CrowdStrike Details Incident Affected Millions of Windows Systems Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent preliminary Post-Incident Review (PIR), cybersecurity firm CrowdStrike provided a detailed account of the events that led to a massive global IT outage on July 19, 2024. The incident affected millions of Windows systems worldwide and was traced …

LiteSpeed Cache Plugin Flaw Let Attackers Inject Malicious Code, 5M+ Sites Impacted

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular LiteSpeed Cache plugin for WordPress has been found vulnerable to a Cross-Site Request Forgery (CSRF) attack, which could potentially impact over 5 million websites. The flaw, identified as CVE-2024-3246, was publicly disclosed on July 23, 2024, and has …

KnowBe4 Hired Fake North Korean IT Worker, Catches While Installing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security awareness and training provider KnowBe4 recently disclosed that it inadvertently hired a fake North Korean IT worker who attempted to install malware on a company-issued computer. The incident highlights the growing sophistication of cybercriminals and the challenges organizations face …

Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Leidos Holdings Inc., one of the largest IT services providers to the U.S. government, experienced a significant cybersecurity breach. Hackers leaked internal documents, raising concerns about the security of sensitive government data managed by third-party contractors. Leidos, known for its …

Phish-Friendly Domain Registry “.top” Put on Notice

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its …

Top Phishing Campaigns in July 2024: SharePoint Abuse, DeerStealer, and More

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July saw a new influx of phishing and malware campaigns. The analyst team at ANY.RUN sandbox is closely monitoring all developments in the threat landscape and sharing their analysis on X. Here are some of the campaigns they identified this …

IPFire Unveils New Feature to Protect Systems from SYN Flood Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IPFire, a well-known open-source firewall solution, has introduced a new feature to protect systems from SYN Flood attacks, enhancing cybersecurity defenses. This enhancement aims to mitigate the risks associated with one of the most common forms of Denial-of-Service (DoS) attacks, …

Hackers Abuse Cloudflare WARP To Hijack Cloud Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, it has been observed that several campaigns are using Cloudflare’s WARP service to target susceptible internet-facing services. The primary advantage of utilizing Cloudflare WARP for an attacker is probably the increased anonymity it provides and the decreased suspicion surrounding …

Wiz Rejects Google’s $23 Billion Deal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wiz, the $12 billion cloud security startup, has rejected a $23 billion acquisition offer from Google parent Alphabet. Fortune viewed an internal note that communicated the decision to the company’s 1,200 employees. “While we are flattered by offers we have …

Okta Browser Plugin Vulnerable To Reflected Cross-Site Scripting Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Okta Browser Plugin is available on multiple browsers like Edge, Chrome, Safari, and Firefox. Combining all these browsers, the plugin has over 5 million users. However, this plugin was discovered to have a Cross-site Scripting vulnerability that could allow threat …