Category: CyberSecurityNews

G-Door Bypass Microsoft 365 Security
23
Dec
2024

G-Door Vulnerability Lets Hackers Bypass Microsoft 365 Security With Google Docs

A newly discovered vulnerability, dubbed “G-Door,” allows malicious actors to circumvent Microsoft 365 security measures by exploiting unmanaged Google Docs…

Threat Actors Exploiting Microsoft Office Vulnerability
23
Dec
2024

Threat Actors Exploiting Microsoft Office Vulnerability to Execute Malicious Code

A sophisticated cyber-espionage group known as Cloud Atlas has been observed leveraging a critical Microsoft Office vulnerability to launch targeted…

Italy Imposed EUR 15 million Fine to Open AI For Violating GDPR
23
Dec
2024

Italy Imposed EUR 15 million Fine to Open AI For Violating GDPR

The Italian Data Protection Authority (known as “Il Garante”) has imposed a €15 million fine on OpenAI for violations of…

Researchers Bypass WPA3 to Acquire Network Password via Man-in-the-Middle Attack & Social Engineering
23
Dec
2024

Researchers Bypass WPA3 to Acquire Network Password

Researchers have successfully bypassed the Wi-Fi Protected Access 3 (WPA3) protocol to obtain network passwords using a combination of Man-in-the-Middle…

IBM Cognos Analytics Vulnerability Allows Malicious File Upload & Injection Attacks
23
Dec
2024

IBM Cognos Analytics Vulnerability Allows Malicious File Upload & Injection Attacks

IBM has released a critical security update for its Cognos Analytics software, addressing two severe vulnerabilities: CVE-2023-42017 and CVE-2024-51466. These vulnerabilities could allow…

PHP-based Craft CMS Vulnerability
23
Dec
2024

PHP-based Craft CMS Vulnerability Let Attackers Execute Remote Code

A critical vulnerability in the popular PHP-based Craft CMS has been discovered, allowing unauthenticated attackers to execute remote code on…

U.S  Cyber Attacks on China
23
Dec
2024

U.S Intelligence Agencies Launched Cyber Attacks on Chinese Tech Companies

The Chinese National Internet Emergency Center has discovered and resolved two significant cases of cyber espionage targeting Chinese technology companies…

SHARP Routers Vulnerabilities
23
Dec
2024

SHARP Routers Vulnerabilities Lets Attacker Trigger RCE to Gain Root Acces

SHARP has issued an urgent security advisory regarding multiple vulnerabilities discovered in several of its router products. Customers using the…

Weekly Cybersecurity Newsletter: Cyber Attack News, Vulnerabilities & Data Breaches
22
Dec
2024

Cyber Attack News, Vulnerabilities & Data Breaches

Welcome to this week’s Cyber Security Newsletter, where we explore the latest advancements and important updates in the field of…

New PaaS Platform “FlowerStorm” Attacking Microsoft 365 Users
22
Dec
2024

New PaaS Platform “FlowerStorm” Attacking Microsoft 365 Users

A new phishing-as-a-service (PaaS) platform called “FlowerStorm” has emerged, targeting Microsoft 365 users. This platform has quickly gained traction following…

PHP Zero-Day Vulnerability
21
Dec
2024

Critical PHP 0-Day Vulnerability in Craft CMS Lets Hackers Gain Remote Access

A significant security vulnerability in Craft CMS, one of the most widely used PHP-based content management systems, has been uncovered,…

Ascension Health Hacked
21
Dec
2024

Ascension Health Hacked – Ransomware Attack Compromised 5.6 Million Patients Data

Ascension Health, one of the largest health systems in the United States, has reported a significant data security breach that…