SolarWinds ARM Vulnerability Let Attackers Bypass Authentication & Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SolarWinds, a leading provider of IT management software, has recently disclosed critical vulnerabilities in its Access Rights Manager (ARM) platform. The vulnerabilities, identified as CVE-2024-28990 and CVE-2024-28991, allow attackers to bypass authentication and execute remote code, posing significant security risks. …

Hackers Exploiting Progress WhatsUp RCE Vulnerability In The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WhatsUp Gold is a comprehensive IT infrastructure monitoring tool. While this tool is primarily designed to provide visibility into the performance and status of applications, network devices, and servers across both cloud and on-premises environments. Recently, cybersecurity researchers at Trend …

SquareX, Awarded Rising Star Category in CybersecAsia Readers’ Choice Awards 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SquareX has been named a winner of the prestigious Rising Star category in CybersecAsia Readers’ Choice Awards 2024 Awards, due to its outstanding achievements in its innovative browser security solutions. For the past 5 years, this award has been honouring …

17-Year Old Teen Arrested Behind The London Transport Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 17-year-old teen from Walsall has been arrested by the National Crime Agency (NCA) in connection with a cyber security breach affecting Transport for London (TfL). The arrest, made on September 5, was part of an ongoing investigation into the …

Threat Actor Claims Fortinet Data Breach via Third-Party Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor claimed unauthorized access to a third-party cloud-based file-sharing service used by Fortinet. The incident reportedly affected several Fortinet customers in the Asia-Pacific region. “An individual gained unauthorized access to a limited number of files stored on Fortinet’s …

Mastercard Buys Recorded Future for $2.65 Billion

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mastercard has announced a significant expansion of its cybersecurity services through an agreement to acquire Recorded Future, a leading global threat intelligence company. The acquisition, valued at $2.65 billion, aims to enhance Mastercard’s ability to secure the digital economy, particularly …

WordPress To Mandate 2FA for Theme And Plugin Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Beginning on October 1st, 2024, WordPress will mandate two-factor authentication (2FA) for plugin and theme creators as a new security measure. Themes and plugins that are used by millions of WordPress websites worldwide can be updated and changed by accounts …

Exploitation Zero-Day Vulnerabilities For Remote Access Became Prime Target

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity landscape in 2024 has been marked by a significant surge in malware and vulnerabilities.  The Key trends include the expansion of Ransomware-as-a-Service (RaaS), an increase in software supply chain attacks, and the exploitation of zero-day vulnerabilities by APTs. …

Beware of Work Email Security Alert that Steals Your Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new phishing scam is targeting employees by exploiting their sense of responsibility and concern for email security. The attack begins with an email purportedly from “The Office 365 Team,” alerting the recipient of a suspicious forwarding rule or unauthorized …

Aembit Raises $25 Million in Series A Funding for Non-Human Identity and Access Management

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The investment will drive the company’s advancement of scalable workload access management for enterprises Aembit, the leading non-human identity and access management (IAM) company, has secured $25 million in Series A funding, bringing its total capital raised to nearly $45 …