Postman Data Leak – 30,000 Publicly Accessible Workspaces Could Lead Massive Hack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncovered a widespread and alarming trend involving data leaks from Postman, a widely used cloud-based API development and testing platform. The investigation reveals that improper management of Postman workspaces …

Apache HugeGraph-Server Vulnerability Lets Attackers Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new security vulnerability, CVE-2024-43441, has been identified in Apache HugeGraph-Server, a widely used open-source graph database system. This flaw, classified as an Authentication Bypass by Assumed-Immutable Data vulnerability, affects …

OilRig Hackers Exploiting Windows Kernel 0-day to Attack Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Iranian state-sponsored hacking group OilRig, also known as APT34, has intensified its cyber espionage activities, targeting critical infrastructure and government entities in the United Arab Emirates and the broader …

Two New Malicious PyPI Packages Attacking Users to Steal Login Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two malicious Python Package Index (PyPI) packages: Zebo-0.1.0 and Cometlogger-0.1, have been identified, posing a significant threat to user security. These packages, uploaded in November 2024, exploit unsuspecting developers and users, aiming …

Adobe ColdFusion Vulnerability Let Attackers Read arbitrary files – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has issued updates to address a vulnerability in its ColdFusion software that could allow attackers to read arbitrary files from affected systems. The flaw, identified as CVE-2024-53961, has a proof-of-concept …

Node.js “systeminformation” Vulnerability Exposes Millions of Systems to RCE Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has been discovered in the widely-used Node.js package “systeminformation,” potentially exposing millions of systems to remote code execution (RCE) attacks. The flaw, identified as CVE-2024-56334, affects …

Brazilian Hacker Charged for Selling Data Stolen From Hacked Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Junior Barros De Oliveira, a 29-year-old resident of Curitiba, Brazil, has been indicted in the United States for orchestrating an extortion scheme involving data stolen from the computer systems of …

Hackers Deploy AsyncRAT and SectopRAT Using ScreenConnect Software on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminal groups are increasingly blending new and traditional techniques to steal sensitive information from unsuspecting users by deploying remote access tools (RATs) such as AsyncRAT and SectopRAT. Recent activity in …

Webmin RCE Vulnerability Let Attackers Execute Arbitrary Code & Gain Server Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Webmin, the popular web-based system administration tool, has been found to contain a critical security vulnerability that could allow attackers to seize control of servers. The vulnerability, identified as CVE-2024-12828, …

New G-Door Vulnerability Lets Hackers Bypass Microsoft 365 Security With Google Docs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered vulnerability, dubbed “G-Door,” allows malicious actors to circumvent Microsoft 365 security measures by exploiting unmanaged Google Docs accounts. This security flaw poses a significant threat to organizations …