Critical OpenVPN Vulnerabilities Expose Millions of Devices to RCE Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft researchers have recently uncovered multiple medium-severity vulnerabilities in OpenVPN, a widely used open-source VPN software. OpenVPN is used by thousands of companies across various industries, including information technology, financial …

Microsoft Office Spoofing Vulnerability Let Attackers Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has disclosed a significant security vulnerability in its Office suite, identified as CVE-2024-38200, which could potentially allow attackers to access sensitive information. This spoofing vulnerability affects multiple versions of …

Open Source Firewall pfsense Vulnerable to Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A popular open-source firewall software pfSense vulnerability has been identified, allowing for remote code execution (RCE) attacks. The vulnerability, tracked as CVE-2022-31814, highlights potential risks in pfSense installations, particularly those …

Thousands Of Internet-Connected ICS Devices Exposes Critical Infrastructure To Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In November 2023, hackers from Iran hacked the Municipal Water Authority of Aliquippa, Pennsylvania. They targeted a vulnerable control system and damaged it with anti-Israel statements. Two months later, in …

Series Of Solar Power System Vulnerabilities Impacts Millions Of Installations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The giant global electricity network intercrosses the fast-growing solar power infrastructure and ubiquitous Internet of Things, making a complex point of energy and data. This intersection relies on vulnerable inverters …

Critical XSS Vulnerability In Roundcube Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Roundcube, a widely adopted open-source webmail application, is included by default in the popular cPanel web hosting control panel, leading to millions of installations worldwide.  The software is commonly used …

CISA Warns of Hackers Exploiting Cisco Smart Install Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers obtain system configuration files by taking advantage of software or protocols that are installed on devices, such as by abusing the legacy Cisco Smart Install feature. Additionally, CISA notes …

ADT Data Breach: Customers Personal Information Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ADT Inc., a prominent security and automation solutions provider, reported that unauthorized actors accessed specific databases containing customer order information. The company swiftly addressed the breach, which raised concerns about …

Researchers Demonstrate How Hackers Can Exploit Microsoft Copilot

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At the recent Black Hat USA conference, security researcher Michael Bargury unveiled alarming vulnerabilities within Microsoft Copilot, demonstrating how hackers can potentially exploit this AI-powered tool for malicious purposes. This …