Alert! Oracle Releases Critical Patch Update 2024 – 372 Vulnerabilities are Fixed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Oracle has released its Critical Patch Update (CPU) for April 2024, addressing 372 vulnerabilities across multiple products. The Critical Patch Update provides fixes for security flaws in widely-used Oracle products including Database Server, Fusion Middleware, Enterprise Manager, E-Business Suite, Supply …

Hackers Exploiting TP-Link Archer Command Injection Vulnerability in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered widespread exploitation of a critical vulnerability in TP-Link Archer routers, which has led to the proliferation of botnet threats. The vulnerability, CVE-2023-1389, allows attackers to execute arbitrary commands on affected devices, potentially granting them access to …

Critical PHP Vulnerabilities Let Attackers Inject Commands : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple vulnerabilities have been identified in PHP that are associated with Command Injection, Cookie Bypass, Account takeover, and Denial of Service. The CVEs for these vulnerabilities have been given as CVE-2024-1874, CVE-2024-2756, CVE-2024-3096, and CVE-2024-2757. The severity of these vulnerabilities …

NSA, CISA Released Guidance And Best Practices To Secure The AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an era where artificial intelligence (AI) systems are becoming increasingly integral to our daily lives, the National Security Agency’s Artificial Intelligence Security Center (NSA AISC) has taken a significant step forward in enhancing cybersecurity.  The NSA AISC, in collaboration …

Multiple Juniper Networks Flaw Let Attackers Delete Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Juniper networks-owned Junos OS has been discovered to have multiple vulnerabilities associated with Denial of Service (DoS), Path Traversal, and Cross-Site Scripting (XSS). The CVEs for these vulnerabilities have been assigned with CVE-2024-30409, CVE-2020-1606, and CVE-2020-1607. The severity for …

Personal Data Exposed in Massive Global Hack: Understanding the Implications & Guarding Privacy- Axios Security Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a digital age where information is the new currency, the recent global hack has once again highlighted the urgent need for enhanced cybersecurity measures. The breach was identified as Midnight Blizzard, from the Russian state-sponsored actor known as NOBELIUM. …

Hacker Customize LockBit 3.0 Ransomware To Attack Orgs Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers leverage the LockBit 3.0 ransomware due to its sophisticated encryption functionalities, which enable them to successfully encrypt victims’ files and request a ransom in order to supply decryption keys. The stealthiness of LockBit 3.0 enhances the attack methods, which …

Popular VPN Software Flaw Let Attackers Crash the Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been discovered in a widely used virtual private network (VPN) software, Libreswan, putting millions of users at risk. The flaw, CVE-2024-3652, could allow attackers to remotely crash the affected systems, potentially disrupting critical services and exposing …

Who Stole 3.6M Tax Records from South Carolina?

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

April 16, 2024 0 Comments For nearly a dozen years, residents of South Carolina have been kept in the dark by state and federal investigators over who was responsible for hacking into the state’s revenue department in 2012 and stealing …

Iran launched a Major Cyberattack Against Critical Infrastructure in Israel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyberattacks have become a critical aspect of international conflicts. The recent cyber attack launched by Iran against Israel’s critical infrastructure is a testament to the evolving nature of geopolitical disputes. This article delves into the technical intricacies of the attack, …