CYBERSECURITY BLOGS

Cybersecurity is just like a game of whack-a-mole, except the moles have PhDs in computer science and they never get tired! Introduction Today, we will talk about a severe security vulnerability discovered in ChatGPT. The vulnerability allowed an attacker to take over any user's account with a single click, giving them access to sensitive information and the ability to perform unauthorized actions. The discovery of this vulnerability is credited to Nagli , who identified the

Introduction On the latest Patch Tuesday, Microsoft released 83 security fixes , one of which is the "CVE-2023-23397" vulnerability that affects all versions of the Outlook desktop app on Windows systems. However, this vulnerability does not impact the Outlook web app (OWA) or Microsoft 365 since they do not support NTLM authentication. The attacker can obtain the user's credentials and escalate privileges with these NTLM hashes by leveraging this escalation of privilege iss

Unpacking CVE-2022-30190: An In-Depth Analysis of MS Office Follina RCE and it's mitigation