Critical SAP Vulnerabilities Allow Hackers to Bypass Authentication & Compromise Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released its August 2024 security patch update, addressing 17 new vulnerabilities, including two critical flaws that could allow attackers to bypass authentication and fully compromise affected systems. The most severe vulnerability, CVE-2024-41730, affects SAP BusinessObjects Business Intelligence Platform …

New SSLoad Loader Malware Attacking Users to Infiltrate Login Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SSLoad is a complex malware loader that mainly intrudes into desired systems via phishing emails. Once inside, it performs reconnaissance, and then transfers the collected intelligence to its handlers. SSLoad later uses any available means to get past detection as …

CryptoCore, Sophisticated Cryptocurrency Scam Attacking Users To Drain Wallets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cryptocurrency scams have changed along with digital currencies and they now employ technological advancements like AI and deepfakes in their sophisticated frauds. The CryptoCore group is an example of these methods where celebrity images are used, major events are exploited, …

Beware of New Phishing Campaign that Impersonates Google Safety Centre

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign has emerged, impersonating the Google Safety Centre to deceive users. This campaign is tricking unsuspecting individuals into downloading a malicious file, posing as the widely used Google Authenticator app. This attack has significant implications, as it …

Ivanti Virtual Traffic Manager Flaw Let Hackers Create Rogue Admin Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ivanti Virtual Traffic Manager has been discovered with a critical vulnerability which was associated with authentication bypass. This vulnerability has been assigned with CVE-2024-7593 and the severity was given as 9.8 (Critical). However, Ivanti has patched this vulnerability and released …

Critical 0-Click RCE in Windows TCP/IP Stack Impacts All Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released an urgent security update to address a critical remote code execution vulnerability in the Windows TCP/IP stack. The flaw tracked as CVE-2024-38063, affects all supported Windows and Windows Server versions, including Server Core installations. CVE-2024-38063 is a …

Zoom Critical Vulnerabilities Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zoom Video Communications has disclosed several critical vulnerabilities affecting its Workplace Apps, SDKs, and Rooms Clients. These vulnerabilities, identified in multiple security bulletins, potentially allow attackers to escalate privileges on affected systems. The vulnerabilities highlight significant risks for users across …

Microsoft Patches 6 Zero-Days That Threat Actors Actively Exploiting

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released its August 2024 Patch Tuesday update to address 90 security vulnerabilities. The update includes fixes for six zero-day flaws actively exploited across various products and services, such as Windows, Office, Azure, Dynamics, and Edge. The high number …

Six 0-Days Lead Microsoft’s August 2024 Patch Push

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This month’s bundle of update joy from Redmond …

Operation Uncle Scam – AI-Powered Phishing Attack Steals Microsoft Dynamics 365 Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers at Perception Point have uncovered a sophisticated phishing campaign, dubbed “Uncle Scam.” In this AI-powered campaign, threat actors impersonate U.S. government agencies to send fraudulent tender invitations to numerous American enterprises. The attackers employ advanced techniques, including interactive …