Foxit PDF Reader and Editor Flaw Let Attackers Escalate Privilege

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Foxit PDF reader has been discovered with a new privilege escalation vulnerability that allows a low-privileged user to escalate their privileges. This vulnerability has been assigned with CVE-2024-29072 and the …

Moonstone Sleet New North Korean Hacker Group With Unique Tricks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789). This actor uses a combination of many tried-and-true techniques used by other North Korean …

Hackers Weaponizing Microsoft Office Documents to Deploy Malware in Business Environments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Office allows one to generate a professional business report on office365 or write college essays, prepare CVs, take notes, and perform analysis.  These offer text and data editing, like …

U.S. Sanctions Cybercrime Network Behind Massive Residential Proxy Bothnet Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The United States has imposed sanctions on a cybercrime network responsible for operating a massive residential proxy botnet service to combat cybercrime. This network, 911.re, has been implicated in various …

Citrix Workspace app Let Attackers Elevate Privileges From Local User to Root User

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security vulnerability has been identified in the Citrix Workspace app for Mac, potentially allowing attackers to elevate their privileges from a local authenticated user to a root user. …

Hackers Claim Ticketmaster Data Breach: 560M User Details and Payment Card Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a dramatic turn of events, hackers have claimed a massive data breach involving Ticketmaster, allegedly exposing the details of 560 million users and their payment card information. This claim …

Russian Hackers Charged For Selling Unauthorized Access To Computer Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Russian citizen has been indicted for working as an “access broker” and selling unauthorized access to computer networks, including a victim company in New Jersey, U.S. Attorney Philip R. …

PoC Exploit Released for Critical Fortinet FortiSIEM Command Injection Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in Fortinet’s FortiSIEM. The vulnerability, CVE-2024-23108, allows for remote, unauthenticated command execution as root. This article delves into the …