Automate Analysis of Common Attack Vectors with a Malware Sandbox
Analysts often face an overwhelming number of threats daily, each demanding a detailed examination to understand its behavior and potential impact. When alerts start piling…
Category: CyberSecurityNews
NachoVPN Attack Exploits RCE Vulnerabilities in SonicWall & Palo Alto VPNs
In a study examining popular corporate VPN clients, including traditional SSL-VPN clients and modern Zero Trust solutions, researchers uncovered vulnerabilities in the trust relationships between…
Philippine Entrepreneur Combines Blockchain Innovation with Environmental Conservation through Ora Coin Foundation
Cebu-based entrepreneur Brian Christopher Aguilar has emerged as a notable figure in the cryptocurrency sector, leveraging blockchain technology to support environmental sustainability. As the founder…
Hackers Exploiting ProjectSend Authentication Vulnerability In The Wild
Hackers are actively exploiting a critical authentication vulnerability in ProjectSend, a popular open-source file-sharing web application. The vulnerability, now identified as CVE-2024-11680, allows remote, unauthenticated…
Zero-Day Attack Exploits Corrupted Files to Evade Advanced Security Tools
Cybersecurity experts at ANY.RUN have uncovered an active zero-day attack campaign that leverages corrupted files to bypass antivirus software, sandbox environments, and even email spam…
Bootkitty, The First UEFI Bootkit Targeting Linux Servers
Researchers have uncovered the first UEFI bootkit designed specifically for Linux systems, named Bootkitty. This discovery marks a pivotal moment in the evolution of UEFI…
Firefox 133 Released With Fix For Multiple Security Vulnerabilities
Mozilla has officially launched Firefox 133.0, introducing a host of new features, performance improvements, and critical security fixes. The release, first offered to the Release…
NVIDIA UFM Vulnerability Let Attackers Escalate Privileges
A high-severity vulnerability has been disclosed recently on November 26, 2024 by NVIDIA affecting its UFM Enterprise, UFM Appliance, and UFM CyberAI products. The flaw,…
IBM Engineering Systems Flaw Let Attackers Bypass Security Restrictions
A critical security vulnerability has been discovered in IBM Engineering Systems Design Rhapsody – Model Manager (RMM), potentially allowing remote attackers to bypass security restrictions…
Junior School Student Charges For Infecting Computers With ‘Test of Skill’ Virus
A 15-year-old junior high school student from Saitama Prefecture has been charged with creating and distributing a computer virus. The Fukui Police Station and the…
20 Years Old macOS Vulnerability Allow Attackers To Gain Root Access Remotely
A security researcher, Gergely Kalman, uncovered a severe macOS vulnerability privilege escalation in Apple’s MallocStackLogging framework, which had remained undetected for approximately 20 years. The…
VMware Aria Operations Vulnerabilities Allow Privilege Escalation & XSS Attacks
VMware, a leading cloud computing and virtualization software provider, has disclosed multiple critical vulnerabilities in its Aria Operations product. The most severe flaws could allow…