Password Manager Vulnerable to Master Password Compromise

A new KeePass vulnerability has recently been disclosed which makes it possible to recover the master password even when the program is closed. The vulnerability is CVE-2023-3278 and a simple proof of concept tool has been released that can be used to dump the master...

PyPI Struggling with High Volume of Malware

The Python Package Index, also known as PyPI, is struggling to deal with the high volume of malicious users and packages. As a result, the administrators of the index temporarily suspended new user registrations and project creations. The incident notice stated that...

Apple Releases Fixes for Three Zero Days

Apple has just released software updates for its Macs, iPhones, iPads, Apple Watch, Apple TV and Safari browsers. The updates for the iPhone, Macs and iPads contains fixes for three zero day vulnerabilities. These vulnerabilities allow for code execution and also for...

New Phishing Attacks Using New .zip Top Level Domain

Cybersecurity experts are raising concerns over Google’s new .ZIP and .MOV internet domains. The .ZIP domains are already been seen to be used in phishing attacks. Google release those top-level domains recently, which means that anyone can register .zip or .mov...

Secure WhatsApp Chat Using Password or Biometrics

WhatsApp is rolling out a new privacy feature which allows users to block others from accessing their most personal conversations. The feature is called Chat Lock and it creates a new folder that can be locked with a password or biometrics methods like fingerprint. It...

Financial Scams using QR Codes on the Rise

Scammers are getting more creative and using fraudulent QR codes to access victims’ bank accounts. A woman in Singapore reportedly lost $20,000 from her bank account after scanning a fraudulent QR code to do a survey outside of a bubble tea shop. The QR code was...