Critical Bitdefender Vulnerabilities Let Attackers Gain Control Over System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Bitdefender GravityZone Update Server (versions 6.36.1, Endpoint Security for Linux 7.0.5.200089, and Endpoint Security for Windows 7.9.9.380) is vulnerable to server-side request forgery (SSRF) due to an incorrect regular expression.  The weakness allows an attacker to send crafted requests to …

Ukrainian Hackers Hijacked 87,000 Sensors to Shut down Sewage System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ukrainian hackers have successfully infiltrated and disabled a vast network of industrial sensors and monitoring infrastructure in Russia, leading to a significant shutdown of sewage systems, among other utilities. The group, known as BlackJack, executed the attack on the 9th …

Zscaler Acquires Airgap Networks to Enhance Zero Trust SASE

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zscaler has announced the acquisition of Airgap Networks, a company renowned for its agentless segmentation technology. This acquisition is set to redefine the way enterprises protect their internal traffic, particularly in IT and Operational Technology (OT) environments. Cybersecurity rapidly evolves, …

Why CISA is Warning CISOs About a Breach at Sisense

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

April 11, 2024 0 Comments The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online …

Critical Node.js Flaw Lets Attackers Execute Malicious Code on Windows Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Node.js project disclosed a high-severity vulnerability affecting multiple active release lines of its software on Windows platforms. This flaw, identified as CVE-2024-27980, allows attackers to execute arbitrary commands on affected systems, posing a serious risk to applications and services built …

Multiple Palo Alto Networks Firewall Flaws Let Attackers Cause Disruption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has recently disclosed four high-severity vulnerabilities in its firewall products. If exploited, these flaws could allow attackers to disrupt services by causing a denial of service (DoS) or manipulating user access controls. The vulnerabilities are tracked as …

AT&T Breach Update: 51 Million Customers’ Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AT&T has confirmed that a data breach has impacted the personal information of 51 million current and former customers. A significant data breach has been uncovered in recent times, following a series of investigations and reports. The scale of the …

Financial Sectors Lost $20 Billion Over the Past 20 Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a startling revelation, cyberattacks have surged to more than double their pre-pandemic levels, casting a long shadow over global financial stability. The International Monetary Fund (IMF) highlighted this alarming trend in its April 2024 Global Financial Stability Report, underscoring …

Multiple Adobe Security Vulnerabilities Let Attackers Execute Arbitrary Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A product security incident response team (PSIRT) manages a vulnerability disclosure program by acting as a single point of contact for external reporters, including customers, partners, penetration testers, and security researchers.  They provide a standardized process for reporting security vulnerabilities …

Cypago Announces New Automation Support for AI Security and Governance

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyber GRC software company Cypago has announced a new automation solution for artificial intelligence (AI) governance, risk management and compliance. This includes implementation of NIST AI RMF and ISO/IEC 42001, the newest AI security and governance frameworks. With more and …