Foxit PDF Editor/Reader Vulnerabilities Let Attackers Execute Remote Code
Foxit Software has released updates for its widely used Foxit PDF Reader and Foxit PDF Editor, addressing critical security vulnerabilities that could allow attackers to…
Category: CyberSecurityNews
Siemens UMC Vulnerability Let Remote Attacker Execute Arbitrary Code
A critical security flaw has been discovered in Siemens’ User Management Component (UMC), potentially exposing numerous industrial control systems to remote attacks. The vulnerability, identified…
New “NotLockBit” Ransomware Attack Windows and macOS
A sophisticated new ransomware family, dubbed NotLockBit, is creating waves in the cybersecurity world with its advanced capabilities and cross-platform functionality. Mimicking the techniques of…
Sophos Firewall Vulnerabilities Let Attackers Execute Remote Code
Sophos, a leading cybersecurity firm, recently announced the resolution of three critical security vulnerabilities in its Sophos Firewall product. These vulnerabilities could potentially allow attackers…
Krispy Kreme Hack Claimed by Play Ransomware
The beloved doughnut chain Krispy Kreme has fallen victim to a significant cybersecurity incident, with the notorious Play ransomware group claiming responsibility for the attack.…
Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild
Cybersecurity researchers have uncovered active exploitation of a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS), tracked as CVE-2023-48788. This flaw, stemming from improper…
Hackers Exploiting Azure Key Vault Access Policies To Read Sensitive Data
A critical security configuration in Azure Key Vault has been discovered, potentially allowing users with the Key Vault Contributor role to access sensitive data contrary…
Hikvision Camera Driver Vulnerability Records Login details in Log files
A newly disclosed security vulnerability, tracked under CVE-2024-12569, has been identified in Hikvision camera drivers integrated with Milestone’s XProtect® Device Pack. This vulnerability has raised…
CISA Released National Cyber Incident Response Plan (NCIRP)
The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled an updated version of the National Cyber Incident Response Plan (NCIRP), a strategic framework for coordinating…
New Phishing Attack Exploiting HubSpot Tools To Steal Microsoft Azure Logins
A sophisticated phishing campaign targeting European companies. The attack, which peaked in June 2024, aims to harvest Microsoft Azure cloud credentials and compromise victims’ cloud…
Next.js Authorization Bypass Vulnerability Exposes Root-Level Pages
A critical security vulnerability tracked as CVE-2024-51479 has been identified in Next.js, a widely used React framework for building web applications. The flaw allowed unauthorized…
CISA Warns of 4 New Vulnerabilities Exploited in the Wild
The Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, highlighting significant security risks for various…