WordPress Security : XSS Remains as the Most Vulnerability Exploited

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Of all the security flaws discovered in the WordPress ecosystem, cross-site scripting (XSS) vulnerabilities accounted for about 53.3% of the total. As of last year, XSS accounted for 27% of all security vulnerabilities, a significantly higher rate than in 2022. …

Microsoft Unveils Copilot First-ever AI Security Product for General Use

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has officially launched Copilot for Security, marking the advent of the first generative AI security product designed for widespread application. This innovative tool empowers security and IT teams, enabling them to protect their digital assets with the speed and …

Phishing-as-a-Service Platform Launched 20,000 Phishing Domains To Attack 100+ Countries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape faces a new threat with the emergence of ‘darcula,’ a Phishing-as-a-Service (PhaaS) platform. This sophisticated service enables cybercriminals to launch phishing campaigns across over 20,000 domains, using advanced techniques to target over 100 countries. Unlike traditional phishing …

Octopus Server Flaw Let Attackers Escalate Privilege

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Octopus Server, a popular automation tool for deployment, operations runbooks, and development tasks, has identified a critical security flaw. The vulnerability tracked as CVE-2024-2975 could allow attackers to escalate privileges due to a race condition in the software. Summary of …

xz-utils Backdoor Found in Kali Linux Installations – Check for Malware Infection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A backdoor was recently discovered in the xz-utils package versions 5.6.0 to 5.6.1, shocking the Linux community. This poses a significant threat to the security of Linux distributions, including Kali Linux. The vulnerability, CVE-2024-3094, could potentially allow malicious actors to …

OWASP Data Breach Due to Wiki Web Server Misconfiguration

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Open Web Application Security Project (OWASP) Foundation disclosed a significant data breach. The breach, which was discovered in late February 2024, was caused by a misconfiguration of the foundation’s old Wiki web server. This incident has led to the …

Hackers Exploit Google Ads Tracking Feature To Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Ads is a big platform with a wide user base, which makes it attractive to threat actors who want to reach many targets at once. These malicious ads can also be created or legitimate ones hijacked to spread malware, …

Vultur Android Malware mimic As McAfee Security App To Attacks Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Vultur, Android banking malware, has been observed incorporating new technical features, which allow the malware operator to remotely communicate with the victim’s mobile device. Additionally, Vultur has begun disguising more of its harmful behavior by encrypting its C2 communication, employing …

Gmail Turns 20! Evolves Constantly with Security Rules

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As Gmail celebrates its 20th anniversary, it’s an opportune moment to reflect on its journey from a simple email service to a cornerstone of digital communication, emphasizing its evolution, security enhancements, user base growth, and innovative features. Gmail was Launched …

Linux Kernel Flaw Let Attackers Gain Full Root Access: PoC Published

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a critical vulnerability in the Linux kernel’s io_uring subsystem, which could allow attackers to gain full root access to affected systems. The flaw, tracked as CVE-2024-0582, was found to be particularly exploitable in Ubuntu distributions due to a …