MOVEit Transfer Critical Vulnerability Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MOVEit Transfer software was discovered to be vulnerable to a potential privilege escalation and unauthorized access to the environment. Users are recommended to take the actions mentioned below until a patch is released by the MOVEit team. SQL Injection (CVE …

New Zero-Click iOS Malware Actively Attacks iPhone Through iMessage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New Zero-Click iOS Malware Actively Attacks iPhone Through iMessage By Guru – June 2, 2023 Kaspersky recently reported that a number of iPhones connected to its network were compromised through an iOS vulnerability.  The attackers exploited iMessage’s zero-click exploits, allowing …

‘Migraine’ Flaw Let Hackers Bypass macOS Security Integrity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently discovered vulnerability called “Migraine” is linked to macOS migration and poses a serious threat.  It enables attackers with root privileges to circumvent System Integrity Protection (SIP) on macOS, granting them unrestricted control over the compromised device. The security …

Ghost Sites – Hackers May Steal Corporate Data From Deactivated Salesforce Communities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Varonis Threat Labs discovered that some Salesforce sites were improperly deactivated or unmaintained SalesforceGhost Sites. Threat actors can exfiltrate PII and business data by simply manipulating the host headers for these websites. Salesforce partners and customers are provided …

Ransomware Attack Prevention Checklist – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Businesses face significant hazards from ransomware attacks, which are capable of causing severe damage in a brief period. Over the past few years, numerous well-known companies, including CNA Financial, JBS Foods, and Colonial Pipeline, have fallen victim to such attacks, …

Network Security Checklist – Complete Guide To Protect Enterprise Networks – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Network security is paramount in today’s digital landscape, where organizations face increasingly sophisticated threats. This guide presents a detailed Network Security checklist with examples to help you establish robust protection and minimize vulnerabilities. Network Security Musts: The 7-Point Checklist – …

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been altered or tampered with. Both of these qualities make stolen or ill-gotten code-signing certificates attractive …

Beware of New Cryptomining Malware Delivered Using TeamViewer Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In May 2023, Huntress ThreatOps Center analysts detected a cryptocurrency miner (XMRig) on an endpoint, identified the miner’s associated site and wallet address by locating the config file, and validated the infection. The analyst observed activity on numerous infected endpoints, …

Chrome 114 Released With Fix for 16 Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

For Windows, Mac, and Linux, Google has released Chrome 114 to the stable channel. The next few days/weeks will see the implementation of this. According to the official statement, it fixes 16 security flaws. There are eight security issues with a …

DogeRAT Android Malware Mimic Popular Apps to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DogeRAT (Remote Access Trojan) is an open-source Android malware that targets a sizable customer base from various businesses, particularly banking, and entertainment.  CloudSEK’s TRIAD team detected it. Although this campaign primarily targeted consumers in India, it aims to be accessible …