IBM Security Guardium Flaw Let Attacker to execute arbitrary commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Command Injection vulnerability was recently discovered on IBM Security Guardium which allows threat actors to execute arbitrary commands on the affected system remotely. This vulnerability was due to improper …

New Phishing Attack Exploits Cloudflare R2 Hosting Service to Steal Cloud Passwords

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cloudflare R2 hosting service like the following platforms, which provides a cost-effective large-scale data storage platform to developers with no exit bandwidth charges:- Amazon S3 Google GCS Azure Blob …

New Citrix ADC Zero-Day Scanner Tool Released With IOCs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix was previously discovered with a Zero-Day vulnerability on their Citrix NetScaler Application Delivery Controller (ADC) that allowed threat actors to perform remote code execution. The Zero-Day was found to …

2000+ Citrix NetScalers Hacked to Deploy Webshell

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been discovered that an attacker installed web shells on susceptible Citrix NetScalers, exploiting the CVE-2023-3519 flaw to acquire persistent access.  This critical zero-day vulnerability poses a significant risk …

Cyber Criminals Turned Mac Systems into Proxy Exit Nodes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Besides Windows OS, now threat actors are also actively targeting Mac systems to accomplish their illicit goals. Cybersecurity analysts at AT&T Alien Labs recently observed that threat actors are actively …

Threat Actors Using ChatGPT Lure to Target iPhone and Android Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The “CryptoRom” scam uses ChatGPT to trick victims into downloading fake crypto-trading mobile applications. Android and iPhone users have reported increased instances of similar fraud utilizing apps from official app stores. …

120,000+ Compromised Computers Leaked Hacker Data From Top Cybercrime Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An alarming number of 120,000 computers have been infiltrated by stealer malware, and the credentials obtained from these infected devices are linked to cybercrime forums, a significant proportion of which …

Multiple AudioCodes Desk Phone and Zoom Zero Touch Flaws Enable Remote Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As per reports, Several vulnerabilities were discovered in Zoom’s Zero Touch Provisioning (ZTP) that allows threat actors to gain full remote administration of the devices resulting in activities like eavesdropping, …