0-Click Outlook Vulnerability Triggered RCE When Email is Opened – Technical Analysis

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Morphisec researchers have recently uncovered a critical vulnerability in Microsoft Outlook, identified as CVE-2024-30103. It can execute malicious code as soon as an email is opened. We will explore the technical aspects of CVE-2024-30103, examining how this vulnerability can be …

New Banshee MacOS Stealer Attacking Users to Steal Keychain Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

International authorities have successfully seized the servers associated with the notorious Dispossessor ransomware group. This operation marks a critical step in combating ransomware attacks that have plagued individuals, businesses, and institutions worldwide. According to the tweet from MonThreat, the takedown …

Zabbix Server Vulnerability Lets Attacker Execute Arbitrary Code Via Ping Script

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability, identified as CVE-2024-22116, has been patched in Zabbix, a popular monitoring solution. The vulnerability allowed an administrator with restricted permissions to execute arbitrary code via the Ping script in the Monitoring Hosts section, potentially compromising the …

Post-Exploitation Tactics Hackers Use After Compromising Ivanti, Fortigate VPN Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Akamai researchers have delved into the often-overlooked threat of VPN post-exploitation, highlighting techniques that threat actors can use to escalate their intrusion after compromising a VPN server. The study focuses on vulnerabilities and no-fix techniques affecting Ivanti Connect Secure and …

Beware Of Malicious Typosquat Package That Steals Your Secret Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often target the Solana Python API ecosystem to exploit vulnerabilities in decentralized applications, access private keys, or manipulate transactions on the Solana blockchain. Recently the Solana Python API ecosystem was targeted by a typosquatting attack (tagged as sonatype-2024-3214). The …

AMD Sinkclose Vulnerability Lets Attackers Most Privileged Portions Of a Computer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Sinkclose vulnerability, which has been detected in AMD processors for decades, lets hackers obtain access to some of the most privileged areas of a computer. It allows malware to infiltrate a computer’s memory so deeply that, in many situations, …

FBI Shuts Down Dispossessor Ransomware Operations, Domains Dismantled

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Law enforcement has been attacking cyber threat actors for quite some time now. The FBI has taken down several servers belonging to multiple threat actors to disrupt their malicious operations. However, the FBI announced the Shutdown of a Ransomware group …

CLFS Vulnerability Let Hackers Trigger BSOD Error On All Versions Of Windows 10 & 11

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered vulnerability in the Common Log File System (CLFS.sys) driver of Windows has been identified, potentially affecting millions of devices running Windows 10, Windows 11, and various Windows Server versions. Tracked as CVE-2024-6768, this vulnerability allows a malicious …

Hackers Posing as Security Service Compromised 100 Govt Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers masquerading as the Security Service of Ukraine have compromised over 100 government systems. The Computer Emergency Response Team of Ukraine (CERT-UA) at the State Service of Special Communications and Information Protection (SSSCIP) reported the incident on August 12, highlighting …

Elon Musk Reports Massive DDoS Attack on X Amid Trump Interview

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Elon Musk, who owns the social media platform X (which used to be called Twitter), said that the platform was hit by a massive Distributed Denial-of-Service (DDoS) attack. This happened at the same time as a planned live interview with …