Oracle Critical Security Update: 387+ New Security Vulnerabilities Patched

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Oracle consistently receives reports of attempted malicious exploits, with some attackers succeeding due to customers neglecting available security patches. The company urges customers to stay on supported versions and promptly apply Critical Patch Update fixes. The latest Critical Patch Update …

Sophos Firewall Password Disclosure Vulnerability: Patch Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sophos, a well-known cybersecurity solutions provider, has promptly resolved a significant security vulnerability discovered in their Firewall system. The flaw, reported by IT für Caritas eG, affected the Secure PDF eXchange (SPX) feature and could have exposed sensitive data.  The …

Best Unified Network Security Solutions for Small Businesses

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

When managing user rights, privileged access, authentication, verification, analytics, and compliance metrics, a unified identity security platform streamlines what were once separate procedures. Doing so helps rein down identity sprawl, a major source of cybersecurity holes. Implement a unified identity …

Hackers Use Fake Browser Updates to Install Malware on Users’ Computer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware distribution on users’ computers is achieved through phony browser updates presented on websites that hackers have hijacked. When a user visits a hacked website, they may see a message purporting to be from the browser’s developer (such as Chrome, …

IT Admins Set Admin Portal Passwords to ‘admin’ – Almost 40,000 Entries Found

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IT admins can be considered culpable for weak password use if they fail to enforce strong password policies or neglect proper security measures.  Their responsibility includes setting and maintaining robust password standards, implementing multi-factor authentication, and educating users about password …

D-Link Hacked: Hackers Steal Source Code and Customer Personal Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

D-Link Hacked: Hackers Steal Source Code and Customer Personal Information By Guru – October 18, 2023 D-Link Corporation, a multinational company that provides innovative networking solutions for both consumer and business markets around the world, has been accused of suffering …

CISA, FBI Warns of Critical Atlassian Zero-Day Flaw Under Active Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A serious security flaw in some versions of Atlassian Confluence Data Center and Server has been exploited by hackers.  They have used this flaw to create fake admin accounts and access Confluence servers. This flaw is called CVE-2023-22515, affecting Confluence versions …

Titan File Transfer Server Flaws Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple vulnerabilities have been discovered in Titan MFT and Titan SFTP servers owned by South River Technologies, which were associated with Information Disclosure, Session Fixation, and Remote code execution. However, these vulnerabilities have been fixed by South River Technologies. Titan …

Tech CEO Sentenced to 5 Years in IP Address Scheme

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Amir Golestan, the 40-year-old CEO of the Charleston, S.C. based technology company Micfo LLC, has been sentenced to five years in prison for wire fraud. Golestan’s sentencing comes nearly two years after he pleaded guilty to using an elaborate network …