot created by US startup OpenAI. ChatGPT has the ability to answer difficult questions, write sonnets, code, and even pass exams. Unfortunately, criminals have taken note of this powerful tool and are planning to use it to commit fraud, spread…
Microsoft on Tuesday released a large batch of software security updates, including two previously exploited zero-days for Windows OS users. The first, CVE-2023-23397, is a critical-severity issue in Microsoft Outlook. Microsoft warned that an attacker could exploit this vulnerability by sending a specially crafted email which automatically triggers when it is retrieved, leading to a…
Software maker Adobe recently issued an urgent warning about a zero-day vulnerability in its Adobe ColdFusion web app development platform being exploited in-the-wild in “very limited attacks”. The company released patches for a whopping 106 vulnerabilities in a wide range of products, some serious enough to expose both Windows and macOS users to remote code…