CISA Order Highlights Persistent Risk at Network Edge

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

June 15, 2023 0 Comments The U.S. government agency in charge of improving the nation’s cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes amid a surge …

Chinese Hackers Employed DNS-over-HTTPS for Linux Malware Communication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChamelGang, a sophisticated threat actor believed to be based in China, has been using different tools for intrusions, as identified by the security researchers at Stairwell Threat Research in their recent investigation. While apart from this, the Threat Research team …

Critical Vulnerability in WordPress Stripe Payment Plugin Exposes Customer Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The WordPress Stripe Payment Gateway plugin has been vulnerable to Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability. WooCommerce developed this plugin.  The plugin version is 7.4.1 and has nearly 900K installations worldwide. Usually, payments are redirected to externally hosted checkout …

Hackers Targeting Microsoft’s MS SQL Servers Extensively – New Study

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The rapid rise of digital and technological advances brought several innovative improvements. Still, besides this, the security of databases has also become extremely important, as with digital advancements, security threats are also growing rapidly. A honeypot can be a practical …

Microsoft’s June 2023 Patch Tuesday – 38 Remote Code Execution Flaws Patched

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s Patch Tuesday for June 2023 is here, bringing security updates for 78 problems, including 38 vulnerabilities that can be exploited remotely. Microsoft addressed 38 bugs that could allow remote code execution (RCE), and out of those, they classified only …

Critical Fortinet Flaw Let Attackers Execute Remote Code on SSL-VPN Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet has fixed a critical pre-authentication remote code execution vulnerability in SSL VPN devices with the release of new Fortigate firmware upgrades. Versions 6.0.17, 6.2.15, 6.4.13, 7.0.12, and 7.2.5 of the FortiOS firmware now include the security updates provided on …

Microsoft Patch Tuesday, June 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This month’s relatively light patch load has another added bonus for system administrators everywhere: It appears to be the first …

First Ever SaaS Ransomware Attack Leveraged SharePoint Online

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Obsidian cybersecurity firm has recently documented a successful ransomware attack targeting Sharepoint Online (Microsoft 365).  The hackers stealthily exploited a Microsoft Global SaaS admin account in a departure from the standard compromised endpoint route. The victim sought assistance from …

Hackers Steal Cryptocurrencies Using DoubleFinger Malware Via Weaponized PIF Attachment

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Stealing cryptocurrencies is a joint event, and a recent addition to this trend is the DoubleFinger loader, which is mainly designed to steal cryptocurrency through multiple stages. This recent addition, the DoubleFinger loader, is identified by the security researchers at …

Cost of a Data Breach: Banking and Finance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The data breach cost reached an all-time high in 2022, as per research, increasing by around 12.7% within just 2 years. The cost has reached an average of USD 4.35 million per breach. 83% of organizations faced more than one data …