APT Hackers Leverage macOS Flutter Apps To Embed Malicious Codes on Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated malware campaign targeting macOS devices, believed to be orchestrated by North Korean state-sponsored or APT hackers. The malicious actors have employed a novel technique of embedding malware within …

Hackers Attacking GitHub Users With a New Sophisticated Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoIssue is a new sophisticated phishing tool targeting GitHub users. It poses a significant threat to developers and organizations worldwide. Cybersecurity researchers at SlashNext have uncovered this tool, which enables …

China-Nexus Hackers Hijack Websites to Deliver Cobalt Strike Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chinese state-sponsored hackers recently compromised two prominent Tibetan websites in a sophisticated cyber-espionage campaign to distribute the notorious Cobalt Strike malware. The attack, attributed to the threat group TAG-112, highlights …

Zoom App Vulnerability Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zoom recently disclosed multiple vulnerabilities affecting its suite of applications, including a critical flaw that could allow attackers to execute remote code. The Zoom app vulnerabilities, identified by CVE numbers, …

Critical Fortinet Product Flaws That Let Hackers Take Control of The System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet has released critical security updates to address multiple product vulnerabilities, including FortiOS, FortiAnalyzer, FortiManager, and FortiClient Windows. If left unpatched, these flaws could allow attackers to take control of …

Apache CloudStack Released Fix for Critical KVM Infrastructure Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Apache CloudStack project has announced the release of critical security updates to address severe vulnerabilities in its KVM-based infrastructure. The latest LTS security releases, versions 4.18.2.5 and 4.19.1.3, patch …

CISA Warns of Microsoft Zero-day Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding two newly disclosed vulnerabilities in Microsoft Windows, urging organizations and users to apply mitigations promptly to prevent potential …

Chrome 131 Released With Fix for 12 Security Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has released Chrome 131 to the stable channel for Windows, Mac, and Linux, addressing 12 security vulnerabilities, including several high and medium-severity flaws. This update, which will roll out …

Microsoft Active Directory Certificate Services Vulnerability (CVE-2024-49019) Discovered

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has recently disclosed a new security vulnerability, CVE-2024-49019, in Microsoft Patch Tuesday updates, affecting Active Directory Certificate Services (AD CS). This vulnerability, classified as an Elevation of Privilege (EoP) …

Microsoft Released Patch for Exchange Server Email Spoofing Vulnerability – Update Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has unveiled crucial Security Updates (SUs) for its Exchange Server platforms. The November 2024 update addresses several vulnerabilities in Exchange Server 2019 and 2016, specifically targeting versions Exchange Server …