WordPress Plugin Flaw Exposes 10k+ Websites to Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the WP Datepicker WordPress plugin was identified, affecting over 10,000 active installations.  This Arbitrary Options Update vulnerability (CVE-2024-3895) has been assigned a CVSS score of 8.8, indicating a high severity level. CVE-2024-3895: Arbitrary Options Update Vulnerability …

Beware! Notorious Samurai Stealer Used in Targeted Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new type of malware, the “Samurai Stealer,” has been identified in a series of targeted attacks. This malicious software is reportedly designed to infiltrate systems, steal sensitive information, and evade detection with alarming sophistication. How the “Samurai Stealer” Operates …

Russian Hackers Claim Responsibility for Cyber Attack on Indiana Water Plant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent cybersecurity incident, a group of Russian-speaking hackers claimed responsibility for a cyber attack on a wastewater treatment plant in Tipton, Indiana. The attack, which occurred on Friday evening, was part of a broader pattern of similar incidents …

AI-Based Brute-Forcing Attack Outperforming Probabilistic Model

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Web Vulnerability Assessment and Penetration Testing (Web VAPT) aims to identify vulnerabilities in web apps. However, current wordlist-based methods are ineffective since directory brute-forcing attacks can establish reachable directories. Offensive AI is the integration of AI technology to enhance cyber …

Russian Hackers Launched Sabotage Attacks On 20 Critical Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers identified a cyberattack by the Sandworm group targeting critical infrastructure in Ukraine in March 2024. The attack aimed to disrupt the information and communication systems (ICS) of energy, water, and heat suppliers across ten regions.  In addition to the …

Hackers Weaponized Electron Framework to Steal Data Stealthy

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers abuse Electron Framework’s cross-platform desktop app capabilities, which are based on web technologies like HTML, JS, and CSS.  The flexibility and widespread adoption of the Electron Framework enables the creation of several malicious programs cross-OS.  Cybersecurity researchers at ASEC …

New Wavestealer Spotted in Wild Stealing Login Credentials & Credit Card Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new type of malware dubbed “Wavestealer” has been identified. This malicious software reportedly steals sensitive information such as login credentials and credit card data from unsuspecting users. Wavestealer is designed to infiltrate computer systems silently and remains undetected by …

Megazord Ransomware Attacking Healthcare And Government Entities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers primarily use ransomware to gain financial gain from their victims by blackmailing them for payments to recover their encrypted files and systems. However, ransomware can also be weaponized as a destructive cyber weapon that creates confusion in critical infrastructures. …

Leicester City Cyber Attack Leads to Street Light Burning All Day & Night

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Residents of Leicester have been facing an unusual urban phenomenon: street lights that stay lit day and night. This issue stems from a severe cyber attack that targeted Leicester City Council’s IT systems, leading to a series of disruptions in …

Major Security Flaw in Popular Keyboard Apps Puts Millions at Risk

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have uncovered critical security vulnerabilities in several widely used keyboard apps, including those from major tech giants Samsung, OPPO, Vivo, and Xiaomi. These flaws could allow network eavesdroppers to intercept and decipher every keystroke a user makes, exposing sensitive …