Category: CyberSecurityNews

New “NotLockBit” Ransomware Attack Windows and macOS
20
Dec
2024

New “NotLockBit” Ransomware Attack Windows and macOS

A sophisticated new ransomware family, dubbed NotLockBit, is creating waves in the cybersecurity world with its advanced capabilities and cross-platform…

Critical Sophos Firewall Vulnerabilities Let Attckers Execute Remote Code
20
Dec
2024

Sophos Firewall Vulnerabilities Let Attackers Execute Remote Code

Sophos, a leading cybersecurity firm, recently announced the resolution of three critical security vulnerabilities in its Sophos Firewall product. These…

Krispy Kreme Hack Play
20
Dec
2024

Krispy Kreme Hack Claimed by Play Ransomware

The beloved doughnut chain Krispy Kreme has fallen victim to a significant cybersecurity incident, with the notorious Play ransomware group…

Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild
19
Dec
2024

Hackers Exploiting FortiClient EMS Vulnerability (CVE-2023-48788) in the Wild

Cybersecurity researchers have uncovered active exploitation of a critical vulnerability in Fortinet’s FortiClient Enterprise Management Server (EMS), tracked as CVE-2023-48788….

Hackers Exploiting Azure Key Vault Access Policies To Read Sensitive Data
19
Dec
2024

Hackers Exploiting Azure Key Vault Access Policies To Read Sensitive Data

A critical security configuration in Azure Key Vault has been discovered, potentially allowing users with the Key Vault Contributor role…

Hikvision Camera Driver Vulnerability Records Login details in Log files
19
Dec
2024

Hikvision Camera Driver Vulnerability Records Login details in Log files

A newly disclosed security vulnerability, tracked under CVE-2024-12569, has been identified in Hikvision camera drivers integrated with Milestone’s XProtect® Device…

National Cyber Incident Response Plan
19
Dec
2024

CISA Released National Cyber Incident Response Plan (NCIRP)

The Cybersecurity and Infrastructure Security Agency (CISA) has unveiled an updated version of the National Cyber Incident Response Plan (NCIRP),…

Beware Of New Phishing Attacks Stealing Microsoft Azure Cloud Logins
19
Dec
2024

New Phishing Attack Exploiting HubSpot Tools To Steal Microsoft Azure Logins

A sophisticated phishing campaign targeting European companies. The attack, which peaked in June 2024, aims to harvest Microsoft Azure cloud…

Next.js Authorization Bypass Vulnerability Exposes Root-Level Pages
19
Dec
2024

Next.js Authorization Bypass Vulnerability Exposes Root-Level Pages

A critical security vulnerability tracked as CVE-2024-51479 has been identified in Next.js, a widely used React framework for building web…

CISA Warns of 4 New Vulnerabilities Exploited in the Wild
19
Dec
2024

CISA Warns of 4 New Vulnerabilities Exploited in the Wild

 The Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, highlighting…

US to Ban TP-Link Routers
19
Dec
2024

US to Ban TP-Link Routers, as They Fuel Chinese Cyber Attacks

US authorities are considering a ban on TP-Link routers due to concerns over their potential role in Chinese cyber attacks….

CISA Urges Use of End-to-End Encrypted Messaging Services like Signal, Following U.S. Telecoms Hack
19
Dec
2024

CISA Urges Use of End-to-End Encrypted Messaging Services like Signal

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning to senior government officials and political figures to…