Red Hat NetworkManager Flaw Let Attackers Gain Root Access To Linux Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A serious security vulnerability has been discovered in Red Hat’s NetworkManager-libreswan plugin that could allow local attackers to escalate privileges and gain root access to Linux systems. The flaw tracked as CVE-2024-9050 has received a CVSS base score of 7.8, …

Samsung Use-After-Free Zero-day Vulnerability Exploited In The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Samsung has devices affected by a critical security vulnerability (CVE-2024-44068) that affects multiple Exynos mobile processors actively exploited in the wild. The high-severity flaw impacts several processor models, including the Exynos 9820, 9825, 980, 990, 850, and W920 series. The …

Tor Browser 14.0 Released: What’s New?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Tor Project has announced the release of Tor Browser 14.0, marking a significant update to this privacy-focused web browser. This release is based on Mozilla Firefox ESR 128, incorporating a year’s worth of upstream changes from Firefox, and includes …

52 Zero-Days Uncovered: Hackers Earn $486,250 at Pwn2Own Ireland 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The first day of Pwn2Own Ireland 2024 has concluded with an impressive showcase of cybersecurity prowess, as hackers demonstrated their skills by uncovering 52 zero-day vulnerabilities. The event, held at Trend Micro’s offices in Cork, awarded a total of $486,250 …

Mallox Ransomware Flaw Let Victims Recover Files Without Ransom Payment

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mallox Ransomware Flaw Lets Victims Recover Files Without Ransom Payment. Previously known as TargetCompany, ransomware has undergone several evolutionary changes since its initial appearance. While the malicious actors addressed an earlier cryptographic weakness in February 2022, their subsequent modifications introduced …

MITRE CVE Program Marks 25th Anniversary, Accumulating 240,000 Records by 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Common Vulnerabilities and Exposures (CVE®) Program celebrates its 25th anniversary, marking a remarkable journey from its inception in 1999 to becoming a cornerstone of global cybersecurity vulnerability management. Starting with just 321 records in 1999, the program has expanded …

Akira Ransomware Actors Developing Rust Variant To Attack ESXi Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Akira Ransomware Actors are Developing a Rust Variant to Attack ESXi servers. First identified in March 2023, it targets both Windows and Linux systems. It is first identified in March 2023, targets both “Windows” and “Linux” systems. It employs a …

Callback Phishing Attacks Using Google Groups To Steal Login Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing attacks are deceptive schemes where attackers impersonate reputable entities to trick individuals into revealing “sensitive information.” These attacks often occur via email using urgent language to prompt victims to click on “malicious links” or “download harmful attachments.” Trustwave cybersecurity …

Hackers Registered 1,000+ New Malicious Domains Targeting US Elections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered over 1,000 newly registered malicious domains designed to exploit public interest in the upcoming vote. This surge in potentially harmful websites poses significant risks to voter information security and the integrity of the electoral process. Leading …

Critical OneDev DevOps Platform Vulnerability Let Attacker Read Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been identified in the OneDev DevOps platform, posing significant security risks to organizations relying on this tool for their software development and deployment processes. The issue, tracked as CVE-2024-45309, affects versions of OneDev before 11.0.9. OneDev …