Critical Zoom Clients Flaw Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability classified as improper input validation was found in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows that could potentially allow an authenticated attacker to gain access to sensitive information on …

What is CNAPP ? How It Benefits for Multi-Cloud & Hybrid Infrastructure Protection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multi-cloud and hybrid infrastructures are becoming the norm among enterprises nowadays. Around 9 in 10 companies use a multi-cloud strategy, while 8 in 10 adopt a hybrid. This is not surprising, given the many advantages, including vendor independence, simplified management, …

Korenix JetlO 6550 Vulnerability Lets Attackers Gain Unauthorized Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Hadess have identified a critical vulnerability in the widely-used Korenix JetlO industrial Ethernet switch series. The flaw tracked as CVE-2024-2371 could allow attackers to gain unauthorized access to sensitive data within critical infrastructure and industrial control systems (ICS). …

Beware of Fake Chrome Update that Installs Cerberus Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new threat looms over Android users, masquerading as a routine Chrome update. This deceptive tactic breaches trust and directly assaults personal security, installing the notorious Cerberus banking malware onto unsuspecting devices. Here’s what you need to know about this …

Fujitsu Hacked – Attackers Stolen Personal Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fujitsu has announced the discovery of malware on several of its business computers, raising concerns over the potential leak of files containing personal and customer information.  The incident, disclosed on March 15, 2024, underscores the growing threats to corporate data …

Malware Alert! Hackers Attacking Indian Android users With Malware-as-a-Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware campaign has been identified targeting Android users in India. This sophisticated attack distributes malicious APK packages to compromise personal and financial information. The malware, available as a Malware-as-a-Service (MaaS) offering, underscores the evolving threat landscape in the …

Cyber Security News Weekly Round-Up : Cyber Attacks, Vulnerabilities, Threats & New Cyber Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With our weekly cybersecurity news summary, explore and learn about the most recent developments in the cybersecurity field.  This practice will allow you to remain up-to-date on the newest developments, weaknesses, groundbreaking progress, hacking incidents, potential dangers, and fresh narratives …

Chinese Attackers Hack American Businesses Digital Locks To Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

United States Senator Ron Wyden warned and notified the Director of the National Counterintelligence and Security Center (NCSC), Michael C. Casey, that Chinese hackers are actively backdooring digital locks to steal sensitive data. As a result, Hackers target and backdoor …

Google Chrome To Roll Out Real-Time URL Protection For Malware & Phishing Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Chrome has been protecting users from malicious websites and files with Safe Browsing, which maintains a locally-stored list updated every 30-60 minutes.  It is becoming insufficient as unsafe sites can emerge and disappear within 10 minutes. To address it, …

How to Set Up a Network Research Laboratory for Malware Analysis (SOC & DFIR Teams)

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

To analyze a security vulnerability (CVE-2024-21413) in Outlook, a controlled environment can be set up using a virtual machine (ANY.RUN) within a local virtual private network (VPN).  Researchers can learn more about the exploit by making a proof-of-concept (PoC) and …