New GPU Side Channel Vulnerability Impacts GPUs from Intel, AMD, Apple & Nvidia

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new research paper has been published that mentions a side-channel attack that threat actors can exploit to leak sensitive visual data from modern GPU cards when visiting a malicious website. This method was published under the name “GPU.zip” by …

Firefox 118 Released with the fix for 6 High-Severity Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mozilla has recently launched Firefox 118, which addresses a total of nine security vulnerabilities. Notably, this release effectively resolves six high-severity vulnerabilities that were previously identified. The majority of vulnerabilities identified are associated with memory-related concerns, which have the potential …

Cisco DNA Center Vulnerability Let Attacker Modify Internal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security flaw has been identified in the Cisco DNA Center, which can potentially enable unauthorized access by a remote attacker. This vulnerability could allow the attacker to view and manipulate data within a repository associated with an internal service …

Threat Actors Use Abnormal Certificates to Deliver Info-stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malicious certificates can be highly dangerous as they can be used to deceive users into trusting malicious websites or software. This can lead to various security threats, including:- Data breaches Malware infections Phishing attacks Compromise user privacy Compromise system integrity …

‘Ransomed.Vc’ Group Attacking Japanese Giants in New operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the ever-evolving cyber threat landscape, Ransomed.vc, a ransomware syndicate with a rapidly growing reputation on the Dark Web, has once again made headlines. This time, their target is Japan’s telecommunications giant, NTT Docomo.  This development comes hot on the heels …

OPNsense Firewall Flaws Let Attackers Employ XSS to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OPNsense is a firewall and routing platform that is based on FreeBSD. It is open-source, making it freely available for use. Additionally, OPNsense is designed to be user-friendly, with a straightforward interface and simple installation process. Furthermore, it offers the …

HiddenGh0st Malware Attacking MS-SQL & MySQL Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A remote control malware called Gh0st RAT, which is popular with Chinese threat actors and has publicly available source code was created by China’s C. Rufus Security Team. ASEC (AhnLab Security Emergency Response Center) finds the Gh0st RAT variant using …

ZenRAT Malware Delivered Through Fake Bitwarden Installation Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to the recent findings by Proofpoint, a new malware called ZenRAT has been discovered. This malware is being spread via fraudulent download packages disguised as Bitwarden installations. This malware primarily targets Windows users and redirects non-Windows users to benign …

BlackTech APT Hackers Attacking Network Routers to Breach Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers called BlackTech APT have been doing bad things since 2010. They attack places like the government, factories, technology, media, electronics, phones, and the military. The group behind the attack employs custom-made malicious software, tools that can be used for …

Google Given Max Severity Score for lipwebp Zero-day Exploited in Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a security fix for a critical vulnerability that affected Google Chrome for Windows, macOS, and Linux. The vulnerability was given the CVE ID as CVE-2023-4863 and has been given a severity of 8.8 (High). On analyzing the vulnerability, …