News and Articles

Organizations enhance their information security with Penetration Testing (Pen Testing) and Vulnerability Assessments (VAs). VAs identify and rank vulnerabilities, aiding in prioritizing remediation. VM goes beyond VAs, involving asset discovery, consistent scanning, patch management, and risk assessment. On the other hand, Pen Testing actively exploits vulnerabilities to assess potential damage. Netizen offers comprehensive security solutions including VAs, Pen Testing, compliance support, and automated assessment tools. ...

A data scraping service known as Spy Pet has sparked privacy concerns by selling extensive user data from Discord. With a claimed 600 million user database, Spy Pet offers user profiles and activity details for a minimal fee. Discord is actively investigating the matter. The incident emphasizes the need for clearer regulations protecting user privacy. ...

Telegram addressed a critical security issue in its Windows desktop app, debunking initial rumors of a zero-click flaw. After a typo in the code enabled Python scripts to run without warning, exploiters disguised them as videos. Telegram swiftly fixed the issue and plans to enhance security for future versions. ...

CVE-2024-31497 is a critical vulnerability in PuTTY SSH client versions 0.68 to 0.80, allowing recovery of a user's private key due to biased nonce generation. Attackers can exploit this, posing serious threats. Several applications are also affected. Users must upgrade, revoke vulnerable keys, and update dependent applications to mitigate the risk and prevent breaches. ...

Palo Alto Networks has released critical updates to fix a zero-day vulnerability (CVE-2024-3400) in its firewall operating system PAN-OS. The flaw allows unauthenticated attackers to gain root access through command injection in the GlobalProtect gateway/portal. Hotfixes are available, and customers are advised to apply mitigation measures. The U.S. CISA has also mandated actions to address the vulnerability. ...