Researchers Exploit Reflected Input with HTTP Range Header To Bypass Browser Restriction

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a technique that takes previously unexploitable reflected input vulnerabilities and turns them into fully functional attacks through clever use of HTTP Range headers. The findings highlight a new potential threat vector for web applications once considered …

WhatsApp Wins NSO Pegasus Spyware Hacking Case After 5-Year Legal Battle

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

After five years of contentious litigation, Meta Platforms Inc., the parent company of WhatsApp, emerged victorious in its lawsuit against NSO Group, the controversial Israeli firm behind the Pegasus spyware. The landmark decision, handed down by a federal court in …

McDonald’s Delivery App Vulnerability Let Anyone Place an Order for Just $0.01

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability was found in McDonald’s McDelivery, one of India’s top food delivery apps, allowing unlimited orders for just $0.01. The flaws were identified by a researcher who conducted a detailed investigation into the app, successfully uncovering a range …

Authorities Arrested LockBit Ransomware Developer & Team Core Member

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

U.S. authorities have unveiled charges against Rostislav Panev, a dual Russian-Israeli national, for his alleged role as a key developer of the notorious LockBit ransomware group. Panev, 51, was arrested in Israel in August and is currently awaiting extradition to …

Malicious Apps On Amazon Appstore Records Screen & Intercept OTP’s

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, researchers have discovered a relatively harmless app called “BMI CalculationVsn” on the Amazon App Store, masquerading as a normal health tool to steal data. This application performs malicious actions like screen recording, retrieving a list of all installed apps, …

NetWalker Ransomware Operator Sentenced For Hacking Hundreds Of Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Romanian man, Daniel Christian Hulea, 30, was sentenced to 20 years in prison for his role in the NetWalker ransomware attacks, a sophisticated cybercrime operation that targeted hundreds of organizations worldwide. The U.S. Department of Justice announced the sentencing, …

Hackers Selling Cracked Version of Acunetix Tool as Araneida Scanner

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors reportedly sell a cracked version of Acunetix, a powerful commercial web application vulnerability scanner, for malicious purposes. The cracked software, known as the “Araneida Scanner,” is being marketed as a cloud-based attack tool on various cybercrime forums and …

 Session Smart Routers With Default Passwords Hacked By Mirai Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Juniper Networks has issued an urgent advisory following reports of Mirai malware infections targeting Session Smart Routers (SSRs) left with default passwords. The campaign, first detected on December 11, exploited weak security practices to compromise devices and use them in …

Siemens UMC Vulnerability Let Remote Attacker Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw has been discovered in Siemens’ User Management Component (UMC), potentially exposing numerous industrial control systems to remote attacks. The vulnerability, identified as CVE-2024-49775, allows unauthenticated, remote attackers to execute arbitrary code on affected systems, posing a …

New “NotLockBit” Ransomware Attack Windows and macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated new ransomware family, dubbed NotLockBit, is creating waves in the cybersecurity world with its advanced capabilities and cross-platform functionality. Mimicking the techniques of the infamous LockBit ransomware, NotLockBit has proven to be a formidable new threat, targeting both …