NVIDIA UFM Vulnerability Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity vulnerability has been disclosed recently on November 26, 2024 by NVIDIA affecting its UFM Enterprise, UFM Appliance, and UFM CyberAI products. The flaw, identified as CVE-2024-0130, could allow attackers to escalate privileges, tamper with data, cause denial of …

IBM Engineering Systems Flaw Let Attackers Bypass Security Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has been discovered in IBM Engineering Systems Design Rhapsody – Model Manager (RMM), potentially allowing remote attackers to bypass security restrictions and execute code. The flaw, identified as CVE-2024-41779, affects versions 7.0.2 and 7.0.3 of the …

Junior School Student Charges For Infecting Computers With ‘Test of Skill’ Virus

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 15-year-old junior high school student from Saitama Prefecture has been charged with creating and distributing a computer virus. The Fukui Police Station and the Cyber Crime Division of the Fukui Prefectural Police forwarded the case to the prosecutor’s office …

20 Years Old macOS Vulnerability Allow Attackers To Gain Root Access Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher, Gergely Kalman, uncovered a severe macOS vulnerability privilege escalation in Apple’s MallocStackLogging framework, which had remained undetected for approximately 20 years. The bug, tracked as CVE-2023-32428, was discovered in March 2023 and subsequently patched by Apple in …

VMware Aria Operations Vulnerabilities Allow Privilege Escalation & XSS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware, a leading cloud computing and virtualization software provider, has disclosed multiple critical vulnerabilities in its Aria Operations product. The most severe flaws could allow attackers to escalate privileges to the root user on affected systems. The advisory, identified as …

Hacker in Snowflake Extortions May Be a U.S. Soldier

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Two men have been arrested for allegedly stealing data from and extorting dozens of companies that used the cloud data storage company Snowflake, but a third suspect — a prolific hacker known as Kiberphant0m — remains at large and continues …

Interpol Arrested 1,000+ Cybercriminals and Dismantled 130,000+ Malicious Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A joint operation by INTERPOL and AFRIPOL has led to the arrest of 1,006 suspects and the dismantling of 134,089 malicious infrastructures across 19 African countries. The operation, codenamed Operation Serengeti, targeted cybercriminals involved in ransomware, business email compromise (BEC), …

Windows Zero-days & Firefox Vulnerability Exploited by RomCom Hackers Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Russian-aligned hacking group RomCom has been discovered exploiting two critical zero-day vulnerabilities affecting Mozilla Firefox and Windows systems in a sophisticated cyber-espionage campaign. The vulnerabilities allowed attackers to execute malicious code on victims’ computers without any user interaction. The first …

Hackers Weaponizing Typosquatted Libraries To Inject SSH Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated attack targeting npm users has been recently uncovered by the Socket’s threat research team in a concerning development for the open-source community. The threat actor, identified as “sanchezjosephine180,” has published six malicious npm packages designed to mimic popular …

Kansas City Man Charged for Hacking Computer Systems of Health Clubs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 31-year-old Kansas City man has been indicted on federal charges for allegedly hacking into the computer systems of a health club chain and a nonprofit organization. Nicholas Michael Kloster faces two counts related to unauthorized computer access and causing …