Hackers Claiming XpressBees Data Leak: 95K User Personal Data Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The logistics and supply chain company XpressBees has become the latest victim of a data breach. A user by the alias “IntelBroker” on the notorious BreachForums community has claimed responsibility for the leak, which purportedly exposes the personal information of …

Apache HTTP Server Flaw Let Attackers Inject Malicious Headers Amd HTTP/2 DoS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache released updates to address several vulnerabilities impacting the Apache HTTP server that let attackers launch HTTP/2 DoS attacks and insert malicious headers. Server operations are being adversely affected by these vulnerabilities, which are proving to be a serious danger. A …

Cyber Attack Hits World’s Second Largest Lens-maker

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HOYA CORPORATION, the world’s second-largest lens manufacturer, has reported an IT system incident that has disrupted its operations. The Tokyo-based company, known for its advanced optics technology and a broad range of healthcare and imaging products, confirmed the cyber attack …

New Fake E-Shopping Attack Hijacking Users Banking Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fake e-shop scam campaign has been targeting Southeast Asia since 2021, as CRIL observed a surge in activity in September 2022, with the campaign expanding from Malaysia to Vietnam and Myanmar.  The attackers use phishing websites to distribute a …

Google Pixel Phone Zero-days Exploited by Forensic Firms in the Wild : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Pixel Update Bulletin details security vulnerabilities and functional improvements for supported devices. Updating to the April 2024 security patch level (2024-04-05 or later) addresses all these issues and those included in the April 2024 Android Security Bulletin.  The device’s …

Rhadamanthys Stealer Using Weaponized PDF Files To Attack Oil And Gas Sector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use weaponized PDF files as they have the ability to incorporate malicious codes or scripts within a well-known and trusted form of PDF which is often not detected by security measures. If the person opens one such malicious document, …

VMware SD-WAN Vulnerabilities Let Attackers Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple security flaws affecting VMware SD-WAN have been addressed, allowing arbitrary commands to be executed on the intended system. If these vulnerabilities are successfully exploited, enterprises that use VMware SD-WAN to manage their network connections may be exposed to serious …

Chrome Zero-Day Vulnerability Exploited At Pwn2Own : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google fixed three vulnerabilities in the Chrome browser on Tuesday, along with another zero-day exploit that was exploited during the Pwn2Own Vancouver 2024 hacking contest. Google recently fixed two more zero-day vulnerabilities that were exploited during the Pwn2Own hacking competition. Palo Alto …

D-Link NAS Command Injection Flaw : 92,000 Devices Affected

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new command injection vulnerability and a backdoor account have been discovered in D-Link Network Attached Storage devices, which affects D-Link NAS devices, including DNS-340L, DNS-320L, DNS-327L, and DNS-325, among others. This exists in the nas_sharing.cgi file of these devices …

HTTP/2 Continuation Flood Attack : Single Machine Can Bring Down Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Bartek Nowotarski disclosed a new class of vulnerabilities within the HTTP/2 protocol, known as the HTTP/2 CONTINUATION Flood. This attack vector is proving to be a significant threat, potentially more dangerous than the previously known Rapid Reset attack. …