Atlassian Data Center & Server Flaw Let Hackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Atlassian, a leading provider of collaboration and productivity software, has released critical security updates addressing multiple high-severity vulnerabilities in its Data Center and Server products. If exploited, these vulnerabilities could allow attackers to execute arbitrary code on affected systems. The …

50 World’s Best Penetration Testing Companies – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Penetration testing companies have expertise in evaluating and improving the security of computer systems, networks, and applications. These companies perform controlled cyber attacks, called penetration tests, to discover weaknesses in an organization’s IT infrastructure. Penetration testing, sometimes known as pen …

Tools Used By NullBulge Actor, Who Released Disney’s Internal Slack Communications

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often target internal communications tools to obtain confidential information like employee records, business plans, and proprietary technologies. With these characteristics of trust and openness, internal communications provide valuable but less secure means for cyber-attacks to be launched against an …

Rite Aid Data Breach – 2.2 Million Customer Personal Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rite Aid, the third-largest drugstore chain in the United States, has disclosed that a data breach in June 2024 exposed the personal information of 2.2 million customers. The company detected unauthorized access to its systems on June 6, 2024, which …

LI.FI Protocol Hack: Attackers Exploit Multiple Flaws, Stolen $9.7M in Crypto

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The LI.FI Protocol, a cross-chain bridging and swapping platform, was the victim of a sophisticated cyber-attack that stole approximately $9.7 million in various cryptocurrencies. The exploit primarily affected users who had manually set infinite approvals on specific contracts within the …

What are the Encryption Algorithms Used in Modern Malware? – A Comprehensive Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware authors increasingly rely on encryption to obfuscate their code and evade detection by security tools such as YARA, Suricata, and other static file analysis solutions. For Security researchers, Analyze malware in an Interactive sandbox such as ANY.RUN is a more convenient …

Massive Data of 361M Emails & Passwords Up For Sale on Dark Web Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers discovered one of the largest data breaches in history, with 361 million unique emails, usernames, and passwords now available for sale on dark web forums. The massive dataset, totaling 122 GB and containing 2 billion rows of data …

All-in-One: How Cynet is Revolutionizing Cybersecurity for MSPs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Managed Services Providers (MSPs) are increasingly looking to provide cybersecurity services due to the demand from their current clients. Though the revenue potential is lucrative, the road for many MSPs to transition into a Managed Security Services Provider (MSSP) is …

BMW Hong Kong Faces Major Data Breach: 14,000 Customer Records Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BMW Hong Kong has reportedly suffered a data breach affecting approximately 14,000 customers. The leak, which came to light on July 16, 2024, has exposed sensitive personal information, raising concerns about customer privacy and data security. According to reports from …

Apache HugeGraph-Server RCE Vulnerability Under Active Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are actively exploiting a critical remote code execution (RCE) vulnerability in Apache HugeGraph-Server, which is tracked as CVE-2024-27348. The vulnerability affects versions 1.0.0 to 1.3.0 of the popular open-source graph database tool. The flaw, which carries a severe CVSS …