Foxit PDF Reader and Editor Flaw Let Attackers Escalate Privilege

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Foxit PDF reader has been discovered with a new privilege escalation vulnerability that allows a low-privileged user to escalate their privileges. This vulnerability has been assigned with CVE-2024-29072 and the …

Moonstone Sleet New North Korean Hacker Group With Unique Tricks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789). This actor uses a combination of many tried-and-true techniques used by other North Korean …

Hackers Weaponizing Microsoft Office Documents to Deploy Malware in Business Environments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Office allows one to generate a professional business report on office365 or write college essays, prepare CVs, take notes, and perform analysis.  These offer text and data editing, like …

U.S. Sanctions Cybercrime Network Behind Massive Residential Proxy Bothnet Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The United States has imposed sanctions on a cybercrime network responsible for operating a massive residential proxy botnet service to combat cybercrime. This network, 911.re, has been implicated in various …

Citrix Workspace app Let Attackers Elevate Privileges From Local User to Root User

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has been identified in the Citrix Workspace app for Mac, potentially allowing attackers to elevate their privileges from a local authenticated user to a root user. …

Hackers Claim Ticketmaster Data Breach: 560M User Details and Payment Card Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a dramatic turn of events, hackers have claimed a massive data breach involving Ticketmaster, allegedly exposing the details of 560 million users and their payment card information. This claim …

Russian Hackers Charged For Selling Unauthorized Access To Computer Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Russian citizen has been indicted for working as an “access broker” and selling unauthorized access to computer networks, including a victim company in New Jersey, U.S. Attorney Philip R. …

PoC Exploit Released for Critical Fortinet FortiSIEM Command Injection Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Fortinet’s FortiSIEM. The vulnerability, CVE-2024-23108, allows for remote, unauthenticated command execution as root. This article delves into the …

UAC Bypass: 3 Methods Used Malware In Windows 11 in 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

User Account Control (UAC) is one of the security measures introduced by Microsoft to prevent malicious software from executing without the user’s knowledge. However, modern malware has found effective ways …