Category: CyberSecurityNews

CISA Adds 2 New Known Vulnerabilities That Actively Exploited in The Wild
14
Jan
2025

CISA Adds 2 New Known Vulnerabilities That Actively Exploited in The Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with two new critical vulnerabilities,…

Rootkit Malware Exploiting Zero-day Vunlerabilities to Control Linux Systems Remotely
13
Jan
2025

Rootkit Malware Exploiting Zero-day Vunlerabilities to Control Linux Systems Remotely

Fortinet researchers uncovered an advanced rootkit malware exploiting multiple zero-day vulnerabilities in enterprise appliances by executing a shell script (Install.sh)….

New macOS Vulnerability Lets Attackers Bypass Apple’s System Integrity Protection (SIP)
13
Jan
2025

New macOS Vulnerability Lets Attackers Bypass Apple’s System Integrity Protection (SIP)

Microsoft Threat Intelligence has identified a significant vulnerability in macOS that could allow attackers to bypass Apple’s System Integrity Protection…

BeyondTrust Privileged Remote Access Vulnerability Actively Exploited in the Wild
13
Jan
2025

BeyondTrust Privileged Remote Access Vulnerability Actively Exploited in the Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical OS command injection vulnerability (CVE-2024-12686) found in BeyondTrust’s Privileged…

CISA Releases A New Free Guide For OT Products Security
13
Jan
2025

CISA Releases A New Free Guide For OT Products Security

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched a new guidance document to enhance cybersecurity for operational technology…

Attackers Allegedly Steal 2.3 GB Of Internal Data
13
Jan
2025

Attackers Allegedly Steal 2.3 GB Of Internal Data

Spanish telecommunications giant Telefonica has confirmed a significant breach of its internal systems, with attackers claiming to have stolen approximately…

Microsoft Multi-Factor Authentication Down Blocking Office 365 Users Access
13
Jan
2025

Microsoft Multi-Factor Authentication Down Blocking Office 365 Users Access

Microsoft has alerted users to an issue with its Multi-Factor Authentication (MFA) system, which has disrupted access to certain Microsoft…

Aviatrix Controller RCE Vulnerability Exploited In The Wild
13
Jan
2025

Aviatrix Controller RCE Vulnerability Exploited In The Wild

A critical remote code execution (RCE) vulnerability, CVE-2024-50603, has been actively exploited in the wild, posing significant risks to cloud…

Ako Ransomware Abusing Windows API Calls To Detect Infected System Locations
13
Jan
2025

Ako Ransomware Abusing Windows API Calls To Detect Infected System Locations

Ako, commonly referred to as MedusaReborn, is a C++-based ransomware strain that has been active since January 2020. It functions…

GPU Driver Vulnerabilities in Imagination Let Attackers Gain Kernel Access Remotely
13
Jan
2025

GPU Driver Vulnerabilities in Imagination Let Attackers Gain Kernel Access Remotely

Imagination Technologies, a leader in GPU innovation, has issued updates to address a series of critical vulnerabilities identified in its…

Researchers Detailed ZAP Scanner's Capabilities in Identifying Security Flaws
13
Jan
2025

Researchers Detailed ZAP Scanner’s Capabilities in Identifying Security Flaws

Researchers have conducted a detailed study on the capabilities of ZAP (Zed Attack Proxy), an open-source tool widely used for…

Three Cryptomixer Masterminds Charged Processing Ransomware Payments
13
Jan
2025

Three Cryptomixer Masterminds Charged Processing Ransomware Payments

The U.S. Department of Justice (DoJ) has indicted three Russian nationals, Roman Vitalyevich Ostapenko, Alexander Evgenievich Oleynik, and Anton Vyachlavovich…