Chinese Hackers Exploited Versa Director Zero-Day to Target IT Sectors, CISA Warns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chinese state-sponsored threat actors have been exploiting a zero-day vulnerability in Versa Director servers, identified as CVE-2024-39717. This vulnerability, discovered by Black Lotus Labs at Lumen Technologies, has been actively targeted since June 2024, affecting several U.S. and international victims …

Research Unveils Eight Android & iOS That Leaks User’s Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The eight Android and iOS apps fail to adequately protect user data, which transmits sensitive information, such as device details, geolocation, and credentials, over the HTTP protocol instead of HTTPS.  It leaves the data exposed to potential attacks like data …

New 0-Day Attacks Linked to China’s ‘Volt Typhoon’

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Malicious hackers are exploiting a zero-day vulnerability in Versa Director, a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon, a Chinese cyber espionage group focused on infiltrating critical U.S. …

Cisco to Acquire AI Application Security Platform Robust Intelligence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has announced its intent to acquire Robust Intelligence, a leader in AI application security. This acquisition aligns with Cisco’s commitment to enhancing IT infrastructure and security in the face of AI’s transformative potential, as highlighted by the 2024 Cisco …

Greasy Opal, Hackers Created 750 Million Fake Microsoft Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Greasy Opal, based in the Czech Republic since 2009, is reportedly a Cyber Attack Enablement company that manufactures and markets advanced cyber attack bypassing tools and devices. The company’s main product features robust and rapid machine learning models that can …

Microsoft 365 Flags Users Email Messages Having Images Flagged as Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft 365 has acknowledged an issue affecting its Exchange Online service, where some users’ email messages containing images are being incorrectly flagged as malware and quarantined. This problem, identified under Issue ID EX873252, has been classified as a service degradation …

Argentina Busted Crypto Ring Used Linked with North Korean Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Argentine authorities have dismantled a sophisticated cryptocurrency operation based in Buenos Aires. The operation, which was allegedly connected to North Korean hackers, involved illegal currency exchanges and the laundering of funds linked to a $100 million cyber heist. This investigation, …

WordPress Plugin Flaw Exposes 1,000,000 WordPress Sites to Remote Code Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability in the WPML (WordPress Multilingual) plugin has put over a million WordPress sites at risk of remote code execution (RCE) attacks. This flaw allows authenticated users with contributor-level access or higher to execute arbitrary code on the server, …

Microsoft Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Personal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have revealed that a critical security flaw in Microsoft 365 Copilot allowed attackers to exfiltrate sensitive user information through a sophisticated exploit chain. The vulnerability, which has since been patched, combined multiple techniques to bypass security controls and steal …

Apache Vulnerability Let Attackers Steal Sensitive Data from Unix Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently disclosed vulnerability in the Apache Portable Runtime (APR) library could expose sensitive Unix platform application data. Identified as CVE-2023-49582, the flaw arises from lax permissions on shared memory segments, which could allow unauthorized local users to access sensitive …