enovate

A popular password manager, LastPass, has recently fixed a bug that could have enabled malicious websites to steal users’ passwords or even execute arbitrary code on their computers. The bug was first discovered by Tavis Ormandy, a security researcher from Google’s Project Zero. Ormandy found that the vulnerability existed in the Google Chrome and Firefox extensions for the password manager.

A database that belongs to “NextMotion” has been breached, with around 2.3 million sets of patient before and after photos compromised. NextMotion is a French plastic surgery web application firm that enables medical practitioners to enhance patient experience by allowing them to see what they would look like after cosmetic procedures. The database leak has put confidential information about countless individuals at risk, including pictures that portray people’s faces, breasts, and genitalia. 

According to a recent report, a new botnet is spreading cryptomining malware and has already infected over 20,000 Linux machines. Dubbed “Lucky,” this botnet primarily targets IoT (Internet of Things) devices and Linux servers. Researchers say the botnet uses a method called “brute-force” to gain access to vulnerable devices, which means it tries numerous combinations

A critical remote code execution flaw impacting various Cisco switches has been discovered and fixed. The zero-day found resides in the Cisco IOS embedded packet manager daemon, which provides support for features such as quality of service, access control lists, and routing protocols. According to researchers, the flaw allows an attacker to execute code on

In an announcement made on May 5th, the US Department of Justice described its successful operation on the DarkSide, a hacking group responsible for the Colonial Pipeline attack. The seizure, apparently the first of its kind, resulted in the recovery of 63.7 bitcoins, valued at around $2.3 million, that represents Colonial Pipeline’s ransom payment to