Google Claims That Only 1% of Installs From Chrome Store Has Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In 2024, Google reported that less than 1% of Chrome Web Store installations contained malware.  Extensions are small software programs that enhance your browser experience. They let users customize the behavior and functionality of Chrome to suit their own requirements …

Levi’s Data Breach: 72,000+ Customers’ Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Levi Strauss & Co., a renowned American clothing company, has disclosed a significant data breach affecting over 72,000 customers. The breach occurred on June 13, 2024, and was discovered on the same day. The compromised data includes personal identifiers such …

Apple Vision Pro Flaw Let Attackers Fill Your Room with Hundreds of Spiders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts have discovered a critical flaw in Apple’s latest augmented reality (AR) headset, the Apple Vision Pro. This vulnerability allows malicious actors to exploit the device and project hundreds of virtual spiders into the user’s environment, causing panic and …

New Android Rafel RAT Takes Complete Control Of Your Android Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android has many features and access to apps but is prone to security risks due to its open-source nature. Android malware, viruses, Trojans, ransomware, spyware, and adware programs threaten the data privacy and integrity of users. These threats exploit different …

ESET Security Products for Windows Vulnerable to Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ESET, a leading cybersecurity company, recently addressed a local privilege escalation vulnerability in its Windows security products. The Zero Day Initiative (ZDI) reported the vulnerability to ESET. It could have allowed attackers to misuse ESET’s file operations during a restore …

Zyxel NAS Devices Under Attack: Mirai-Like Botnet Exploiting CVE-2024-29973

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new vulnerability, CVE-2024-29973, has been discovered in Zyxel NAS devices, exposing them to attacks from a Mirai-like botnet. This vulnerability, a Python code injection flaw, has raised significant concerns among cybersecurity experts and users alike. According to the Outpost24 …

New North Korean Hackers Attack Aerospace and Defense Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a sophisticated new malware campaign likely linked to North Korean hackers, targeting aerospace and defense companies with a previously undocumented backdoor. Researchers have dubbed the campaign “Niki.” It uses job description lures to deliver a multi-stage …

Microsoft Unveils Playbook to Defend AD & Entra Against Notorious Octo Tempest Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Octo Tempest is a financially motivated cybercrime group that leverages social engineering and identity compromise to gain initial access to an environment. It exploits weaknesses in identity systems to steal data and deploy ransomware.  This group is particularly dangerous because …

15 Best Enterprise Risk Management Tools 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Enterprise Risk Management (ERM) tools help organizations identify, assess, manage, and monitor risks across their operations. These tools provide a structured framework for integrating risk management into strategic planning, ensuring that potential threats and opportunities are systematically addressed. By offering …

UEFIcanhazbufferoverflow Flaw In Intel Processors Impacts 100s PC And Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Phoenix SecureCore UEFI firmware has discovered a new vulnerability, which runs on several Intel Core Desktop and mobile processors. This vulnerability has been assigned CVE-2024-0762, and its severity has been given as 7.5 (High). This was initially identified on …