Zoom Desktop Flaws Let Attackers Launch Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zoom, a well-known video conferencing software, has patched seven vulnerabilities in its desktop and mobile applications, particularly a critical flaw identified as CVE-2024-24691 impacting Windows software. Notably, a high-severity escalation of privilege …

Chinese Hackers Attacking U.S. Critical Infrastructure Since 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VOLTZITE, a designated threat group, has been discovered by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which overlaps with the Volt Typhoon threat group. This particular threat actor has …

Wireshark 4.2.3 Released: What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wireshark, the most popular network protocol analyzer worldwide, has released version 4.2.3, which includes new features and upgrades. Wireshark, a well-known open-source network protocol analyzer, enables users to view and …

Hackers Exploit YouTube Videos to Deliver Password Stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors hunt for ways to exploit vulnerabilities by employing tactics from technical zero-days to broad phishing.  Social engineering blends with commodity malware on high-traffic sites, like social media, that …

U.S. Internet Leaked Years of Internal, Customer Emails

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But …

Water Hydra Group Exploits Microsoft Defender SmartScreen Zero-Day Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors exploit Microsoft Defender SmartScreen zero-day flaws to circumvent the security mechanisms designed to protect users from malicious websites and downloads.  By leveraging these vulnerabilities, threat actors can evade …

CharmingCypress Use Poisoned VPN Apps to Install Backdoor

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors of Iranian origin, CharmingCypress (also known as Charming Kitten, APT42, TA453), have gathered political intelligence against international targets, with a special emphasis on journalists, think tanks, and NGOs. …

Multipurpose Glupteba Malware Controls OS Boot Process to Hide Itself

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Glupteba, a decade-old malware in financial cybercrime, unveiled a new campaign in November 2023.  Despite its long tenure, the undiscovered features include a UEFI bootkit that allows stealthy persistence, challenging …

10 Best Secure Network As a Service for MSP Providers – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Secure Network as a Service (SNaaS) for Managed Service Providers (MSPs) delivers networking and security services to clients via the cloud, integrating networking advantages with complete protection. This strategy allows …