CISA, NSA & FBI Warns of Volt Typhoon Attacking Targeting Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity and Infrastructure Security Agency (CISA), along with the National Security Agency (NSA), the Federal Bureau of Investigation (FBI), and international partners, have issued a stark warning about a sophisticated cyber threat group known as “Volt Typhoon.” This group, backed …

Hackers Advertising GlorySprout Stealer On Popular Hacking Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use stealers to gather sensitive information, for example, login credentials, financial data, or personal details from victims’ devices. These stolen credentials can be employed in countless nefarious acts such as identity theft, financial fraud, or account hacking. RussianPanda recently …

PoC Published for Critical RCE Vulnerability in Fortra FileCatalyst

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof of Concept (PoC) has been published for a critical Remote Code Execution (RCE) vulnerability identified in Fortra’s FileCatalyst software. This vulnerability, tracked as CVE-2024-25153, poses a severe threat to organizations using the FileCatalyst Workflow Web Portal. It potentially …

900+ Websites Exposing 100M+ Accounts Including Plaintext Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New research has revealed that more than 900 websites had a serious misconfiguration, which exposed a massive 125 million user records, including plaintext passwords and sensitive billing information. These results come after researchers scanned the entire internet for exposed PII …

Hackers Use Fingertip Friction Sound To Steal Fingerprints

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have unveiled a new cybersecurity threat that could compromise the integrity of fingerprint authentication systems worldwide. The method, dubbed “PrintListener,” exploits the sound of fingertip friction on smartphone screens to infer and reconstruct users’ fingerprints, potentially unlocking access to …

UK’s NCSC Releases SCADA Security Guidance to the Cloud

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The National Cyber Security Centre (NCSC) of the United Kingdom has recently published a comprehensive set of guidelines designed to assist organizations in securely transitioning their Supervisory Control and Data Acquisition (SCADA) systems to cloud environments. This move comes as …

133,000+ Vulnerable FortiOS/FortiProxy Instances : Exploitation Started

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has been identified in Fortinet’s FortiOS and FortiProxy, potentially affecting over 133,000 devices worldwide. The flaw, tracked as CVE-2024-21762, is an out-of-bounds write vulnerability that could allow a remote, unauthenticated attacker to execute arbitrary code or …

Pentagon Received 50,000+ Vulnerability Reports Since November 2016

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Department of Defense (DoD) Cyber Crime Center (DC3) recently announced a significant milestone in its cybersecurity efforts. The processing of over 50,000 vulnerability reports since the inception of its Vulnerability Disclosure Program (VDP) in November 2016.  This program, a …

Cisco Completes Acquisition of Splunk for $28 Billion

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has officially completed its acquisition of Splunk for a staggering $28 billion. This strategic acquisition marks a milestone in Cisco’s journey. It promises to revolutionize how organizations leverage data to connect and protect every aspect of their operations. The …

87% of UK Organisations are Vulnerable to Cyberattacks : Microsoft AI Research

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a groundbreaking report released by Microsoft, in collaboration with Dr. Chris Brauer of Goldsmiths, University of London, an alarming 87% of UK organizations have been identified as vulnerable to cyberattacks, highlighting a critical juncture in the nation’s cybersecurity and …