TeamViewer macOS Client Vulnerability Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been identified in the TeamViewer Client for macOS. If exploited, this flaw could allow attackers to escalate their privileges on the system, posing a severe security risk to users. The issue has been addressed in the …

Agenda Ransomware Attacking VMWare vCenter & ESXi servers WorldWide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Agenda ransomware group, also known by its aliases Qilin and Water Galura, has been ramping up its attacks globally. This nefarious group has focused on the United States, Argentina, Australia, and Thailand, and it has been targeting industries critical to …

Google Revealed Kernel Address Sanitizer to Harden Android Firmware & Beyond

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has unveiled its latest initiative the implementation of the Kernel Address Sanitizer (KASan) to enhance firmware security. This development comes as the focus on lower-level firmware security intensifies, given its critical role in device security. Traditionally, this area has …

BlueDucky: A New Tool Exploits Bluetooth Vulnerability With 0-Click Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new tool dunned BlueDucky, automating the exploitation of a critical Bluetooth pairing vulnerability that allows for 0-click code execution on unpatched devices. This revelation comes on the heels of Marc Newlin’s January 2024 publication of a proof of concept …

7 Chinese Govt Hackers Charged for 14-year hack campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The US Department of Justice (DOJ) has unsealed an indictment charging seven Chinese nationals with computer hacking and wire fraud conspiracies.  These individuals are accused of being part of a hacking group known as APT31, which the DOJ alleges is …

Recent ‘MFA Bombing’ Attacks Targeting Apple Users

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

March 26, 2024 0 Comments Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple’s password reset feature. In this scenario, a target’s Apple devices are forced to display …

macOS Flaw Let Attackers Escalate Privilege & Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw impacting macOS has been uncovered that gives unauthorized users, including those with guest access, the capacity to escalate privileges and take complete root control of the system. According to the security researcher Yann Gascuel of Alter Solutions, the …

Adobe ColdFusion Flaw Let Attackers Gain Access to Sensitive Files – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has addressed a critical vulnerability in its ColdFusion software, which could have allowed attackers to read files arbitrarily from the system. The flaw, identified as CVE-2024-20767, has been patched, but the details surrounding the vulnerability shed light on the …

CISA & FBI : Hackers Exploiting SQL Injection Flaws To Hack Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA and the FBI released the Secure by Design Alert to address SQL injection vulnerabilities in software that affect thousands of organizations. A persistent class of defects in commercial software solutions is SQL injection, or SQLi, vulnerabilities. Even though SQL …

New Zealand Parliamentary Network Hacked by Chinese Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New Zealand has joined the United Kingdom in strongly condemning the People’s Republic of China (PRC) for its state-backed cyber activities, which have recently targeted democratic institutions, including the UK’s Electoral Commission and Members of Parliament. This stance against cyber-enabled …