Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 26, 2024 0 Comments Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that …

ServiceNow Flaw Let Remote Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ServiceNow recently disclosed three critical vulnerabilities (CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178) affecting multiple Now Platform versions, allowing unauthenticated remote code execution and unauthorized file access.  The vulnerabilities, with CVSS scores ranging …

ConfusedFunction Vulnerability in Google Cloud Platform Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered vulnerability in Google Cloud Platform (GCP) has raised significant security concerns among users and experts alike. The vulnerability, dubbed “ConfusedFunction,” involves GCP’s Cloud Functions and Cloud Build …

PKfail Vulnerability Allows Hackers to Install UEFI Malware on Over 200 Device Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The PKfail vulnerability is a significant security issue affecting over 200 device models of Secure Boot. PKfail is a critical firmware supply-chain issue that undermines the Secure Boot process in …

OpenStack Nova Vulnerability Allows Hackers Gain Unauthorized Access to Cloud Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability in OpenStack’s Nova component has been identified, potentially allowing hackers to gain unauthorized access to cloud servers. This vulnerability, tracked as CVE-2024-40767, affects multiple versions of Nova and …

North Korean Charged in Cyberattacks on US Hospitals, NASA & Military Bases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korean military intelligence operative has been indicted for orchestrating a series of cyberattacks targeting U.S. hospitals, NASA, and military bases, federal prosecutors announced on Thursday. Rim Jong Hyok, …

Red Art Games Hacked, Customers Personal Information Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Red Art Games, a prominent publisher and distributor of limited-edition video games, has fallen victim to a cyberattack. The breach has resulted in the exposure of sensitive customer information, causing …

Threat Actors Using Telegram APIs To Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are exploiting Telegram APIs to avoid detection and illicitly obtain users’ login credentials. Be cautious of a phishing email containing a disguised URL (hxxps[://]www[.]astunet[.]com/wp-plug/imu0nni5/3rhenqt2/) that directs you to …