A Remote Code Execution Vulnerability in Medical Imaging
A critical Remote Code Execution (RCE) vulnerability has been discovered in a popular open-source biomedical tool used worldwide. This vulnerability, identified as CVE-2024-42845, has raised…
Category: CyberSecurityNews
Authorities Use Novispy Spyware & Cellebrite Forensic Tools to Hack Journalists
Serbian police and intelligence services have been reported to use advanced phone spyware in conjunction with mobile forensic tools to conduct unlawful surveillance on journalists,…
Hackers Exploiting Google Search Ads to Launch Malvertising Campaigns
Threat researchers have identified a persistent series of malvertising campaigns targeting graphic design professionals, using Google Search ads as a vector. This campaign, active since…
Critical Mullvad VPN Vulnerabilities Let Attackers Execute Malicious Code
Security researchers have uncovered several high-severity vulnerabilities in the popular Mullvad VPN service that could allow attackers to execute malicious code and compromise user privacy.…
Data Breach, Vulnerabilities & Cyber Attack & Other News
Welcome to this week’s Cyber Security Newsletter, where we delve into the latest developments and crucial updates in cybersecurity. Your involvement in this rapidly changing…
Curl Vulnerability Let Attackers Access Sensitive Information
A critical security flaw has been discovered in the popular data transfer tool Curl, potentially allowing attackers to access sensitive information. The vulnerability, identified as…
Password Era is Ending ” Microsoft to Delete 1 Billion Password to Replace “Passkey
In a significant turn towards a passwordless future, Microsoft has announced groundbreaking strides in adopting passkeys, a secure and user-friendly alternative to traditional passwords. With…
30,000 Devices in Germany Discovered with Pre-installed Malware “Badbox”
The Federal Office for Information Security (BSI) in Germany has taken decisive action against a wave of malware-infected digital picture frames and media players connected…
CISA Warns of Cleo 0-Day Vulnerability Exploited by Ransomware Gangs
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical vulnerability in Cleo’s file transfer software being actively exploited by…
New HeartCrypt Packer-as-a-Service (PaaS) Protecting Malware From Antivirus
A new packer-as-a-service (PaaS) called HeartCrypt has emerged as a powerful tool for malware operators to evade antivirus detection. Developed in July 2023 and launched…
Yahoo Terminates Their Entire Red Team From The “Team Paranoids”
Yahoo has laid off around 25% of its cybersecurity team, known as “The Paranoids,” over the past year, according to information obtained by Cyber Security News.…
Hackers Scanning RDP Services Especially Port 1098 For Exploitation
There is a significant surge in scanning activities targeting Remote Desktop Protocol (RDP) services, with a particular focus on port 1098/TCP. Over the past two…