Microsoft SharePoint Server Vulnerabilities Chained to Achieve Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft SharePoint Server was reported with two vulnerabilities, CVE-2023-29357 and CVE-2023-24955, which threat actors can use for achieving remote code execution (RCE) against Microsoft SharePoint Server. These vulnerabilities were discovered as part of the Zero Day Initiative’s Pwn2Own contest conducted …

Chinese Hackers Breached Microsoft’s Email Platform to Steal 60,000+ US Govt Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant cybersecurity breach, Chinese hackers successfully infiltrated Microsoft’s email platform earlier this year, leading to the theft of tens of thousands of emails from the U.S. State Department accounts, according to information shared by a Senate staffer who …

Google Fixes Actively Exploited Zero-day Vulnerability : Patch Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Chrome version 117.0.5938.132 for Windows, Mac, and Linux has been set to release with multiple bug fixes and features. As per Google, this new version will be rolled out in a few weeks or days. Previously, Google has fixed …

New GPU Side Channel Vulnerability Impacts GPUs from Intel, AMD, Apple & Nvidia

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new research paper has been published that mentions a side-channel attack that threat actors can exploit to leak sensitive visual data from modern GPU cards when visiting a malicious website. This method was published under the name “GPU.zip” by …

Firefox 118 Released with the fix for 6 High-Severity Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mozilla has recently launched Firefox 118, which addresses a total of nine security vulnerabilities. Notably, this release effectively resolves six high-severity vulnerabilities that were previously identified. The majority of vulnerabilities identified are associated with memory-related concerns, which have the potential …

Cisco DNA Center Vulnerability Let Attacker Modify Internal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security flaw has been identified in the Cisco DNA Center, which can potentially enable unauthorized access by a remote attacker. This vulnerability could allow the attacker to view and manipulate data within a repository associated with an internal service …

Threat Actors Use Abnormal Certificates to Deliver Info-stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malicious certificates can be highly dangerous as they can be used to deceive users into trusting malicious websites or software. This can lead to various security threats, including:- Data breaches Malware infections Phishing attacks Compromise user privacy Compromise system integrity …

‘Ransomed.Vc’ Group Attacking Japanese Giants in New operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the ever-evolving cyber threat landscape, Ransomed.vc, a ransomware syndicate with a rapidly growing reputation on the Dark Web, has once again made headlines. This time, their target is Japan’s telecommunications giant, NTT Docomo.  This development comes hot on the heels …

OPNsense Firewall Flaws Let Attackers Employ XSS to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OPNsense is a firewall and routing platform that is based on FreeBSD. It is open-source, making it freely available for use. Additionally, OPNsense is designed to be user-friendly, with a straightforward interface and simple installation process. Furthermore, it offers the …

HiddenGh0st Malware Attacking MS-SQL & MySQL Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A remote control malware called Gh0st RAT, which is popular with Chinese threat actors and has publicly available source code was created by China’s C. Rufus Security Team. ASEC (AhnLab Security Emergency Response Center) finds the Gh0st RAT variant using …