Hackers Advertising of Pulse Connect Secure VPN RCE 0-Day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts have identified a critical zero-day vulnerability in Pulse Connect Secure VPN, a widely used virtual private network solution. The vulnerability, which allows for remote code execution (RCE), has …

LangChain JS Framework Vulnerability Let Hackers Read Arbitrary File on Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher uncovered a high-risk vulnerability in the popular LangChain JS framework that could allow attackers to read arbitrary files on servers running applications built with the framework. LangChain, …

Google Shares Details on Accidental File Deletion that Impacts Pension Fund’s Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent blog post, Google Cloud has shared details about an incident that impacted one of its Australian customers, UniSuper, a pension fund. The incident involved accidentally deleting the …

Indian National Pleads Guilty for $37 Million By Running Fake Coinbase’s Website

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chirag Tomar, a 30-year-old citizen of the Republic of India, appeared before U.S. Magistrate Judge Susan C. Rodriguez today and pleaded guilty to federal charges for orchestrating a sophisticated spoofing …

Windows 10 PLUGScheduler Vulnerability Allows Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the Windows 10 operating system, tracked as CVE-2024-26238, could allow attackers to gain elevated privileges on affected systems. The flaw resides in the PLUGScheduler component of …

Beware of Fake Antivirus Websites Delivering Windows & Android Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fake antivirus websites are now a major cybersecurity threat, spreading malware to both Windows and Android devices. These malicious sites mimic legitimate antivirus solutions from well-known brands such as Avast, …

Hackers Backdoored Courtroom Video Recording Software With System Hijacking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability (CVE-2024-4978) has been identified in JAVS Viewer v8.3.7, a critical component for managing digital recordings in legal and government environments.  The installer for this version is backdoored, allowing …

Japan To Launch Active Cyber Defense System To Prevent Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Japan is creating a consultative body to implement an active cyber defense system to improve its ability to counter cyberattacks on critical infrastructure. The government will tap railways, electricity, and …

Ransomhub Attacking Industrial Control Systems To Encrypt And Exfiltrate Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomhub, a new ransomware group, has targeted the SCADA system of a Spanish bioenergy plant, Matadero de Gijón, which highlights the critical security risks associated with Industrial Control Systems (ICS) …

Sharp Dragon Hackers Attacking Government Entities Using Cobalt Strike & Custom Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The activities of the Chinese threat actor group known as Sharp Dragon (formerly Sharp Panda) have been meticulously documented. Since 2021, this group has been involved in highly targeted phishing …