Critical Windows Zero-Day Vulnerability Lets Attackers Steal Users NTLM Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have publicly revealed a newly discovered critical vulnerability that affects all Windows Workstation and Server versions, from Windows 7 and Server 2008 R2 to the latest Windows 11 …

OpenAI Unveils o1 Model & ChatGPT Pro For $200 Per Month

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has unveiled its latest advancements in artificial intelligence, introducing the highly anticipated o1 model and a new premium subscription tier called ChatGPT Pro. This launch marks a significant step …

hrtng: A Powerful IDA Pro Plugin for Malware Reverse Engineering

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers from Kaspersky’s Global Research and Analysis Team have released a powerful new IDA Pro plugin called “hrtng,” designed to streamline and simplify the complex process of malware reverse engineering. …

One Identity Named Winner of the Coveted Top InfoSec Innovator Awards for 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

One Identity named Hot Company: Privileged Access Management (PAM) in 12th Cyber Defense Magazine’s Annual InfoSec Awards during CyberDefenseCon 2024. One Identity proudly announces it has been named a winner …

U.S. Organization In China Attacked By China-Based Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A large U.S. organization with significant operations in China fell victim to a sophisticated cyber attack, likely orchestrated by China-based hackers. The intrusion, which lasted for four months from April …

Examples of Phishing Attacks and How to Effectively Analyze Them

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Analyzing phishing attacks have become challenging as these threats continue to evolve in complexity, employing more sophisticated techniques to bypass traditional defenses.  The tools used to analyze such attacks must …

WordPress Gutenberg Editor Vulnerability Let Attackers Inject Malicious Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed vulnerability in the Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress has raised concerns among website administrators and developers. The flaw, identified …

Sophisticated Celestial Stealer Attacking Browsers to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Celestial Stealer, a JavaScript-based infostealer packaged either as an Electron application, has been spotted targeting both Chromium and Gecko-based browsers to steal browser data. The stealer is specifically targeting the …

New DroidBot Malware Attacking 77 Banks And Cryptocurrency Exchange Services

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DroidBot is an advanced Android Remote Access Trojan (RAT) that targets 77 different organizations, including national organizations, cryptocurrency exchanges, and banks.  Active campaigns have been detected in countries including the …

HCL DevOps Deploy & Launch Vulnerable To HTML Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently disclosed vulnerability in HCL Software’s DevOps Deploy and Launch platforms has raised security concerns. Identified as CVE-2024-42195, this vulnerability allows attackers to embed arbitrary HTML tags within the …