Critical Flaws Affecting GE’s Universal Relay Pose Threat to Electric Utilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of critical security shortcomings in GE’s Universal Relay (UR) family of power management devices. “Successful exploitation of these vulnerabilities could …

WARNING: A New Android Zero-Day Vulnerability Is Under Active Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has disclosed that a now-patched vulnerability affecting Android devices that use Qualcomm chipsets is being weaponized by attackers to launch targeted attacks. Tracked as CVE-2020-11261 (CVSS score 8.4), the …

Popular Netop Remote Learning Software Found Vulnerable to Hacking

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers. …

Critical RCE Vulnerability Found in Apache OFBiz ERP Software—Patch Now

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remotely seize control of the open-source enterprise resource …

Critical F5 BIG-IP Bug Under Active Attacks After PoC Exploit Posted Online

Blog WriterThe Hacker News - Original news source is thehackernews.com

Almost 10 days after application security company F5 Networks released patches for critical vulnerabilities in its BIG-IP and BIG-IQ products, adversaries have begun opportunistically mass scanning and targeting exposed and unpatched networking …

Hackers Infecting Apple App Developers With Trojanized Xcode Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Thursday disclosed a new attack wherein threat actors are leveraging Xcode as an attack vector to compromise Apple platform developers with a backdoor, adding to a growing …

Tesla Ransomware Hacker Pleads Guilty; Swiss Hacktivist Charged for Fraud

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks—a Swiss hacktivist and a Russian hacker who planned to plant malware in the Tesla company. A …

New Zoom Screen-Sharing Bug Lets Other Users Access Restricted Apps

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly discovered glitch in Zoom’s screen sharing feature can accidentally leak sensitive information to other attendees in a call, according to the latest findings. Tracked as CVE-2021-28133, the unpatched security …