Thousands of Unpatched Citrix Servers Vulnerable to Critical Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critically important security vulnerabilities that Citrix fixed in recent months, still remain vulnerable on thousands of Citrix gateways and ADCs (Citrix Application Delivery Controller) used across the enterprise. Here are the two security flaws that have been identified:- CVE-2022-27510 …

BlueNoroff APT Hackers Using New Technique to Evade Windows MotW Flag Warning

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

One of the sub-clusters of the notorious Lazarus Group, BlueNoroff, has been observed by the researchers at Kaspersky to be turning to new techniques in order to bypass the protections that are put into place by the Windows MotW in …

Facebook to Pay $725 Million to Resolve Cambridge Analytica Scandal Case

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There was a class-action lawsuit filed against Facebook which is owned by Meta Platforms Inc claiming the social media network had intentionally facilitated the access of user information, including the data of Cambridge Analytica, to third parties.  However, Meta Platforms …

Top 10 Best IoT Security Tools – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IoT security tools are used to protect IoT devices from cyber Attacks. Any physical device that can connect to the internet falls under the definition of an IoT device. Everything from small household cookware to sophisticated industrial tools is IoT …

Linux Kernel Use-After-Free RCE Vulnerability Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An emergency security patch was released by Linux recently to fix a kernel-level security critical severity vulnerability.  This vulnerability has achieved a CVSS Score of 10.00, and the vulnerability affects SMB servers that have KSMBD enabled. In the kernel space …

SSL Stats: Why is an SSL Certificate So Important for Your Website?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SSL certificates are no longer considered a necessity only for large companies. Every website, big or small across industries, needs SSL protection today. SSL stats will tell you how SSL adoption has become almost universal.  As per SSL stats, 231 …

France Fined Microsoft Over 60 Million Euros for Using Advertisement Cookies Without Consent

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The French privacy regulator announced on Thursday that it had penalized Microsoft, a major US technology company, 60 million euros ($64 million) for forcing advertising cookies on customers. The National Commission for Technology and Freedoms (CNIL), which levied the biggest …

Most Important Python Security Tools for Ethical Hackers & Penetration Testers 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There are a variety of Python security tools are using in the cybersecurity industries and python is one of the widely used programming languages to develop penetration testing tools. For anyone who is involved in vulnerability research, reverse engineering or …

Vice Ransomware Group Uses Custom Ransomware with New Encryption Algorithms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity analysts at SentinelOne security firm have recently identified that the Vice Society ransomware gang has switched to custom ransomware which is dubbed “PolyVice.”  There are two algorithms that are used by this custom ransomware in order to implement a …

Critical Flaw in Passwordstate Enterprise Password Manager Let Attacker Obtain a User’s Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Vulnerability Critical Flaw in Passwordstate Enterprise Password Manager Let Attacker Obtain a User’s Passwords By Guru – December 26, 2022 An unauthenticated remote attacker could exploit multiple high-severity vulnerabilities detected in Passwordstate, an online password management solution, to obtain plaintext …