30,000+ Individuals Impacted in Fidelity Investments Third-party Data Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over 30,000 individuals have been left vulnerable after a third-party data breach involving Fidelity Investments Life Insurance Company (FILI). The breach, orchestrated through Infosys McCamish (IMS), a third-party service provider, has raised serious concerns about the security measures to protect …

ArubaOS Security Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ArubaOS-Switch belongs to Aruba Networks and it’s a subsidiary of HPE (Hewlett Packard Enterprise). It helps centralize network management, and besides this, it also develops diverse products related to networking. Security Analysts Discovered a multitude of vulnerabilities in ArubaOS-Switch Switches, …

Microsoft .NET Framework & Visual Studio Flaw Let Attackers Write or Delete Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability, CVE-2023-36049 has been identified in the Microsoft .NET Framework and Visual Studio, posing a serious threat to the integrity of FTP servers. If exploited, this flaw could allow attackers to write or delete files, compromising the security of …

Cisco Duo for Windows Logon and RDP Let Attacker Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability, CVE-2024-20301 has been identified in Cisco Duo Authentication for Windows Logon and Remote Desktop Protocol (RDP), posing a security risk to affected systems. This flaw could allow an authenticated, local attacker to bypass secondary authentication mechanisms and …

Copybara Uses On-Device Fraud to Steal Funds Directly from the Victim’s Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts at Cleafy Labs have exposed a sophisticated fraud campaign orchestrated by a group known as Copybara.  This campaign, leveraging on-device fraud techniques, has been meticulously designed to siphon funds directly from victims’ devices, marking a significant escalation in …

Hackers Hijacking Web Server To Deploy z0Miner Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The threat actor, who goes by the name “z0miner,” has been found to be attacking Korean WebLogic servers to distribute malware like miners, network tools, and scripts for attacking further. This threat actor has a history of attacking vulnerable servers …

Cloudflare Unveils AI Model Firewall to Enhance Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare has announced the launch of a new firewall specifically designed to protect AI models. This pioneering initiative aims to address the growing concerns around the security of artificial intelligence systems, which are increasingly becoming integral to various sectors. The …

Foxit PDF Reader Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Foxit Software has released an update for its Foxit PDF Reader 2024.1 and Foxit PDF Editor 2024.1 for Windows, addressing critical security vulnerabilities that could potentially allow attackers to execute remote code on a user’s system. The vulnerabilities affected earlier …

Hackers Exploiting iOS 0-day To Attack iPhones – Patch Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two new zero-day vulnerabilities have been discovered in iOS and iPadOS 17.4 versions that could allow threat actors to bypass memory protections and perform arbitrary kernel read and write on the affected devices. These two vulnerabilities have been assigned with …

GhostSec & Stormous Operators Launched Twin Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A hacking group has evolved with a new ransomware variant known as GhostLocker 2.0. This group, in collaboration with the Stormous ransomware operators, has initiated double extortion ransomware attacks targeting various businesses globally. The joint efforts of GhostSec and Stormous …