Windows 0-Day Flaw Exploited by Lazarus to Gain Unauthorized Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers at Avast have uncovered evidence that the notorious North Korean hacker group Lazarus exploited a previously unknown zero-day vulnerability in the Windows AFD.sys driver to gain kernel-level access to targeted systems. The flaw tracked as CVE-2024-38193, was reported to …

Why Training is Critical to Implementing Cisco HyperShield

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The imminent release of Cisco HyperShield this month marks a pivotal evolution in the cybersecurity landscape. As an “AI-native” security architecture, HyperShield promises to redefine traditional security protocols through its automated proactive cybersecurity measures and AI-driven security solutions. However, the …

Critical Android Vulnerability Impacting Millions of Pixel Devices Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An Android package, “Showcase.apk,” preinstalled on a significant portion of Pixel devices since 2017, possesses extensive system permissions enabling remote code execution and package installation.  It fetches a configuration file via unsecured HTTP from a single US-based AWS domain, rendering …

Microsoft Announced Multifactor Authentication is Mandatory for Azure Sign-Ins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced a significant security enhancement for its Azure platform: starting in 2024, all Azure sign-in attempts will require multifactor authentication (MFA). This move underscores Microsoft’s commitment to providing its customers the highest level of security. The MFA requirement …

US DOJ Considers Breakingup Google Following Antitrust Case

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Department of Justice (DOJ) is contemplating a historic move to break up Alphabet Inc.’s Google following a significant antitrust ruling. This development marks one of the most aggressive antitrust actions since the attempted breakup of Microsoft two decades …

Kubernetes Vulnerability Exposes Clusters to Command Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently discovered vulnerability in Kubernetes has raised significant concerns within the cybersecurity community. Akamai researcher Tomer Peled identified a design flaw in Kubernetes’ sidecar project, git-sync, which could allow attackers to execute command injection attacks. This vulnerability affects default …

Zimbra XSS Flaw Allows Hackers to Execute Malicious JavaScript Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw has been discovered in the Zimbra Collaboration Suite (ZCS), potentially allowing hackers to execute malicious JavaScript code. This cross-site scripting (XSS) flaw, identified as CVE-2024-33533, has been found in the Zimbra webmail admin interface. The vulnerability …

NationalPublicData.com Hack Exposes a Nation’s Data

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A great many readers this month reported receiving alerts that their Social Security Number, name, address and other personal information were exposed in a breach at a little-known but aptly-named consumer data broker called NationalPublicData.com. This post examines what we …

Cyber Alert! Small Businesses Should Enhance Their Cyber Defenses – NCSC Guide (PDF)

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent revelation, law enforcement figures have highlighted a concerning rise in cyber attacks targeting small businesses. The City of London Police reported 1,227 incidents in 2022, which experts believe represents only a fraction of the true scale of …

Brain Cipher Ransomware Analysis & Detection with Cynet’s All-in-One Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On June 20, 2024, government services were knocked offline as a cyberattack rocked the Indonesian National Data Center. Investigators would attribute the outage to a new hacker group infecting targets with a novel ransomware variant: Brain Cipher. A variant of …