PoC Exploit Released for Ivanti EPMM MobileIron Core

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly disclosed vulnerability, CVE-2024-22026, has been found in Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core. This vulnerability allows a local attacker to gain root access to affected systems. The severity of this vulnerability is currently undetermined. CVE-2024-22026: Local …

Hackers Exploiting Microsoft’s Quick Assist Tool To Deliver Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often target remote assist tools because they create a direct channel to access desired systems with minimum effort.  These tools have been built for remote control and access purposes, which makes them very appealing targets for attackers looking to …

Earth Hundun Hacker Group Employs Advanced Tactics to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Earth Hundun, a notable Asia-Pacific malware organization, uses Waterbear and Deuterbear. We first encountered Deuterbear in Earth Hundun’s arsenal in October 2022, signaling its implementation. The industry distribution of endpoints infected by Waterbear and Deuterbear since 2022. This report describes …

Palo Alto Networks Buys IBM’s QRadar

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Palo Alto Networks has made a significant decision to enhance its cloud security services by acquiring IBM’s QRadar cloud security assets. The acquisition will allow Palo Alto Networks to integrate IBM’s QRadar security information and event management (SIEM) software into …

Apple Safari Zero-Day Flaw Exploited At Pwn2Own : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has released security updates to address a zero-day vulnerability in its Safari web browser that was exploited during this year’s Pwn2Own Vancouver hacking competition.  This issue, identified as CVE-2024-27834, was fixed by enhanced checks on macOS Monterey and macOS …

Authorities Seized Notorious Data Leak Site BreachForums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious data leak site BreachForums has been taken over by the police. Cybercrime and data leaks are still being fought, but this is a big win. A Brief History of BreachForums As a replacement for the notorious RaidForums, BreachForums …

LogRhythm and Exabeam to Merge to Boost SIEM & SOAR

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LogRhythm and Exabeam, two leading cybersecurity companies, announced today their intent to merge in a transformative deal that will create a powerful force in the security operations and analytics market. LogRhythm is a world-class cybersecurity company that delivers comprehensive security …

Critical SAP NetWeaver & CX Commerce Flaw Leads To Complete Takeover

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three vulnerabilities associated with CSS injection, file upload, and remote code execution have been discovered in the SAP Customer Experience (CX) commerce cloud and SAP Netweaver Application. These two vulnerabilities have been assigned with CVE-2019-17495 and CVE-2022-36364.  The severity of …

Wireshark 4.2.5 Released: What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Wireshark team has announced the release of Wireshark 4.2.5, a maintenance update to the popular network protocol analyzer. This new version brings important security fixes and improvements to the widely-used tool. Wireshark is a well-known open-source network protocol analyzer …

Google Chrome Zero-day Vulnerability (CVE-2024-4947) Actively Exploited in The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has released an emergency security update for its Chrome web browser to patch a high-severity vulnerability that is being actively exploited by attackers in the wild. The zero-day flaw, tracked as CVE-2024-4947, is a type confusion bug in the …