VMware vCenter Server Flaw Let Attacker Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware has been discovered with two vulnerabilities, CVE-2023-34048 and CVE-2023-34056, which were associated with Out-of-Bounds Write and Partial Information Disclosure. The severity of these vulnerabilities was 9.8 (Critical) and 4.3 (Medium). Both of these vulnerabilities existed on the VMware vCenter …

Why Small Businesses Need a Malware Sandbox ? – Top 3 Reasons in 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Running a small business can often lead to the misconception that cyber-security is not a priority due to the company’s size. This false assumption can have devastating consequences if a cyber-attack occurs. To ensure that your business remains operational in …

Hackers Launch a Chain of Exploits Via Malicious iMessage Attachments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In June, a new campaign targeting iPhone and iPad devices was named “TriangleDB.” This malware infection chain consists of a malicious iMessage attachment, which launches a chain of exploits on the affected devices. Moreover, several modules were found in this …

QNAP Eliminates Server Responsible for Extensive Brute-force Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

QNAP, a Networking hardware company, has effectively taken down a malicious server that was utilized in extensive brute-force attacks targeting Internet-exposed NAS devices. On October 14, 2023, the company discovered a big wave of weak password attacks. Within 7 hours, the QNAP Product …

1Password Hacked – Internal Systems Compromised to Access HAR File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, 1Password detected suspicious activity on their Okta instance on September 29, but no user data or sensitive systems were compromised. 1Password is widely used as a popular password manager and security tool, trusted by individuals and businesses.  Users opt …

New ExelaStealer Attack Windows PCs and Steals Private Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new InfoStealer called ExelaStealer emerged in 2023, joining the ranks of other well-known malware like RedLine, Raccoon, and Vidar.  FortiGuard Labs, a leading cybersecurity research and analysis firm, has revealed some insights into this new threat. ExelaStealer is an …

NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 23, 2023 0 Comments A 22-year-old New Jersey man has been sentenced to more than 13 years in prison for participating in a firebombing and a shooting at homes in Pennsylvania last year. Patrick McGovern-Allen was the subject of …

Hackers Using Money-Making Scripts to Deliver Multiple Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI warned about attacks on government and non-profit organizations in April, which involved deploying multiple malware strains on victim devices.  Besides this, the attackers aim to achieve the following things:-  Mine resources Steal data Establish backdoor access to systems …

Over 50K Cisco IOS XE Devices Hacked Exploiting Zero-day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco IOS XE devices were widely used in networking and telecommunications due to their advanced features and reliability.  They provided a scalable and modular operating system that supported various routing and switching functionalities.  IOS XE’s software design enabled the smooth …

Hackers Stole Access Tokens from Okta’s Support Unit

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 20, 2023 0 Comments Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says …