Critical FreeBSD Hypervisor Vulnerability Lets Attackers Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity vulnerability in the FreeBSD hypervisor, bhyve, has been discovered, allowing malicious software running in a guest virtual machine (VM) to potentially execute arbitrary code on the host system. The vulnerability, identified as CVE-2024-41721, affects all supported versions of …

Top 10 Cybersecurity Companies to Consider in 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity leaders face immense pressure to protect their organizations from increasingly sophisticated cyber threats. With over 1,636 cyberattacks occurring weekly per organization and 98% of web applications found vulnerable to attacks, IT teams often struggle to keep their defenses robust …

0-Click RCE Vulnerability in MediaTek Wi-Fi Chipsets Allows Remote Exploitation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in MediaTek Wi-Fi chipsets, commonly used in embedded platforms supporting Wi-Fi 6 (802.11ax), has been discovered, allowing attackers to launch remote code execution (RCE) attacks without any user interaction. This 0-click vulnerability, CVE-2024-20017, affects a wide range …

Threat Actor IntelBroker Allegedly Claims Leak of Deloitte Internal Communications

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious threat actor, IntelBroker, allegedly claimed responsibility for leaking internal communications from Deloitte, a leading global auditing firm. The breach reportedly occurred in September 2024, when an Apache Solr server was inadvertently exposed to the internet with default login …

Threat Actor Allegedly Claim Breach of Dell Employee Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A hacking forum post has raised concerns over a potential Dell Technologies data breach. The breach allegedly affects 10,800 employees and partners and exposes sensitive internal data. The leaked information includes employee IDs, full names, employment status, and internal identification …

Disney to Stop Using Slack Following Hack that Exposed Company Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a major move, the Walt Disney Company announced that it would no longer use Slack for in-house company communication. This decision comes months after a hack that leaked over a terabyte of company data to the public. According to …

Star Health Data Leak: 31 Million Customers’ Data Exposed via Telegram

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

India’s largest health insurance provider, Star Health, and Allied Insurance, recently experienced a significant data breach, resulting in the exposure of sensitive personal information belonging to more than 31 million customers. This breach has been facilitated through chatbots on the …

CISA Releases Six New Advisories For Industrial Control Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued six new advisories concerning industrial control systems (ICS) on September 19, 2024. These advisories highlight critical vulnerabilities in various ICS products, offering crucial information for users to safeguard their systems against …

New MacOS Malware Let Attackers Control The Device Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A remote access trojan (RAT), HZ RAT, that has been attacking Windows-based devices since at least 2020, was recently upgraded and changed to target Mac users as well.  Typically, a RAT is a type of malware that an attacker employs …

GitLab Urges Organizations To Patch For Authentication Bypass Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab, the popular DevOps platform, has issued a critical security advisory urging organizations to immediately patch their self-managed GitLab instances to address a severe authentication bypass vulnerability. The flaw tracked as CVE-2024-45409, could allow attackers to gain unauthorized access to …