This month, Samsung has fixed multiple high severity vulnerabilities across multiple Samsung apps including Samsung Email. By exploiting this vulnerability (CVE-2021-25375), a remote attacker could access email attachments from your Samsung Email app.... Read More
Ax Sharma
Ax Sharma is a Security Researcher, Engineer, and Tech Columnist. His works and expert analyses have frequently been featured by leading media outlets like Fortune, BleepingComputer, The Register, TechRepublic, CIO, etc.
Ax's expertise lies in vulnerability research, reverse engineering, software development, and web app security. He's an active community member of the OWASP Foundation and the British Association of Journalists (BAJ).
News tips welcome via Twitter DM (@Ax_Sharma) or email (ax@hey.ax).
For quite some weeks now Internet Archive's Wayback Machine has been acting buggy. Here's what you can do.... Read More
A few hours ago reports of Oracle Cloud services going down surfaced on the internet. The outage that appears to have lasted about two hours,... Read More
The Git project has released patches for a severe remote code execution (RCE) vulnerability, CVE-2021-21300 that can be exploited by attackers when their malicious repos are cloned.... Read More
WooCommerce fixes critical Upload Files vulnerability
A critical vulnerability CVE-2021-24171 in WooCommerce Upload Files plugin can be exploited through multiple routes like double extension and path traversal attacks.... Read More
A gray hat hacker has published over 7,000 dependency confusion packages to npm and PyPI repositories, and continues to post thousands more, in real time.... Read More
ThyssenKrupp suffers ransomware attack for the third time
ThyssenKrupp has again been hit by a cyber attack from the NetWalker ransomware group, after previously having been stricken by two other ransomware groups.... Read More
Hacker claims to sell 1.3 million Hyundai Russia customer records
Hacker claims to sell 1.3 million records of Hyundai Russia customers on hacker forum... Read More
Data of 500,000 Betway gambling customers being allegedly sold on hacker forum
A hacker is allegedly selling data of 500,000 Betway UK customers, with 10,000 records leaked at almost no cost. The data can be abused in sophisticated spear-phishing attacks to target online gambling players.... Read More
PoC exploits for Apache Flink Path Traversal vulnerabilities posted
This week Apache Flink has disclosed 2 path traversal vulnerabilities CVE-2020-17518 and CVE-2020-17519. Hackers have already posted Proof-of-Concept (PoC) exploits for these bugs.... Read More
Theme park giant Parques Reunidos hit by a ransomware cyber attack 
Phishing kit screenshots your email domain on the fly to appear real 
Royal Mail online tracking returns — with a frustrating captcha that works half the time 
New convincing phishing campaign targets Booking.com and Blockchain.com customers