VMware SD-WAN Vulnerabilities Let Attackers Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple security flaws affecting VMware SD-WAN have been addressed, allowing arbitrary commands to be executed on the intended system. If these vulnerabilities are successfully exploited, enterprises that use VMware SD-WAN to manage their network connections may be exposed to serious …

Chrome Zero-Day Vulnerability Exploited At Pwn2Own : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google fixed three vulnerabilities in the Chrome browser on Tuesday, along with another zero-day exploit that was exploited during the Pwn2Own Vancouver 2024 hacking contest. Google recently fixed two more zero-day vulnerabilities that were exploited during the Pwn2Own hacking competition. Palo Alto …

D-Link NAS Command Injection Flaw : 92,000 Devices Affected

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new command injection vulnerability and a backdoor account have been discovered in D-Link Network Attached Storage devices, which affects D-Link NAS devices, including DNS-340L, DNS-320L, DNS-327L, and DNS-325, among others. This exists in the nas_sharing.cgi file of these devices …

HTTP/2 Continuation Flood Attack : Single Machine Can Bring Down Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Bartek Nowotarski disclosed a new class of vulnerabilities within the HTTP/2 protocol, known as the HTTP/2 CONTINUATION Flood. This attack vector is proving to be a significant threat, potentially more dangerous than the previously known Rapid Reset attack. …

Center Identity Launches Patented Passwordless Authentication for Businesses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Center Identity, a pioneering cybersecurity company, is excited to unveil its patented secret location authentication, reshaping how businesses manage workforce digital identity. This proprietary technology enables users to authenticate their identity using a secret location selected on a map. The …

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A cybercrook who has been setting up websites that mimic the self-destructing message service privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software company. The disclosure revealed a profitable network of phishing sites …

Researchers Unveil The Attackers Behind The Agent Tesla Campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Check Point Research has exposed a recent wave of cyberattacks utilizing the infamous Agent Tesla malware. This campaign targeted organizations in the United States and Australia. First appearing in 2014, Agent Tesla masquerades as legitimate software but acts as a silent …

300,000 Chinese Devices in US : 40% Increase Despite Official Bans

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chinese devices are suspected of administering cyber espionage due to concerns over potential backdoors, supply chain vulnerabilities, and the risk of tampering.  State-sponsored cyber threats, such as viral memes, are becoming more frequent. Chinese devices have raised concerns about spying …

Hackers Hijacking YouTube Channels to Steal Your Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are increasingly exploiting YouTube, a platform beloved by millions, to produce sophisticated malware attacks. These threat actors, leveraging the impression of free software and video game enhancements, target unsuspecting users, particularly the younger demographic, to steal sensitive personal information. …

Hackers Claiming of Working Windows 0-Day LPE Exploit

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new claim has surfaced on the internet regarding a zero-day exploit that targets the Windows operating system. This exploit, which enables local privilege escalation (LPE), could allow attackers to gain elevated access to a user’s system. A tweet from …