FBI Releases Internet Crime Report for 2023 : 22% Surge Compared to 2022

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Federal Bureau of Investigation (FBI) has published its annual Internet Crime Report for 2023, highlighting a significant 22% increase in losses due to cybercrime, amounting to over $12.5 billion This surge underscores cyber criminals’ growing sophistication and audacity in exploiting …

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Company Open Sources FHE Libraries to Build Privacy-Preserving Blockchain and AI Applications for the First Time. An investment has been secured to bring Fully Homomorphic Encryption (FHE) to the fore, allowing developers to address data privacy challenges across blockchain and …

TA4903 Hackers Spoofing U.S. Government Entities To Steal Corporate Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TA4903 is a financially motivated cybercriminal threat actor who impersonates both US government institutions and private businesses across a wide range of industries.  The actor mostly targets organizations in the United States but occasionally those worldwide through high-volume email campaigns.  …

New xStealer Malware Debuted With Advanced Features

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new player has emerged with capabilities that pose risks to digital security. Dubbed xStealer, this malware has been designed to stay ahead of the curve with continuous updates and enhancements, ensuring it remains at the forefront of data-stealing technology. …

Cisco Secure Client Flaw let Attackers Trigger CRLF Injection Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has disclosed a critical vulnerability in the SAML authentication process of its Cisco Secure Client software. This vulnerability could potentially allow unauthenticated, remote attackers to conduct a Carriage Return Line Feed (CRLF) injection attack. This flaw poses a significant …

Beware Of New Money Laundering Attack Targeting UPI Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors target UPI users as UPI offers a convenient platform for transferring money, often with less severe security than traditional banking systems.  Due to fewer security measures, threat actors exploit user behavior and transaction process vulnerabilities to commit fraud, …

30,000+ Individuals Impacted in Fidelity Investments Third-party Data Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over 30,000 individuals have been left vulnerable after a third-party data breach involving Fidelity Investments Life Insurance Company (FILI). The breach, orchestrated through Infosys McCamish (IMS), a third-party service provider, has raised serious concerns about the security measures to protect …

ArubaOS Security Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ArubaOS-Switch belongs to Aruba Networks and it’s a subsidiary of HPE (Hewlett Packard Enterprise). It helps centralize network management, and besides this, it also develops diverse products related to networking. Security Analysts Discovered a multitude of vulnerabilities in ArubaOS-Switch Switches, …

Microsoft .NET Framework & Visual Studio Flaw Let Attackers Write or Delete Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability, CVE-2023-36049 has been identified in the Microsoft .NET Framework and Visual Studio, posing a serious threat to the integrity of FTP servers. If exploited, this flaw could allow attackers to write or delete files, compromising the security of …

Cisco Duo for Windows Logon and RDP Let Attacker Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability, CVE-2024-20301 has been identified in Cisco Duo Authentication for Windows Logon and Remote Desktop Protocol (RDP), posing a security risk to affected systems. This flaw could allow an authenticated, local attacker to bypass secondary authentication mechanisms and …