Information Security

The Wireshark Foundation has released Wireshark version 4.4.4, addressing a significant vulnerability that risked denial-of-service (DoS) attacks through packet injection. This notable update remedies CVE-2025-1492, identified as a high-severity vulnerability within the Bundle Protocol and CBOR dissectors. Previously, these issues caused application crashes, infinite loops, and memory leaks when processing malicious network traffic. The vulnerability affected Wireshark versions 4.4.0 through

Protecting your home and business with surveillance cameras is a common practice, but the vulnerability of these systems to remote hacks raises serious concerns. Recently, Ubiquiti Networks issued an urgent security advisory regarding several critical vulnerabilities in its UniFi Protect camera ecosystem. These issues, including remote code execution (RCE), have exposed significant weaknesses that could allow hackers to gain unauthorized

In a sophisticated cyber-espionage campaign, Chinese state-sponsored hackers, known as Salt Typhoon, have been targeting US telecommunication providers. The hackers employed a custom tool named JumbledPath to clandestinely monitor network traffic and potentially exfiltrate sensitive data. This devious tactic has raised concerns about the security of American telecom networks, prompting an urgent need for robust countermeasures. The Role of JumbledPath

Cisco revealed that a sophisticated Chinese threat actor group known as Salt Typhoon successfully exploited the CVE-2018-0171 vulnerability. Through well-funded and meticulously planned efforts, the adversary infiltrated major U.S. telecommunications networks, maintaining access for over three years. This campaign not only underscores the persistence and capacity of advanced persistent threat (APT) groups but also demonstrates their ability to compromise numerous

In late 2024, the U.S. telecommunications infrastructure fell victim to an incredibly sophisticated and persistent cyberespionage campaign engineered by the state-aligned hacking group known as “Salt Typhoon.” Over three years of relentless attacks, Salt Typhoon utilized stolen credentials and a significant Cisco vulnerability (CVE-2018-0171) to infiltrate the network. Despite several layers of protection, they managed to maintain undetected access through