Sav-Rx Discloses Data Breach: 2.8 Million Users Affected

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sav-Rx, a healthcare company based in Fremont, Nebraska, has disclosed a major data breach affecting over 2.8 million individuals, including 5,935 Maine residents. The company, which operates under the legal name A&A Services, discovered the breach on April 30, 2024. …

Hackers Exploiting Arc Browser Popularity with Malicious Google Search Ads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Chrome has been the dominant web browser for years now, which is why it may come as a surprise to hear of a startup, not even based in Silicon Valley, called The Browser Company, offering a new take on …

Notorious Data Leak Site Breachforums is back From the Seizure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a surprising turn of events, the infamous data leak site Breachforums has resurfaced after being seized by authorities. According to the recent tweet from Dark Web Informer, the news has sent shockwaves through the cybersecurity community and raised concerns …

Internet Archive is Under DDoS Attack For Several Hours

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Internet Archive, a renowned non-profit digital library dedicated to preserving web content, experienced a significant Distributed Denial of Service (DDoS) attack on May 27, 2024. This incident made most of its services temporarily unavailable, but the data was not …

Hackers Attacking Check Point Remote Access VPN Devices to Breach Enterprise Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Check Point Software Technologies recently issued an advisory regarding an ongoing campaign by threat actors to breach enterprise networks by targeting Remote Access VPN devices. This development underscores the growing interest of malicious groups in exploiting remote-access VPN environments as …

Hackers use the Greatness PaaS tool to Steal Microsoft 365 login credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Phishing-as-a-Service (PaaS) tool called Greatness is being used by cybercriminals to steal Microsoft 365 login credentials. First detected in 2022, Greatness allows attackers to bypass security measures and has been continuously updated with evasion tactics.  As a result …

Threats Actors Delivering Remcos RAT Distributed as UUE (Uuencoding) File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AhnLab Security Intelligence Center (ASEC) has confirmed the accuracy of the Remcos RAT malware being distributed through UUE (UUEncoding) files compressed with Power Archiver. This sophisticated method of malware distribution has been observed in phishing emails disguised as export/import shipment-related …

Hackers Advertising of Pulse Connect Secure VPN RCE 0-Day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts have identified a critical zero-day vulnerability in Pulse Connect Secure VPN, a widely used virtual private network solution. The vulnerability, which allows for remote code execution (RCE), has been actively exploited by hackers, raising significant concerns among organizations …

LangChain JS Framework Vulnerability Let Hackers Read Arbitrary File on Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher uncovered a high-risk vulnerability in the popular LangChain JS framework that could allow attackers to read arbitrary files on servers running applications built with the framework. LangChain, an open-source project designed to assist developers in building applications …

Google Shares Details on Accidental File Deletion that Impacts Pension Fund’s Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent blog post, Google Cloud has shared details about an incident that impacted one of its Australian customers, UniSuper, a pension fund. The incident involved accidentally deleting the customer’s Google Cloud VMware Engine (GCVE) Private Cloud due to …