Beware of Fake Google Chrome Update Pop-Ups that Installs Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the ever-changing cybersecurity landscape, a persistent threat appears in the form of a fake Chrome update.  Usually, these efforts involve injecting harmful code into a website, which prompts individuals to update their web browsers with a popup message.  A …

270GB of New York Times Internal Data and Source Code Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An anonymous hacker has claimed to have leaked 270 GB of internal data and source code from The New York Times (NYT) on the controversial image board 4chan. The leak, reportedly containing over 5,000 repositories and 3.6 million files, was …

Hackers Attack ThinkPHP By Injecting Payload From Remote Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are constantly evolving their TTPs and developing new malicious tools to execute their activities. Recently, Akamai researchers have noted a concerning trend of attackers exploiting known vulnerabilities, such as the years-old ThinkPHP RCE CVE-2018-20062 and CVE-2019-9082.  Initially detected …

TotalRecall: A New Tool that Extracts Dara From Windows 11 Recall Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft’s Windows Recall is a new feature for Copilot+ PCs, announced in May 2024. It takes periodic screenshots (every 5 seconds when screen content changes) and stores them locally on the device.  Users can then search this history using natural …

Wineloader Mimic As Ambassador Of India To Start The Infection Chain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ARC Labs delved into the intricacies of the Wineloader backdoor, a sophisticated tool used in spearphishing campaigns linked to the notorious APT29 group, also known as NOBELIUM or COZY BEAR. This analysis aims to provide defenders with detection guidance and …

Huge Surge in Attacks Exploiting Check Point VPN Zero-Day Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Check Point published an advisory regarding a critical vulnerability, CVE-2024-24919, which has since seen a surge in exploitation attempts. The vulnerability, rated with a CVSS score of 8.6, allows attackers to access sensitive information on the Security Gateway, potentially leading …

PoC Exploit Released for High Severity Apache HugeGraph RCE flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a high-severity Remote Code Execution (RCE) vulnerability in the Apache HugeGraph Server. This vulnerability, identified as CVE-2024-27348, affects versions of HugeGraph Server before 1.3.0 and has been assigned a CVSS score of …

Microsoft to Disable NTLM, Transition to Kerberos Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has made an announcement regarding the gradual phasing out of all versions of NTLM (NT LAN Manager). This decision is part of Microsoft’s ongoing efforts to harden Windows against various security threats and vulnerabilities. The announcement for deprecated features …

Cisco Finesse Vulnerabilities Let Attackers Perform Stored XSS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has issued a security advisory detailing multiple vulnerabilities in Cisco Finesse’s web-based management interface. These vulnerabilities, identified as CVE-2024-20404 and CVE-2024-20405, could allow unauthenticated, remote attackers to perform a stored cross-site scripting (XSS) attack. The vulnerabilities in question involve …

Chrome Introduced Shared Memory Versioning to Enhance Browser Performance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Chrome recently implemented Shared Memory Versioning, improving its speed through more effective cookie handling. This upgrade improves Chrome and other Chromium-powered browsers like Microsoft Edge and Vivaldi. Resource contention arises as more people rely on the Internet to do …