Samsung Issued Patches for Multiple Critical Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Samsung Mobile has issued fixes to address several security flaws discovered in Galaxy phones and tablets. In the September 2023 security patch, 62 bugs were fixed; Google provided 27 of these fixes, and Samsung issued 35 SVE fixes.  Four security issues …

Dastardly From BurpSuite: Lightweight Web App Security Scanner

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Dastardly is a powerful web vulnerability DAST (Dynamic Application Security Testing) scanner developed to assist organizations in effectively safeguarding their web applications.  It is a free, lightweight web application security scanner for your CI/CD pipeline from the makers of Burp Suite. …

AtlasVPN Zero-day Vulnerability Leaks the users IP Address

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Critical 0-day vulnerability was discovered in AtlasVPN for Linux, which can disconnect the AtlasVPN and leak the user’s IP address. The AtlasVPN, running a daemon on Linux, also runs an HTTP server for accepting CLI (Command Line Interface) commands. …

Windows’s File History Service Flaw Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Privilege Escalation was recently discovered, which affects Windows’s File History service and can be used by threat actors to gain escalated privileges on a Windows System. This issue was reported to Microsoft, and necessary patches have been published to …

Hackers Weaponizing MinIO Storage System Flaws to Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recent reports indicate two vulnerabilities relating to information disclosure and remote code execution in MinIO, and their proof of concept was publicly disclosed. Threat actors relied on a non-native solution and exploited these vulnerabilities relatively easily. These vulnerabilities existed on …

Holiday Season Cyber Alert: Reflectiz Declares War on Magecart

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Reflectiz, a cybersecurity company specializing in continuous web threat management, offers an exclusive, fully remote solution to battle Magecart web-skimming attacks, a popular cyberattack involving injecting malicious code into the checkout pages. As the Holiday Season approaches, online retailers face …

Common Tactics Used by Threat Actors to Weaponize PDFs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the vast and complex world of cybersecurity, danger often hides in the most unsuspecting corners, stalking stealthily where our guard is least prepared. While the threats, like timeless adversaries, persistently bear and show no signs of disappearing into anonymity. …

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

September 5, 2023 0 Comments In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of …

AttackCrypt: A Payload Encryptor That Allows Malware to Evade Antivirus Scanners

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AttackCrypt, an open-source “crypter,” was recently used by cybercriminals to hide malware binaries and avoid antivirus detection. A crypter is a kind of software that can encrypt, obfuscate, and alter malicious code to make detection by security tools more difficult.  “AttackCrypt is an open …

What is Zero Trust Data Access? – Zero Trust in the SaaS Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zero Trust Data Access (ZTDA) constitutes a fundamental aspect of the wider Zero Trust security framework, which entails limiting data access. The Zero Trust security approach follows the principle of “never trust, always verify,” regardless of where access is granted. …