Category: CyberSecurityNews

FortiOS Vulnerability Let Attackers to Execute Unauthorized Commands
13
Jun
2024

FortiOS Vulnerability Let Attackers to Execute Unauthorized Commands

Fortinet has disclosed multiple stack-based buffer overflow vulnerabilities (CVE-2024-23110) in FortiOS’s command line interpreter. These vulnerabilities could allow authenticated attackers…

Encryption Specialist Conti & LockBit
13
Jun
2024

Authorities Arrest Encryption Specialist Behind Conti & LockBit Ransomware

Ukrainian cyber police have arrested a 28-year-old man from Kyiv, identified as a key figure in the development of cryptors…

Tools for Conducting Malware Traffic Analysis in a Sandbox
12
Jun
2024

Tools for Conducting Malware Traffic Analysis in a Sandbox

A malware sandbox is a versatile solution that offers a variety of tools for studying malicious behavior, including threats’ network…

Microsoft Security Update : RCE, Privilege Escalation Flaws Patched
12
Jun
2024

RCE, Privilege Escalation Flaws Patched

The June 2024 Patch Tuesday update from Microsoft addressed almost 49 vulnerabilities in its products and 9 vulnerabilities in non-Microsoft…

Chrome 126 Released With Patch For 21 Security Flaws
12
Jun
2024

Chrome 126 Released With Patch For 21 Security Flaws

The Chrome team has released Chrome 126 to the Windows, Mac, and Linux stable channels. This update, which will roll…

Black Basta Actors Exploited Windows Zero-day Privilege Escalation Vulnerability
12
Jun
2024

Black Basta Actors Exploited Windows 0day Privilege Vulnerability

The Cardinal cybercrime group (aka Storm-1811, UNC4393), which operates the Black Basta ransomware, may have been exploiting a recently patched…

CISA Urges Administrators To Review Newly Released Six ICS Advisories
12
Jun
2024

CISA Urges Administrators To Review Released Six ICS Advisories

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a call to action for administrators and security professionals to review…

VLC Media Player Vulnerabilities Allow Remote Code Execution
12
Jun
2024

VLC Media Player Vulnerabilities Allow Remote Code Execution

VideoLAN, the organization behind the popular VLC Media Player, has disclosed multiple critical vulnerabilities that could allow attackers to execute…

ComfyUI Users Targeted by Malicious Code Designed to Steal Login Credentials
12
Jun
2024

ComfyUI User Targeted by Malicious Code Steal Login Credential

The research team has recently reported a concerning incident involving the popular Stable Diffusion user interface, ComfyUI. This event has…

Hackers Compromise 20k FortiGate Systems
12
Jun
2024

Chinese Hackers Compromised 20K FortiGate Systems worldwide

At the beginning of 2024, there were reports of Chinese threat actors targeting FortiGate systems with COATHANGER malware. However, it…

UNC5537 Hackers Hijacking Snowflake Customer Instances
12
Jun
2024

UNC5537 Hackers Hijacking Snowflake Customer Instances

Threat actors penetrate the networks with the aim of obtaining unauthorized access to personal and corporate details, bank accounts, and…

Critical Microsoft Outlook Zero-Click RCE Flaw Executes as Email is Opened
12
Jun
2024

Microsoft Outlook Zero-Click RCE Flaw Executes as Email is Opened

A critical zero-click remote code execution (RCE) vulnerability has been discovered in Microsoft Outlook. This vulnerability, designated as CVE-2024-30103, enables…