PostgreSQL Security Flaws Let Attackers Execute Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two vulnerabilities have been identified in pgAdmin of PostgreSQL, which are associated with cross-site scripting and multi-factor authentication bypass. pgAdmin is an open-source administration tool and development platform for PostgreSQL, …

NVIDIA ChatRTX for Windows Vulnerability Lets Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NVIDIA, a leading technology company, has recently released a security update regarding its Windows ChatRTX application. The update reveals the presence of several vulnerabilities that attackers could exploit to carry …

Russian Hackers Exploit Outlook Flaw to Hijack Numerous Email Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant cybersecurity development, Russian state-sponsored hackers, identified as APT28 or Fancy Bear, have been exploiting a critical vulnerability in Microsoft Outlook to hijack email accounts on a large …

Android Bug Leaks DNS Traffic to Hackers While Switching VPN Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android’s operating system has identified a critical vulnerability that allows DNS traffic to leak during VPN server switches, potentially exposing users’ internet activity to cybercriminals. The issue, which affects multiple …

ShadowSyndicate Hackers Exploit Aiohttp Vulnerability To Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A directory traversal vulnerability (CVE-2024-23334) was identified in aiohttp versions before 3.9.2. This vulnerability allows remote attackers to access sensitive files on the server because aiohttp doesn’t validate file reading …

How U.S K-12 Schools Can Solve Their Top 10 Cybersecurity Challenges – Free E-Book

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Students aren’t alone in having their skills tested in K-12 schools. Education-sector IT teams face mounting pressure to provide cost-effective cybersecurity as threat actors increasingly target schools as “easy targets” …

Critical OpenVPN Zero-Day Flaws Affecting Millions of Endpoints Across the Globe

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered four zero-day vulnerabilities within OpenVPN, the world’s leading VPN solution. These vulnerabilities pose significant threats to millions of devices globally. These vulnerabilities, identified by the internal …

Operation PANDORA Shutdown 12 Fake Call Centers that Steal Over €10M

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Operation PANDORA has successfully dismantled a network of 12 fraudulent call centers, dealing a significant blow to a sophisticated criminal enterprise that has stolen over €10 million from unsuspecting victims. …