Critical Citrix ShareFile Flaw Exploited in the Wild: CISA Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix ShareFile is a cloud-based platform used by organizations to store and share large files. It also allows users to create branded, password-protected files through their services.  ShareFile Storage Zone enables administrators to choose between ShareFile-managed, secure cloud storage or …

Cynomi Study Reveals Number of MSPs Providing Virtual CISO Services Will Grow Fivefold By Next Year

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cynomi Study Reveals Number of MSPs Providing Virtual CISO Services Will Grow Fivefold By Next Year By Cyber Press – August 18, 2023 Cynomi, the leading AI-powered virtual Chief Information Security Officer (vCISO) platform vendor for Managed Service Providers (MSPs), …

Threat Actors Mimic Popular IT Tools to Deliver Malware Stealthily

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are known to use several methods to lure victims into their websites and make them download their malicious payload, which will allow them to take full control of the system.  However, a recent report indicated that threat actors …

Karma Catches Up to Global Phishing Service 16Shop

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

You’ve probably never heard of “16Shop,” but there’s a good chance someone using it has tried to phish you. A 16Shop phishing page spoofing Apple and targeting Japanese users. Image: Akamai.com. The international police organization INTERPOL said last week it …

Cisco Duo Device Health App Flaw Allows Directory Traversal Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The CryptoService function in the Cisco Duo Device Health Application for Windows has a vulnerability tracked as (CVE-2023-20229). This might allow a low-privileged attacker to carry out directory traversal attacks and overwrite arbitrary files on a susceptible device. Directory traversal, also …

Ivanti Avalanche Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ivanti Avalanche has been reported with several vulnerabilities ranging between Medium to High severity. Vulnerabilities include Arbitrary file upload remote code execution, Authentication bypass, Buffer Overflow, and Directory Traversal remote code execution. Ivanti Avalanche is a mobile device management system …

Discord.io Hack Was Due to a Flaw in the Website’s Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Discord.io experienced a significant data breach on the 14th of August 2023 that risks the privacy of about 760K consumers’ data.  The platform revealed the massive data breach on August 15th, claiming it was “stopping all operations for the foreseeable future.” The …

IBM Security Guardium Flaw Let Attacker to execute arbitrary commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Command Injection vulnerability was recently discovered on IBM Security Guardium which allows threat actors to execute arbitrary commands on the affected system remotely. This vulnerability was due to improper neutralization of special elements used in OS command (CWE-78). IBM …

New Phishing Attack Exploits Cloudflare R2 Hosting Service to Steal Cloud Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cloudflare R2 hosting service like the following platforms, which provides a cost-effective large-scale data storage platform to developers with no exit bandwidth charges:- Amazon S3 Google GCS Azure Blob Storage For beta testing, the Cloudflare R2 was initially launched …

New Citrix ADC Zero-Day Scanner Tool Released With IOCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix was previously discovered with a Zero-Day vulnerability on their Citrix NetScaler Application Delivery Controller (ADC) that allowed threat actors to perform remote code execution. The Zero-Day was found to be exploited in the wild and was given CVE-2023-3519 with …