Criminal IP Unveils Innovative Fraud Detection Data Products on Snowflake Marketplace

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AI SPERA, a leader in Cyber Threat Intelligence (CTI) solutions, announced that it has started selling its paid threat detection data from its CTI search engine ‘Criminal IP‘ on the Snowflake Marketplace. Criminal IP is committed to offering advanced cybersecurity …

Apple To Unveil It’s Dedicated Password Manager For Ios Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple is set to make a significant announcement at the Worldwide Developers Conference (WWDC), which kicks off on June 10. According to Bloomberg’s Mark Gurman, the tech giant will introduce a new homegrown app called “Passwords,” designed to simplify users’ logging into websites and software. A New Era in Password Management The Passwords app is …

VS Code Marketplace Flaw Let Attackers Include Malicious Extensions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers identified security vulnerabilities in the VS Code Marketplace that could be exploited by malicious actors, as these flaws allowed extensions with malicious dependencies to gain credibility (through high install numbers) and access to user systems.  They found extensions that …

Safari, Microsoft Edge, & DuckDuckGo Spoofing Flaws Impacting Millions of Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

RedSecLabs security researchers Rafay Baloch and Muhammad Samaak have uncovered address bar spoofing vulnerabilities in widely used mobile browsers such as Safari, Microsoft Edge, and DuckDuckGo. These vulnerabilities have a significant impact, affecting millions of users worldwide. The Severity of …

Mozilla’s 0Day Investigative Network, Next Generation Bug Bounty Program

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Generative artificial intelligence (GenAI) is reshaping our world, from streamlining work tasks like coding to helping us plan summer vacations. As we increasingly adopt GenAI services and tools, we face the emerging risks of their malicious use. Security is crucial, …

PoC Exploit Published For SharePoint XML eXternal Entity (XXE) Injection Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new XXE (XML eXternal Entity) Injection has been discovered to affect SharePoint on both on-prem and cloud instances. This vulnerability has been assigned to CVE-2024-30043, and the severity has been given as 6.3 (Medium). However, successfully exploiting this vulnerability …

Frontier Communications Ransomware Attack: 750,000 Users’ Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Frontier Communications Parent, Inc. (the “Company”) detected unauthorized access to portions of its information technology environment. The breach, attributed to a likely cybercrime group, exposed the personal data of approximately 750,000 users. The Company promptly initiated its cyber incident response …

Bitdefender GravityZone Flaw Let Hackers Launch SSRF Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Bitdefender has recently fixed a critical Server-Side Request Forgery (SSRF) vulnerability in its GravityZone Console On-Premise, known as CVE-2024-4177. This flaw, discovered in the host whitelist parser, could have allowed malicious actors to exploit the system by sending crafted requests, …

Microsoft Made Changes to Recall Feature Following Controversial Security Concerns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced significant updates to its new Recall feature for Copilot+ PCs, following a wave of security and privacy concerns raised by experts and users. The Recall feature, set to debut on June 18th, is designed to enhance productivity …

North Korean Kimsuky APT Exploiting Facebook And MS Console For Targeted Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Facebook and MS Console are often targeted by hackers, as they contain a lot of personal and sensitive data that can be used for identity theft, phishing, and other harmful activities. When these systems are breached, threat actors use them …