49 Unique Zero-days Uncovered in Pwn2Own Automotive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On the final day of Pwn2Own Automotive 2024 – Day 3, researchers were granted $1,323,750 in rewards for identifying 49 distinct zero-days. The first-ever Pwn2Own Automotive event has concluded! Synacktiv wins …

Cisco Unified Communications Flaw Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Unified Communications and Contact Center Solutions, known for their robustness, have recently been under scrutiny due to a critical vulnerability.  This flaw exposes an unsettling prospect: an unauthenticated, remote …

Critical Jenkins Vulnerability Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Jenkins is an open-source automation server that is based on Java used for continuous integration and continuous delivery processes. Threat actors target Jenkins due to its widespread use in software …

Using Google Search to Find Software Can Be Risky

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Google continues to struggle with cybercriminals running malicious ads on its search platform to trick people into downloading booby-trapped copies of popular free software applications. The malicious ads, which appear …

3000+ Discussions on Dark Web Posts to Use ChatGPT for Illegal Purposes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

For the multitude of malicious activities, threat actors could exploit ChatGPT due to its conversational abilities, such as generating convincing phishing messages, crafting sophisticated social engineering attacks, and automating the …

Researchers Awarded Over $1 Million in Pwn2Own Hacking Competition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At Pwn2Own Automotive 2024 Day 2, researchers were rewarded over $1 million for exploiting Tesla infotainment systems, Sony, Alphine players, Autel charging systems, and much more. On the first day, a prize of …

5379 GitLab Servers are Vulnerable to Zero-Click Account Takeover Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab has released important security fixes for versions 16.7.2, 16.6.4, and 16.5.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). The fixes include multiple bugs, including a critical account …

Best Data Security Solutions for Insurance Providers – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Data security is crucial for insurance providers due to the sensitive nature of the data they handle, such as personal information, financial details, and health records. Effective data security solutions …