Zscaler Client Connector Zero-interaction Privilege Escalation Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new privilege escalation vulnerability has been discovered in Zscaler Client Connector, combining three different vulnerabilities. The three vulnerabilities were associated with Reverting password check (CVE-2023-41972), arbitrary code execution (CVE-2023-41973), …

Spyware Website Leaking People’s Phones Real-Time Screenshots Online

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A stalkerware company with poor security practices is exposing victims’ data as the software, designed for unauthorized device monitoring, leaked victims’ phone screenshots through a publicly accessible URL.  The incident …

Critical Vulnerability In AI-As-A-Service Provider Let Attackers Access Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability was found in the Replicate AI platform that could have exposed the private AI models and application data of all its customers. The vulnerability stemmed from challenges …

Sav-Rx Discloses Data Breach: 2.8 Million Users Affected

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Sav-Rx, a healthcare company based in Fremont, Nebraska, has disclosed a major data breach affecting over 2.8 million individuals, including 5,935 Maine residents. The company, which operates under the legal …

Hackers Attacking Check Point Remote Access VPN Devices to Breach Enterprise Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Check Point Software Technologies recently issued an advisory regarding an ongoing campaign by threat actors to breach enterprise networks by targeting Remote Access VPN devices. This development underscores the growing …

Hackers use the Greatness PaaS tool to Steal Microsoft 365 login credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Phishing-as-a-Service (PaaS) tool called Greatness is being used by cybercriminals to steal Microsoft 365 login credentials. First detected in 2022, Greatness allows attackers to bypass security measures and …

Threats Actors Delivering Remcos RAT Distributed as UUE (Uuencoding) File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AhnLab Security Intelligence Center (ASEC) has confirmed the accuracy of the Remcos RAT malware being distributed through UUE (UUEncoding) files compressed with Power Archiver. This sophisticated method of malware distribution …