Critical Android Vulnerability Impacting Millions of Pixel Devices Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An Android package, “Showcase.apk,” preinstalled on a significant portion of Pixel devices since 2017, possesses extensive system permissions enabling remote code execution and package installation.  It fetches a configuration file …

Microsoft Announced Multifactor Authentication is Mandatory for Azure Sign-Ins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced a significant security enhancement for its Azure platform: starting in 2024, all Azure sign-in attempts will require multifactor authentication (MFA). This move underscores Microsoft’s commitment to providing …

Kubernetes Vulnerability Exposes Clusters to Command Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently discovered vulnerability in Kubernetes has raised significant concerns within the cybersecurity community. Akamai researcher Tomer Peled identified a design flaw in Kubernetes’ sidecar project, git-sync, which could allow …

Zimbra XSS Flaw Allows Hackers to Execute Malicious JavaScript Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw has been discovered in the Zimbra Collaboration Suite (ZCS), potentially allowing hackers to execute malicious JavaScript code. This cross-site scripting (XSS) flaw, identified as CVE-2024-33533, has …

Cyber Alert! Small Businesses Should Enhance Their Cyber Defenses – NCSC Guide (PDF)

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent revelation, law enforcement figures have highlighted a concerning rise in cyber attacks targeting small businesses. The City of London Police reported 1,227 incidents in 2022, which experts …

Brain Cipher Ransomware Analysis & Detection with Cynet’s All-in-One Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On June 20, 2024, government services were knocked offline as a cyberattack rocked the Indonesian National Data Center. Investigators would attribute the outage to a new hacker group infecting targets …

New Threat Actors Tools Found to be Bypassed Antivirus & Delete Backups

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent Digital Forensics and Incident Response (DFIR) report has uncovered various sophisticated tools threat actors employ to bypass major security defenses. These tools have been found to effectively circumvent …

Undocumented Malware Platform “Cyclops” Lets Hackers to Write Arbitrary Commands on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have uncovered a new and previously undocumented malware platform named “Cyclops.” Written in the Go programming language, Cyclops has been linked to the notorious hacking group Charming Kitten, also …