CISA & FBI Details Phishing Techniques Used by Malicious Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have detailed the latest phishing techniques of malicious hackers. This joint guidance aims to equip organizations with the knowledge to defend against these pervasive threats. Understanding …

Hacking a Bicycle: Vulnerabilities Exploited in Wireless Gear-Shifting Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have uncovered significant cybersecurity vulnerabilities in the wireless gear-shifting systems of high-end bicycles, particularly those using Shimano’s Di2 technology. This revelation has sent shockwaves through the professional cycling community, highlighting potential risks to rider safety and the integrity of …

Critical SQL Injection Vulnerability Discovered in Fortra FileCatalyst Workflow

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortra has urgently released patches to address two critical SQL injection vulnerabilities in its FileCatalyst Workflow software, identified as CVE-2024-6632 and CVE-2024-6633. If exploited, these vulnerabilities could severely compromise the confidentiality, integrity, and availability of affected systems. FileCatalyst Workflow, a …

Chinese Hackers Exploited Versa Director Zero-Day to Target IT Sectors, CISA Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chinese state-sponsored threat actors have been exploiting a zero-day vulnerability in Versa Director servers, identified as CVE-2024-39717. This vulnerability, discovered by Black Lotus Labs at Lumen Technologies, has been actively targeted since June 2024, affecting several U.S. and international victims …

Research Unveils Eight Android & iOS That Leaks User’s Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The eight Android and iOS apps fail to adequately protect user data, which transmits sensitive information, such as device details, geolocation, and credentials, over the HTTP protocol instead of HTTPS.  It leaves the data exposed to potential attacks like data …

New 0-Day Attacks Linked to China’s ‘Volt Typhoon’

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. …

Cisco to Acquire AI Application Security Platform Robust Intelligence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has announced its intent to acquire Robust Intelligence, a leader in AI application security. This acquisition aligns with Cisco’s commitment to enhancing IT infrastructure and security in the face of AI’s transformative potential, as highlighted by the 2024 Cisco …

Greasy Opal, Hackers Created 750 Million Fake Microsoft Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Greasy Opal, based in the Czech Republic since 2009, is reportedly a Cyber Attack Enablement company that manufactures and markets advanced cyber attack bypassing tools and devices. The company’s main product features robust and rapid machine learning models that can …

Microsoft 365 Flags Users Email Messages Having Images Flagged as Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft 365 has acknowledged an issue affecting its Exchange Online service, where some users’ email messages containing images are being incorrectly flagged as malware and quarantined. This problem, identified under Issue ID EX873252, has been classified as a service degradation …

Argentina Busted Crypto Ring Used Linked with North Korean Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Argentine authorities have dismantled a sophisticated cryptocurrency operation based in Buenos Aires. The operation, which was allegedly connected to North Korean hackers, involved illegal currency exchanges and the laundering of funds linked to a $100 million cyber heist. This investigation, …