Thousands Of Internet-Connected ICS Devices Exposes Critical Infrastructure To Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In November 2023, hackers from Iran hacked the Municipal Water Authority of Aliquippa, Pennsylvania. They targeted a vulnerable control system and damaged it with anti-Israel statements. Two months later, in …

Series Of Solar Power System Vulnerabilities Impacts Millions Of Installations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The giant global electricity network intercrosses the fast-growing solar power infrastructure and ubiquitous Internet of Things, making a complex point of energy and data. This intersection relies on vulnerable inverters …

Critical XSS Vulnerability In Roundcube Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Roundcube, a widely adopted open-source webmail application, is included by default in the popular cPanel web hosting control panel, leading to millions of installations worldwide.  The software is commonly used …

CISA Warns of Hackers Exploiting Cisco Smart Install Feature

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers obtain system configuration files by taking advantage of software or protocols that are installed on devices, such as by abusing the legacy Cisco Smart Install feature. Additionally, CISA notes …

ADT Data Breach: Customers Personal Information Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ADT Inc., a prominent security and automation solutions provider, reported that unauthorized actors accessed specific databases containing customer order information. The company swiftly addressed the breach, which raised concerns about …

Researchers Demonstrate How Hackers Can Exploit Microsoft Copilot

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At the recent Black Hat USA conference, security researcher Michael Bargury unveiled alarming vulnerabilities within Microsoft Copilot, demonstrating how hackers can potentially exploit this AI-powered tool for malicious purposes. This …

Cisco Integrated Talos Threat Intelligence for All Splunk Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has announced the integration of its Talos threat intelligence across multiple Splunk security products, marking a significant milestone in the company’s efforts to combine capabilities following its acquisition of …

MongoDB Vulnerability Allows Attackers to Gain Complete Control of Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability, identified as CVE-2024-7553, has been discovered in MongoDB. It could potentially allow attackers to take complete control of Windows systems. This vulnerability arises from incorrect validation of …

New Double-Extortion Ransomware Attacking Linux Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Symantec have identified a new Linux ransomware variant linked to a bilingual (English and Spanish) double-extortion ransomware group. This emerging threat poses significant risks to organizations by encrypting …