87% of UK Organisations are Vulnerable to Cyberattacks : Microsoft AI Research

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a groundbreaking report released by Microsoft, in collaboration with Dr. Chris Brauer of Goldsmiths, University of London, an alarming 87% of UK organizations have been identified as vulnerable to cyberattacks, highlighting a critical juncture in the nation’s cybersecurity and …

WARNING: Hackers’ New Favorite Tool – Weaponized SVG Files!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors use SVG files in cyber-attacks because SVGs (Scalable Vector Graphic files) can contain embedded scripts, making them a vector for executing malicious code.  Not only that even the SVG files can also bypass certain security measures as well …

LockBit Ransomware is Back From the Dead : Is Your SOC/DFIR Team Prepared?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Law enforcement disrupted LockBit ransomware operations in February, seizing infrastructure and their website. Regretfully, the victory appears to have been temporary. The gang’s leading members were not detained, and Operation Cronos’s defeat was only temporary since the group bounced back …

Chinese APT Hackers Exploits Government Web & Exchange Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Advanced Persistent Threat (APT) campaign, dubbed Earth Krahang, has emerged with a focus on infiltrating government entities across the globe. This campaign, active since early 2022, has been linked to a China-nexus threat actor, previously identified as Earth …

Critical Zoom Clients Flaw Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability classified as improper input validation was found in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows that could potentially allow an authenticated attacker to gain access to sensitive information on …

What is CNAPP ? How It Benefits for Multi-Cloud & Hybrid Infrastructure Protection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multi-cloud and hybrid infrastructures are becoming the norm among enterprises nowadays. Around 9 in 10 companies use a multi-cloud strategy, while 8 in 10 adopt a hybrid. This is not surprising, given the many advantages, including vendor independence, simplified management, …

Korenix JetlO 6550 Vulnerability Lets Attackers Gain Unauthorized Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Hadess have identified a critical vulnerability in the widely-used Korenix JetlO industrial Ethernet switch series. The flaw tracked as CVE-2024-2371 could allow attackers to gain unauthorized access to sensitive data within critical infrastructure and industrial control systems (ICS). …

Beware of Fake Chrome Update that Installs Cerberus Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new threat looms over Android users, masquerading as a routine Chrome update. This deceptive tactic breaches trust and directly assaults personal security, installing the notorious Cerberus banking malware onto unsuspecting devices. Here’s what you need to know about this …

Fujitsu Hacked – Attackers Stolen Personal Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fujitsu has announced the discovery of malware on several of its business computers, raising concerns over the potential leak of files containing personal and customer information.  The incident, disclosed on March 15, 2024, underscores the growing threats to corporate data …

Malware Alert! Hackers Attacking Indian Android users With Malware-as-a-Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware campaign has been identified targeting Android users in India. This sophisticated attack distributes malicious APK packages to compromise personal and financial information. The malware, available as a Malware-as-a-Service (MaaS) offering, underscores the evolving threat landscape in the …