MedStar Health Breach: Hackers Accessed Emails & Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MedStar Health, a primary healthcare provider in the United States, has reported a significant data breach involving unauthorized access to three employees’ email accounts. This breach has potentially compromised the personal information of approximately 183,000 patients. Details of the Breach …

Multiple Xiaomi Android Devices Vulnerability Let Attackers Hijack Phones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several security experts have recently discovered that Xiaomi Android devices are suffering from a range of security vulnerabilities that affect several apps and system components. These vulnerabilities pose a severe threat to users’ data privacy and device security. Xiaomi’s users …

Internal Communication Gaps Exposes Organizations to Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The alignment between security teams and executive management is crucial. However, a significant communication gap within organizations is increasingly becoming vulnerable, exposing them to sophisticated cyber threats. This issue is highlighted in the 2024 Global CISO Report by Dynatrace, which …

AI Powered Deepfake Detector to Combact Deepfakes Threats

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

McAfee has introduced a significant upgrade to its AI-powered deepfake detection technology. This enhancement, developed in collaboration with Intel, aims to provide a robust defense against the escalating threat of deepfake scams and misinformation. The McAfee Deepfake Detector utilizes the …

10 Best Active Directory Management Tools 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Active Directory management is the practice of overseeing and controlling Active Directory (AD), a Microsoft technology used for managing networks. It involves tasks like overseeing network resources, safeguarding data, organizing information, setting up and managing user accounts, and implementing security …

PostgreSQL Security Flaws Let Attackers Execute Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two vulnerabilities have been identified in pgAdmin of PostgreSQL, which are associated with cross-site scripting and multi-factor authentication bypass. pgAdmin is an open-source administration tool and development platform for PostgreSQL, which offers multiple features like CI/CD, Server Mode, Workspace customization, …

NVIDIA ChatRTX for Windows Vulnerability Lets Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NVIDIA, a leading technology company, has recently released a security update regarding its Windows ChatRTX application. The update reveals the presence of several vulnerabilities that attackers could exploit to carry out malicious activities. These vulnerabilities include the ability to gain …

Russian Hackers Exploit Outlook Flaw to Hijack Numerous Email Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant cybersecurity development, Russian state-sponsored hackers, identified as APT28 or Fancy Bear, have been exploiting a critical vulnerability in Microsoft Outlook to hijack email accounts on a large scale. This group, linked to Russia’s military intelligence agency GRU, …

Android Bug Leaks DNS Traffic to Hackers While Switching VPN Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android’s operating system has identified a critical vulnerability that allows DNS traffic to leak during VPN server switches, potentially exposing users’ internet activity to cybercriminals. The issue, which affects multiple versions of Android, including the latest Android 14, was first …

ShadowSyndicate Hackers Exploit Aiohttp Vulnerability To Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A directory traversal vulnerability (CVE-2024-23334) was identified in aiohttp versions before 3.9.2. This vulnerability allows remote attackers to access sensitive files on the server because aiohttp doesn’t validate file reading within the root directory when ‘follow_symlinks’ is enabled.  Aiohttp is …