BIG-IP Vulnerability Allows Attackers to Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw that might allow for unauthenticated remote code execution has been identified and is categorized as CVE-2023-46747 with a 9.8 CVSS score. The F5 reports state that this problem originated in the configuration utility. The vulnerability was …

11 Best Cloud Access Security Broker Software (CASB) – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cloud Access Security Broker serves as a gatekeeper for organizations, assisting them in keeping track of and safely utilizing cloud services while ensuring that network traffic complies with their security guidelines and standards. Customers can see the use of …

Most Common AD Misconfigurations Leading to Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Active Directory (AD) is one of the most widely used services that allow organizations to manage users, computers, and other resources inside their internal network as it offers centralized authentication and authorization mechanisms for Windows and applications. Moreover, Administrators can …

Cloudflare Observed The Peak DDOS Attack of 201 Million HTTP Requests Per Second 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DDoS (Distributed Denial of Service) attacks are extremely destructive and alarming since they flood a target’s web services with overwhelming traffic. This can disrupt or even completely disable:- Websites Servers Networks This can cause significant financial losses, damage to reputation, …

Beware of Fake Google Chrome Update that Installs Malware 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity is constantly changing and facing new challenges.  One of them is the fake Chrome update malware, which has been around for several years and is still active.  This malware pretends to be a genuine Chrome browser update, but it …

Google Chrome Security Flaw Let Attackers to Crash the Browser

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As part of a security update for Chrome, Google has upgraded the Stable channels to 118.0.5993.117 for Mac and Linux and 118.0.5993.117/.118 for Windows. The Extended Stable channel has been upgraded to 118.0.5993.117  for Mac and 118.0.5993.118 for Windows. There …

Hackers Hijack Facebook Business Accounts to Run Malicious Ads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have been exploiting Facebook business accounts by gaining unauthorized access to them and launching advertising campaigns under the guise of legitimate account owners. As a result, the victims are forced to bear the financial burden of these fraudulent campaigns. …

TP-Link, HP Printer, Samsung Galaxy S23 Hacked At Pwn2Own 2023 – Day Two

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At Pwn2Own 2023 in Toronto on day two, vulnerabilities in printers, routers, smart speakers, and Samsung Galaxy S23s were exploited by cybersecurity experts. These vendors included TP-Link, HP, Cannon, Synology, and Sonos.  Cybersecurity experts have already made over $400,000 on …

Hackers Exploit Roundcube Zero-day to Attack Government Email Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers usually opt for zero-day vulnerabilities because they are not publicly known, making them more difficult for defenders to patch or protect against.  This gives hackers an advantage by exploiting a flaw before it’s discovered and fixed, increasing the possibility …

VMware vCenter Server Flaw Let Attacker Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware has been discovered with two vulnerabilities, CVE-2023-34048 and CVE-2023-34056, which were associated with Out-of-Bounds Write and Partial Information Disclosure. The severity of these vulnerabilities was 9.8 (Critical) and 4.3 (Medium). Both of these vulnerabilities existed on the VMware vCenter …