Yoast SEO Plugin XSS Flaw Exposes 5 Million+ WordPress Websites to Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular Yoast SEO WordPress plugin, potentially putting over 5 million websites at risk of compromise. The flaw was found by security researcher Bassem Essam and reported via the Wordfence …

MITRE Shares Details on Nation-State Hackers’ Intrusion into Research Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The MITRE Corporation, a not-for-profit organization that operates research and development centers for the U.S. government, has disclosed that sophisticated nation-state hackers recently compromised one of its internal research and development networks. The intrusion, believed to have been carried out …

Oracle Weblogic Server Flaw Allows Attackers Full Control – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new secondary JNDI injection vulnerability was discovered in a recent version of WebLogic, allowing attackers to trigger JNDI injection during another JNDI lookup process, effectively enabling Remote Code Execution (RCE) on the targeted system.  A patch has been implemented …

Microsoft Defender XDR Expanded to Malicious OAuth Apps With the Power of AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an update to its security operations suite, Microsoft has announced the expansion of its Defender Extended Detection and Response (XDR) capabilities to include advanced AI-powered detection and mitigation of threats posed by malicious OAuth applications. This enhancement is part …

Beware! 150+ SSH Accounts With Root Access Advertised On Hacker Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development for cybersecurity, over 150 SSH accounts with root access are currently being advertised for sale on various hacker forums. These accounts reportedly provide unrestricted administrative access to Virtual Private Servers (VPS), posing a significant threat to …

New CraxsRAT Version Claims Capability To Bypass Google Play Antivirus

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development in the cybersecurity landscape, the latest version of CraxsRAT, known as v7.4, has been released with claims of enhanced capabilities, including the ability to bypass Google Play Protect, Google’s built-in antivirus system for Android devices. This …

SandStorm Hackers Added New Kapeka Tool to it’s Arsenal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kapeka, also known as KnuckleTouch, is a sophisticated backdoor malware that has been making waves in the cybersecurity world.  Initially appearing in mid-2022, it wasn’t until 2024 that Kapeka was formally tracked due to its involvement in limited-scope attacks, particularly …

Why Your VPN May Not Be As Secure As It Claims

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

May 6, 2024 0 Comments Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via …

New Cuckoo Malware Attacking macOS Users to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a new malware strain dubbed “Cuckoo.” This malicious software exhibits characteristics of both spyware and an infostealer, targeting both Intel and ARM-based Macs with sophisticated tactics to extract sensitive information. Discovery and Analysis The malware, named …

Finland Warns Of New Android Malware Stealing Banking Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Watch out for harmful Finnish SMS, which tricks Android device users into loading banking malware by dialing a spoofed service number. It is directed at online banking systems to steal money, whereas iPhones are unaffected.  Delete such messages, avoid downloading …