Cyber Defense Advisors

Month: October 2023

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

ESET Research reported the vulnerability to the Roundcube team on October 12

Cyber News, Cyber Threat Trends

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

ESET Research reported the vulnerability to the Roundcube team on October 12

Cyber News, Cyber Threat Trends

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

ESET Research reported the vulnerability to the Roundcube team on October 12

Cyber News, Cyber Threat Trends

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

ESET Research reported the vulnerability to the Roundcube team on October 12

Cyber News, Cyber Threat Trends

How it feels to be a victim of deepfake pornography

My Blonde GF: the experience of being deepfaked for pornography Watch this video on YouTube Helen Mort is an award-winning poet and author. She’s also an unwitting victim of deepfake pornography. She didn’t know until someone directed her towards sexually-explicit deepfake images on a porn site. Images which had her own face edited onto another […]

Cyber News
  • by
  • October 25, 2023

Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms

Critical security flaws have been disclosed in the Open Authorization (OAuth) implementation of popular online services such as Grammarly, Vidio, and Bukalapak, building upon previous shortcomings uncovered in Booking[.]com and Expo. The weaknesses, now addressed by the respective companies following responsible disclosure between February and April 2023, could have allowed malicious actors to

Cyber News, Cyber Threat Trends
  • by
  • October 25, 2023

Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

The threat actor known as Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023, to harvest email messages from victims’ accounts. “Winter Vivern has stepped up its operations by using a zero-day vulnerability in Roundcube,” ESET security researcher Matthieu Faou said in a new report published today. Previously, it was using […]

Cyber News, Cyber Threat Trends
  • by
  • October 25, 2023

AI’s Impact on Cybersecurity

In our inaugural episode, Michael “Siko” Sikorski, CTO and VP of Engineering and Threat Intelligence at Unit 42 answers that question and speaks to the profound influence of artificial intelligence in an interview with David Moulton, Director of thought leadership for Unit 42. What’s Sikorski’s critical concern? The pervasive integration of AI, particularly ChatGPT and […]

Cyber News, Cyber Threat Trends