Vulnerabilities in Qualcomm’s Adreno GPU Chipsets Affect Billions of Android Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google researchers have identified critical security vulnerabilities within Qualcomm’s Adreno GPU, potentially affecting billions of Android devices globally. If exploited, these vulnerabilities could lead to unauthorized access and control over affected devices, posing a substantial risk to users’ data and …

IBM Aspera Shares Vulnerability Let Attackers Login as Any User

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IBM has disclosed a vulnerability in its Aspera Shares software, CVE-2023-38018. This flaw in user session handling could potentially allow attackers to impersonate any user within the system, posing a substantial security risk for organizations relying on this software for …

Critical OpenSSH Vulnerability in FreeBSD Let’s Attackers Gain Root Access Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has been discovered in OpenSSH implementations on FreeBSD systems, potentially allowing attackers to execute remote code without authentication. The vulnerability, identified as CVE-2024-7589, affects all supported versions of FreeBSD. The issue stems from a signal handler …

Best Active Directory Monitoring Tools – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Monitoring an Active Directory (AD) involves tracking and analyzing business AD events and activity. Windows-based systems store and manage network resources, user accounts, groups, and security rules in Active Directory. Monitoring supports AD’s availability, security, and proper operation. Active Directory …

Critical OpenVPN Vulnerabilities Expose Millions of Devices to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft researchers have recently uncovered multiple medium-severity vulnerabilities in OpenVPN, a widely used open-source VPN software. OpenVPN is used by thousands of companies across various industries, including information technology, financial services, telecommunications, and computer software, on major platforms such as …

Microsoft Office Spoofing Vulnerability Let Attackers Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has disclosed a significant security vulnerability in its Office suite, identified as CVE-2024-38200, which could potentially allow attackers to access sensitive information. This spoofing vulnerability affects multiple versions of Microsoft Office, including Office 2016, Office 2019, Office LTSC 2021, …

Open Source Firewall pfsense Vulnerable to Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A popular open-source firewall software pfSense vulnerability has been identified, allowing for remote code execution (RCE) attacks. The vulnerability, tracked as CVE-2022-31814, highlights potential risks in pfSense installations, particularly those using the pfBlockerNG package. pfSense is a widely used, FreeBSD-based …

Thousands Of Internet-Connected ICS Devices Exposes Critical Infrastructure To Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In November 2023, hackers from Iran hacked the Municipal Water Authority of Aliquippa, Pennsylvania. They targeted a vulnerable control system and damaged it with anti-Israel statements. Two months later, in January 2024, Russians attacked Muleshoe and Abernathy water facilities, causing …

Series Of Solar Power System Vulnerabilities Impacts Millions Of Installations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The giant global electricity network intercrosses the fast-growing solar power infrastructure and ubiquitous Internet of Things, making a complex point of energy and data. This intersection relies on vulnerable inverters and controllers—key elements that may be vulnerable spots as per …

Threat Actors Hijacking Websites To Deliver .NET-Based Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Clearlake is a cyber threat operation that distributes fake antivirus software to make users perceive their system as infected. Sometimes, malicious software can be designed to ask for payment to remove it, or it installs more malware that steals sensitive …