Critical XSS Vulnerability In Roundcube Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Roundcube, a widely adopted open-source webmail application, is included by default in the popular cPanel web hosting control panel, leading to millions of installations worldwide.  The software is commonly used by universities and government agencies, making the email accounts of …

CISA Warns of Hackers Exploiting Cisco Smart Install Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers obtain system configuration files by taking advantage of software or protocols that are installed on devices, such as by abusing the legacy Cisco Smart Install feature. Additionally, CISA notes that weak password types are still being used on Cisco …

ADT Data Breach: Customers Personal Information Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ADT Inc., a prominent security and automation solutions provider, reported that unauthorized actors accessed specific databases containing customer order information. The company swiftly addressed the breach, which raised concerns about data security and customer privacy. ADT became aware of the …

Researchers Demonstrate How Hackers Can Exploit Microsoft Copilot

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At the recent Black Hat USA conference, security researcher Michael Bargury unveiled alarming vulnerabilities within Microsoft Copilot, demonstrating how hackers can potentially exploit this AI-powered tool for malicious purposes. This revelation underscores the urgent need for organizations to reassess their …

Cisco Integrated Talos Threat Intelligence for All Splunk Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has announced the integration of its Talos threat intelligence across multiple Splunk security products, marking a significant milestone in the company’s efforts to combine capabilities following its acquisition of Splunk earlier this year. Cisco Talos threat intelligence integration is …

MongoDB Vulnerability Allows Attackers to Gain Complete Control of Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability, identified as CVE-2024-7553, has been discovered in MongoDB. It could potentially allow attackers to take complete control of Windows systems. This vulnerability arises from incorrect validation of files loaded from a local untrusted directory, which can lead …

New Double-Extortion Ransomware Attacking Linux Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Symantec have identified a new Linux ransomware variant linked to a bilingual (English and Spanish) double-extortion ransomware group. This emerging threat poses significant risks to organizations by encrypting and exfiltrating sensitive data, demanding ransom payments for decryption and …

Confusion Attacks in Apache HTTP Server Let Attackers Gain Root Access Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent research presentation at Black Hat USA 2024 revealed architectural vulnerabilities within the Apache HTTP Server, a widely used web server software. The research highlights several technical debts within Httpd, including three types of Confusion Attacks, nine new vulnerabilities, …

PoC Released for 0-click RCE Flaw Impacting Windows Server – MadLicense

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

PoC exploit released for critical 0-click remote code execution (RCE) vulnerability affecting Windows Server. This flaw impacts Windows Server versions from 2000 to the latest 2025 preview. This vulnerability, identified as CVE-2024-38077, resides in the Windows Remote Desktop Licensing Service …

5 Malware Analysis Challenges Solved by an Interactive Sandbox

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware analysis can be challenging, as it often requires in-depth theoretical knowledge and advanced skills. Tools like an interactive sandbox help simplify it, making sophisticated malware behavior easy to expose and understand even for junior security professionals. Here are some …