Microsoft Patch Tuesday, July 2024 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft Corp. today issued software updates to plug at least 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least two of the vulnerabilities in active attacks against Windows users. …

Exclusive! Analysis of 3 Ransomware Threats Active Right Now 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware continues to loom large over the cybersecurity landscape, causing significant damage to individuals and organizations alike. With the difficulty of recovering encrypted files and the potential exposure of stolen data, it is essential to keep track of active ransomware …

Researcher Exploits Browser Rendering Process to Alter PDF Invoice Pricing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybersecurity researcher, Zakhar Fedotkin, demonstrated how differences in PDF rendering across various browsers and operating systems can be exploited to manipulate the displayed pricing on PDF invoices. This vulnerability could significantly impact businesses relying on digital invoices for transactions. …

Massive Truecaller Data Leak Exposes 273 Million Indian Users’ Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive data leak involving Truecaller, the popular caller ID and spam-blocking app, has reportedly exposed the personal information of 273 million Indian users. The leak, which stems from a breach in February 2019, has recently resurfaced, raising significant privacy …

Windows Notepad Text Editor Gets Spell Check After 41 Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has finally introduced spell check and autocorrect features to its venerable Notepad text editor, a staple of the Windows operating system for over four decades. This update significantly enhances the minimalist text editor, which has remained largely unchanged since …

WordPress Calendar Plugin RCE Flaw Exposes 150,000 Sites for Hacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security flaw was discovered in the Modern Events Calendar, a widely used WordPress plugin with over 150,000 active installations. The vulnerability, identified as an Arbitrary File Upload flaw, allows authenticated users, such as subscribers, to upload arbitrary files to …

New CloudSorcerer APT Group Exploits Cloud Services And GitHub For C2 Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The hackers take advantage of Cloud services and GitHub since they are highly popular and can give access to massive amounts of data. Since they contain intellectual property, sensitive information, and credentials that lucrates the hackers. Besides this, misconfigurations in …

Threat Actors Claiming Breach of Nokia Database

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have claimed responsibility for a breach of Nokia’s database. The announcement was made via a tweet from the notorious hacker group H4ckManac, known for their previous cyber exploits. The tweet, 2024, reads: “We have successfully breached Nokia’s database. …

PoC Exploit Released for VMware vCenter Server RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in the VMware vCenter Server, potentially allowing authenticated remote code execution. The vulnerability, identified as CVE-2024-22274, affects the vCenter Server’s API components and has been assigned a CVSSv3 base …

New OpenSSH Vulnerability CVE-2024-6409 Exposes Systems to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have discovered a new vulnerability in OpenSSH, identified as CVE-2024-6409, which could potentially allow remote code execution attacks on affected systems. This vulnerability, which affects OpenSSH versions 8.7 and 8.8, allows for potential remote code execution (RCE) due to a race condition …