Legendary Hacker Kevin Mitnick Died At The Age Of 59

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Renowned former hacker Kevin Mitnick unexpectedly passed away on Sunday at the age of 59.  After being identified over a year ago, it has been reported that he sought pancreatic cancer treatment at the renowned University of Pittsburgh Medical Centre. …

OpenSSH Agent RCE Flaw Let Attackers Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Qualys discovered a new Remote Code Execution flaw in the OpenSSH.  This flaw exists in OpenSSH’s forward ssh-agent. This flaw allows an attacker to execute arbitrary commands on vulnerable OpenSSH’s forwarded ssh-agent. OpenSSH has been used in several …

Chinese APT41 Group Attack Android Devices With WyrmSpy and DragonEgg Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Chinese-based state-sponsored espionage group, APT41 targets Android devices through spyware wyrmspy and Dragon egg which masquerades as legit applications. This group has been active since 2012 and targets both public and private sectors related to software development, hardware manufacturers, …

Chrome 115 Update for Windows, MacOS, and Linux – 20 Vulnerabilities Patched

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released Chrome 115 to the stable channel for Windows, MacOS, and Linux on Tuesday, patching 20 vulnerabilities, including 11 that were discovered by external researchers. Four security issues were assessed to be of “high severity,” while six were determined to …

VirusTotal Data Leak Exposes User’s Sensitive Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The latest news revealed a popular Google platform to scan malicious documents from Virustotal exposed to data breaches of its registered customers. At the end of June, a file comprising the data of 5,600 names in a 313KB file, including …

New Jailbreak Attacks are revealed in LLM Chatbots like ChatGPT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LLMs have reshaped content generation, making understanding jailbreak attacks and prevention techniques challenging. Surprisingly, there’s a scarcity of public disclosures on countermeasures employed in chatbot services that are commercial LLM-based. A practical study has been conducted by cybersecurity analysts from …

HCL BigFix WebUI Flaw Redirects User to External Site

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HCL BigFix is an endpoint management platform that has the capability to automate discovery, management, and remediation. It can find and fix vulnerabilities on endpoints, whether it be on-premises, cloud, or virtual environments, regardless of the operating system, location, or …

Hackers Could Deactivate Your WhatsApp Account With A Simple Email

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been reported that any individual could potentially deactivate a WhatsApp account by sending an email, and currently, there is no known method to prevent this from happening. This information has been shared with all WhatsApp users. The fact …

CISA Urge Gov Agencies to Apply Patch for Windows and Office zero-days Immediately

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA urged government agencies to apply the patch immediately for Microsoft Office and Windows HTML remote code execution vulnerabilities exploited in the wild. As a result, these vulnerabilities have frequently been exploited and pose significant risks to the federal enterprise. …

JumpCloud Hacked – Hackers Breached The Systems Via Spear-Phishing Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated nation-state adversary with advanced capabilities attacked Jumpcloud with a spear phishing attack. JumpCloud is a US-based zero-trust directory platform that customers use to authenticate, authorize, and manage users, devices, and applications.  On July 12, JumpCloud disclosed that its …