Sandbreak – A Critical Remote Code Execution Bug Found in Widely Used vm2 JavaScript Sandbox

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the JavaScript sandbox library vm2, the cybersecurity analysts at Oxeye research team have recently found a severe RCE flaw dubbed, “Sandbreak.” Through the NPM package repository, the vm2 sandbox library achieves a total of 16 million downloads each month …

Toyota Data Breach – Over 300,000 Customer Details Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The world’s biggest car maker, Toyota Motor released an apology notice stating that nearly 300,000 customer details were leaked. The company said to the users who had signed up for the T-Connect smartphone app, which links to their vehicles. “The …

Microsoft Patch Tuesday, October 2022 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix at least 85 security holes in its Windows operating systems and related software, including a new zero-day vulnerability in all supported versions of Windows that is being actively exploited. However, noticeably absent from this …

Intel Confirms Alder Lake BIOS Source Code Leak

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The source code for the UEFI BIOS of Alder Lake CPUs emerged on the Web recently as a result of a leak, and it’s confirmed by Intel. In response to this leak, researchers have expressed serious concerns about cybersecurity. The …

Darkweb Market BidenCash Released Massive Dump of 1.2 Million Credit Cards for Free

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new advertisement dump from dark web carding shop BidenCash has been released. This dump includes a massive dump of more than 1.2 Million Credit Cards (1,221,551 credit cards). While this huge dump is available for download free of charge …

What You Need To Know About Penetration Testing as a Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There are two primary types of penetration testing: traditional penetration testing and penetration testing as a service. While both have their benefits, penetration testing as a service offers several advantages that make it the better choice for many businesses. In …

Wireshark 4.0.0 Released – What’s New!!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wireshark Team launched its new version of Wireshark 4.0.0 with new enhancements & updates for Protocol Support, Updated Capture File Support, and added new features for macOS packages and Windows installers. Wireshark is widely used all over the world as …

CSA Provides Common Vulnerability Exploited by China State-Sponsored Hackers – A Complete List

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The CISA has recently published a joint CSA with the NSA and the FBI about the top CVEs that are exploited by the threat actors since 2020 and the threat actors are Chinese state-sponsored. Chinese cyber threat actors are still …

Report: Big U.S. Banks Are Stiffing Account Takeover Victims

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released …

Meta Sues App Developers to Steal Over One Million WhatsApp Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, a number of Chinese companies have been sued by Meta because they have created and used “unofficial” WhatsApp Android apps that were developed without the consent of WhatsApp. It is estimated that the operators of these unofficial apps have …