WordPress Calendar Plugin RCE Flaw Exposes 150,000 Sites for Hacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security flaw was discovered in the Modern Events Calendar, a widely used WordPress plugin with over 150,000 active installations. The vulnerability, identified as an Arbitrary File Upload flaw, allows …

New CloudSorcerer APT Group Exploits Cloud Services And GitHub For C2 Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The hackers take advantage of Cloud services and GitHub since they are highly popular and can give access to massive amounts of data. Since they contain intellectual property, sensitive information, …

PoC Exploit Released for VMware vCenter Server RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in the VMware vCenter Server, potentially allowing authenticated remote code execution. The vulnerability, identified as CVE-2024-22274, affects the vCenter …

New OpenSSH Vulnerability CVE-2024-6409 Exposes Systems to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have discovered a new vulnerability in OpenSSH, identified as CVE-2024-6409, which could potentially allow remote code execution attacks on affected systems. This vulnerability, which affects OpenSSH versions 8.7 and 8.8, allows for …

Researchers Decrypted DoNex Ransomware And It’s Rebranded Versions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers discovered a flaw in the DoNex ransomware’s encryption scheme, allowing them to create a decryptor for DoNex and its predecessors (Muse, fake LockBit 3.0, DarkRace).  The decryptor has been …

1.4 GB of NSA Data Leaked – Phone Numbers, Email Addresss & More Classified Data Exposed Online

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers from Cyber Press, who reported a massive Twitter data leak today, found another data leak online. This time, cybercriminals exposed a file with 1.4 GB of leaked data from the National …

Information Stealing Malware Distributed as AT tools & Chrome Extensions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The first half of 2024 has seen a significant rise in information-stealing malware disguised as AI tools and Chrome extensions. This trend highlights cyber criminals’ increasing sophistication and adaptability as …