Critical Flaw in Zip Libraries Let Attackers Abuse ZIP archives

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to recent reports, a number of vulnerabilities have been discovered in widely used ZIP libraries of Swift and Flutter. These packages are being utilized by numerous developers and applications, which significantly increases the potential attack surface. Developers use ZIP …

Mozilla Firefox 117: 5 High-Severity Vulnerabilities Patched

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With the release of Mozilla Firefox 117, 13 vulnerabilities are patched, including seven ‘High Severity’ flaws and four memory corruption flaws. Mozilla said that IPC CanvasTranslator, IPC ColorPickerShownCallback, IPC FilePickerShownCallback, and JIT UpdateRegExpStatics components of the browser are all affected by …

BGP Error Handling Flaw Leads to Prolonged Network Outage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BGP is the backbone protocol and the internet’s “glue,” which directs the routing decisions between ISP networks to hold the internet under a set. In short, this protocol, BGP, is completely an essential element necessary for the internet’s proper functionality. …

Hackers Attack Unpatched Citrix NetScaler Systems to Deploy Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors targeting unpatched Citrix NetScaler systems exposed to the internet are being tracked by Sophos X-Ops.  As per research, the recent attacks share a similarity with attacks using CVE-2023–3519 delivering malware. Citrix was discovered with a Zero-Day vulnerability on …

Hackers Launch Brute-Force Attack Cisco ASA SSL VPNs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco ASA SSL VPN Appliances is a type of network security device that allows remote users to access a private network over the internet securely. These appliances are mainly used by organizations to do the following things:- Secure Remote Access …

Five Families – Hackers Collaborate to Launch Notorious Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Five Families unites the underground internet world, adopting the name of the 1950s-60s New York mafia’s Italian-American clans. This new group of “Five Families” involves five other groups, and here below, we have mentioned the names of those five …

FBI Dismantle the Notorious Qakbot Infrastructure Used For Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI and the Justice Department have declared a global effort to disrupt and dismantle the Qakbot infrastructure, which is utilized in ransomware attacks. More than 700,000 victim computers were infected by the Qakbot malware, which contributed to ransomware deployments …

Peripherals on the Rise: Don’t Let Deviant Devices Dismantle your Cyber-Defense

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Although the use of peripheral devices has risen to unparalleled rates in the post-pandemic period, many organizations have failed to increase their cybersecurity efforts to match this usage. Do you want your organization to avoid paying out a fortune due …

Multiple Flaws in VMware Aria Operations Let Attackers Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As per reports, VMware has been reported with two critical vulnerabilities that could allow threat actors to perform an authentication bypass and gain arbitrary write access on VMware Aria Operations for Networks.  Enterprises use VMware Aria Operations for Networks to …

OpenAI Released ChatGPT Enterprise With SOC 2 Compliant & Data Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several reports have indicated data leakage from ChatGPT ever since its release by the Microsoft-backed OpenAI in November 2022. Additionally, threat actors have been abusing the platform to gain unauthorized access or leak sensitive and confidential data.  However, ChatGPT has …