Windows Server Running SMB over QUIC Let Attacker Launch DoS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

QUIC, created by Google, is a modern transport layer protocol aimed at enhancing connection reliability and security while addressing latency and packet loss issues utilizing UDP. Microsoft’s QUIC implementation is …

Malicious npm and PyPi Packages Exfiltrate SSH Keys From Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

JavaScript and Python both have their own package repositories called npm (Node Package Manager) and PyPi (Python Package Index), respectively. They act as key centers for publishing and exchanging reusable …

$20M Offered By Russian Zero-Day Seller To Hack Android And iPhone Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Russian company Operation Zero is currently offering researchers $20 million in exchange for hacking tools that would enable its customers to take control of Android and iPhone devices. “By …

New Ransomware Trend – Threat Actors Deploy Two Ransomware on Victims’ Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI alerts on rising ransomware trends and urges organizations to follow mitigation recommendations for minimizing ransomware risks and consequences. In July 2023, the FBI observed two ransomware trends, and …

Microsoft SharePoint Server Vulnerabilities Chained to Achieve Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft SharePoint Server was reported with two vulnerabilities, CVE-2023-29357 and CVE-2023-24955, which threat actors can use for achieving remote code execution (RCE) against Microsoft SharePoint Server. These vulnerabilities were discovered …

Chinese Hackers Breached Microsoft’s Email Platform to Steal 60,000+ US Govt Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant cybersecurity breach, Chinese hackers successfully infiltrated Microsoft’s email platform earlier this year, leading to the theft of tens of thousands of emails from the U.S. State Department …