Who is Alleged Medibank Hacker Aleksandr Ermakov?

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Authorities in Australia, the United Kingdom and the United States this week levied financial sanctions against a Russian man accused of stealing data on nearly 10 million customers of the Australian health insurance giant Medibank. 33-year-old Aleksandr Ermakov allegedly stole …

49 Unique Zero-days Uncovered in Pwn2Own Automotive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On the final day of Pwn2Own Automotive 2024 – Day 3, researchers were granted $1,323,750 in rewards for identifying 49 distinct zero-days. The first-ever Pwn2Own Automotive event has concluded! Synacktiv wins the Master of Pwn Trophy, earning 50 Master of Pwn …

Cisco Unified Communications Flaw Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Unified Communications and Contact Center Solutions, known for their robustness, have recently been under scrutiny due to a critical vulnerability.  This flaw exposes an unsettling prospect: an unauthenticated, remote attacker gaining the ability to execute arbitrary code on affected …

Critical Jenkins Vulnerability Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Jenkins is an open-source automation server that is based on Java used for continuous integration and continuous delivery processes. Threat actors target Jenkins due to its widespread use in software development pipelines.  The widespread use of it provides an opportunity …

10 Best Network Security Providers for Ecommerce – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Network security providers for ecommerce play a crucial role in ensuring the safety and integrity of online transactions and customer data. With the rapid growth of ecommerce, the security of online platforms has become more important than ever. Protecting private …

Using Google Search to Find Software Can Be Risky

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Google continues to struggle with cybercriminals running malicious ads on its search platform to trick people into downloading booby-trapped copies of popular free software applications. The malicious ads, which appear above organic search results and often precede links to legitimate …

Chrome Flaw Let Attacker Corrupt Memory via Crafted HTML Page

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has updated the Stable channels to 121.0.6167.85 for Mac and Linux and 121.0.6167.85/.86 for Windows as part of a security update for Chrome. There are 17 security fixes in this update. The upgrade will be rolled out over the …

3000+ Discussions on Dark Web Posts to Use ChatGPT for Illegal Purposes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

For the multitude of malicious activities, threat actors could exploit ChatGPT due to its conversational abilities, such as generating convincing phishing messages, crafting sophisticated social engineering attacks, and automating the production of misleading content. Hackers can exploit the capacity of …

Researchers Awarded Over $1 Million in Pwn2Own Hacking Competition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At Pwn2Own Automotive 2024 Day 2, researchers were rewarded over $1 million for exploiting Tesla infotainment systems, Sony, Alphine players, Autel charging systems, and much more. On the first day, a prize of $722,500 was given to researchers for 24 distinct 0 days. …

5379 GitLab Servers are Vulnerable to Zero-Click Account Takeover Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released important security fixes for versions 16.7.2, 16.6.4, and 16.5.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). The fixes include multiple bugs, including a critical account takeover vulnerability that does not require user interaction. However, other …