U.S. and UK Impose Sanctions on APT 31 Chinese Hackers for Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move to counter cyber threats, the United States and the United Kingdom have imposed sanctions on a group of China-linked hackers accused of targeting critical infrastructure in the U.S. The coordinated action includes indictments, sanctions, and a …

Best Practices for Email Security Headers – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Email hacking and fraud have become common these days. Cybercriminals can easily break into and take control of mail accounts if they are not protected. They can do so through phishing attacks, vulnerable apps, and data breaches. Globally, people send …

2 Firefox Zero-Days Exploited At Pwn2Own : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mozilla addresses two zero-day vulnerabilities that were recently exploited at the Pwn2Own Vancouver 2024 hacking contest in the Firefox web browser.  The Pwn2Own Vancouver 2024 hacking competition was held this week, and Trend Micro’s Zero Day Initiative (ZDI) revealed that …

Critical OpenVPN Flaw Let Attackers Escalate Privilege

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenVPN has released their new version 2.6.10 in which there have been several bug fixes and improvements specifically to the Windows Platform of the VPN application. Four vulnerabilities were also fixed as part of this update. One of these four …

Threat Actor Claims to Have 600,000 Passenger Data of Kuwait Airways

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor has claimed responsibility for a massive data breach affecting Kuwait Airways. According to the hacker’s statement on a popular social media platform, the breach has compromised the personal information of over 600,000 passengers. The breach, described by …

Beware of Ramadan & Eid Fitr Online Scams that Steal your Financial Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As the holy month of Ramadan approaches, bringing a surge in online shopping and charitable giving, cybercriminals are ramping up their efforts to exploit the festive spirit. A recent study by Security has highlighted an increase in fraudulent activities targeting …

Hackers Transform Raspberry Pi Into A Hacking Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GEOBOX is specialized software designed for Raspberry Pi devices that have been observed on the Dark Web being marketed as the next major development in fraud and anonymity technologies.  Cybercriminals have managed to turn the popular geek-favorite device into a …

MobSF Pen-Testing Tool Input Validation Flaw Leads to SSRF

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Mobile Security Framework (MobSF), a widely used pen-testing, malware analysis, and security assessment framework, has been found to contain a critical input validation flaw that could lead to server-side request forgery (SSRF) attacks. The vulnerability, tracked as CVE-2024-29190, affects …

XSS Vulnerability in Google Subdomain Let Hackers Hijacks the User Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Henry N. Caga has identified a significant cross-site scripting (XSS) vulnerability within a Google sub-domain that allows hackers to perform various attacks, including session hijacking, phishing attacks, malware distribution, and data Theft. This vulnerability exposed a bad actor …

Unsaflok Flaw Let Attackers Open Million of Doors in Seconds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Unsaflok, in Dormakaba’s Saflok electronic RFID locks used in hotels and multi-family housing, allows attackers to forge a master keycard by exploiting weaknesses in the system and then using it to unlock any door within the affected property.  The vulnerability …