Citrix has disclosed two critical vulnerabilities affecting its NetScaler Console (formerly NetScaler ADM), NetScaler SVM, and NetScaler Agent, which could potentially allow attackers to access sensitive information and cause denial …
Microsoft Employees Data Exposed Via Third-Party Breach
A significant data breach involving Microsoft has come to light, exposing sensitive information of over 2,000 employees. The Cyber Press Research Team has uncovered a data leak file containing personal …
Hackers Leveraging Compiled V8 JavaScript In Wild To Deploy Malware
Hackers exploit compiled V8 JavaScript to obfuscate their malicious code, as the compiled bytecode effectively hides the malware’s original source code and intentions. Recently, the use of compiled V8 JavaScript …
Adobe Security Update for Premiere Pro, InDesign & Bridge
Adobe has released crucial security updates for its widely-used software products: Premiere Pro, InDesign, and Bridge. The updates, identified as APSB24-46, APSB24-48, and APSB24-51, respectively, were initially posted and last …
New Blast-RADIUS Man-In-The-Middle Attack Bypasses Popular RADIUS Authentication
Threat actors carry out man-in-the-middle attacks to intercept, tamper, and manipulate communications between two parties unknown to them. Consequently, they can acquire private information like credit card details and login …
Microsoft Patch Tuesday July 2024 : 4 Zero-days, 59 Code Execution & 75 Flaws Patched
Microsoft’s July 2024 Patch Tuesday has brought a significant wave of updates, addressing a total of 139 vulnerabilities across various products and components. This release includes 139 new CVEs in …
Critical zero-click RCE Vulnerability Impacts Microsoft Outlook Applications
Morphisec researchers have discovered a critical zero-click remote code execution (RCE) vulnerability in Microsoft Outlook, designated CVE-2024-38021. Unlike the previously disclosed CVE-2024-30103, this vulnerability does not require authentication, making it …
PoC Exploit Released For Splunk Enterprise Local File Inclusion Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical local file inclusion vulnerability in Splunk Enterprise, identified as CVE-2024-36991. This vulnerability affects Splunk Enterprise versions below 9.2.2, 9.1.5, and …
Fujitsu Cyber Attack: Customers’ Personal Information Exposed
Fujitsu Limited has disclosed the results of an investigation into a cyberattack that potentially exposed customers’ personal information. The breach, first announced on March 15, 2024, was caused by sophisticated …
Microsoft Patch Tuesday, July 2024 Edition
Microsoft Corp. today issued software updates to plug at least 139 security holes in various flavors of Windows and other Microsoft products. Redmond says attackers are already exploiting at least …