Cisco Confirms Active Exploitation Of Cisco XSS VPN Vulnerability
Cisco has confirmed that a decade-old cross-site scripting (XSS) vulnerability in its Adaptive Security Appliance (ASA) Software is currently being actively exploited in the wild.…
Category: CyberSecurityNews
Hackers Allegedly Claims Breach of EazyDiner Reservation Platform
A prominent restaurant reservation platform, EazyDiner has reportedly fallen victim to a significant data breach. Hackers claim to have accessed and leaked sensitive customer information,…
Salesforce Applications Vulnerability Let Attackers Takeover The Accounts
A recent penetration test conducted on Salesforce Communities revealed critical vulnerabilities that could allow attackers to take over user accounts. The security assessment, performed on…
Apple Employee Suing Company For Monitoring Employee Personal Devices
A current Apple employee has filed a lawsuit against the Apple, accusing the company of invasive surveillance practices that extend into workers’ personal lives. The…
TP-Link Archer Zero-Day Vulnerability Let Attackers Inject Malicious Commands
A critical zero-day vulnerability has been discovered in TP-Link Archer, Deco, and Tapo series routers, potentially allowing attackers to inject malicious commands and fully compromise…
Lifetime Jail For Hydra Dark Web Market Developer
The Moscow Regional Court has sentenced Stanislav Moiseyev, the founder of the notorious Hydra darknet marketplace, to life imprisonment. The verdict, delivered on December 2,…
Highlights From Threat Intelligence to AI Governance
AI transformation starts with security. This theme echoed throughout Microsoft Ignite 2024, with security discussions drawing large crowds and securing top spots in the conference’s…
How Hackers Can Exploit Windows Driver Use-After-Free Vulnerability (CVE-2024-38193)
A critical use-after-free vulnerability called CVE-2024-38193 is found in the Windows driver afd.sys. It affects the Registered I/O (RIO) extension for Windows sockets and lets…
AWS Security Incident Response Service Launched for Organization Security
Amazon Web Services (AWS) unveiled a new service, AWS Security Incident Response, designed to help organizations manage security events efficiently. As cyber threats become increasingly…
PoC Exploit Released for Windows Task Scheduler Zero-day Flaw, Exploited in Wild
A proof-of-concept (PoC) exploit has been released for a critical zero-day vulnerability in the Windows Task Scheduler, identified as CVE-2024-49039. This privilege escalation flaw, which…
Sweet Security Introduces Evolutionary Leap in Cloud Detection and Response, Releasing First Unified Detection & Response Platform
With Sweet, customers can now unify detection and response for applications, workloads, and cloud infrastructure Sweet Security today announced the release of its unified Cloud…
Hackers Exploited Windows Event Logging Tool To Steal Data Secretly
Wevtutil.exe, a Windows event log utility, can be used maliciously in Living Off the Land (LOLBAS) to export logs for exfiltration, query specific event data,…