Hackers Hijacked Notepad++ Plugin To Inject Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have manipulated a popular Notepad++ plugin, injecting malicious code that compromises users’ systems upon execution. The AhnLab Security Intelligence Center (ASEC) researchers have revealed that the “mimeTools.dll” plugin, which …

Multiple Chinese Hacking Groups Exploiting Ivanti Connect Secure VPN Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity firm Mandiant has uncovered a series of sophisticated cyberattacks targeting Ivanti Connect Secure VPN appliances. These attacks, attributed to multiple Chinese nexus espionage groups, exploit critical vulnerabilities to facilitate …

Magento Vulnerability Let Attackers Inject Backdoor On E-commerce Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated vulnerability within the Magento ecommerce platform has been unveiled, posing a significant threat to online merchants and shoppers alike.  The vulnerability, identified as CVE-2024-20720, allows attackers to inject …

Hackers Claiming XpressBees Data Leak: 95K User Personal Data Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The logistics and supply chain company XpressBees has become the latest victim of a data breach. A user by the alias “IntelBroker” on the notorious BreachForums community has claimed responsibility …

Apache HTTP Server Flaw Let Attackers Inject Malicious Headers Amd HTTP/2 DoS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache released updates to address several vulnerabilities impacting the Apache HTTP server that let attackers launch HTTP/2 DoS attacks and insert malicious headers. Server operations are being adversely affected by these …

Cyber Attack Hits World’s Second Largest Lens-maker

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HOYA CORPORATION, the world’s second-largest lens manufacturer, has reported an IT system incident that has disrupted its operations. The Tokyo-based company, known for its advanced optics technology and a broad …

Google Pixel Phone Zero-days Exploited by Forensic Firms in the Wild : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Pixel Update Bulletin details security vulnerabilities and functional improvements for supported devices. Updating to the April 2024 security patch level (2024-04-05 or later) addresses all these issues and those …