Critical Zero-Click Vulnerability in macOS Calendar App
A critical zero-click vulnerability has been discovered in macOS Calendar, allowing attackers to add or delete arbitrary files within the Calendar sandbox environment and execute…
Category: CyberSecurityNews
GCP RCE Flaw Let Attackers Execute Code on Millions of Google Servers
Security researchers revealed this week that a critical remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) could have allowed attackers to run malicious…
Windows MSHTML Zero-Day Vulnerability Exploited In The Wild
The Windows MSHTML platform spoofing vulnerability, CVE-2024-43461, which affects all supported Windows versions, has been exploited in the wild. CVE-2024-43461 was used in attacks by…
Critical Vulnerabilities Impact Millions Of D-Link Routers: Patch Now!
In a significant security alert, millions of D-Link routers are at risk due to critical vulnerabilities that have been discovered in several models, including the…
New Android Malware Ajina Attacks Users To Steal Banking Login Details
Recent developments in Android malware have revealed a concerning trend where malicious applications are increasingly capable of stealing banking login details and intercepting two-factor authentication…
Creating An AI Honeypot To Engage With Attackers Sophisticatedly
In cybersecurity, a honeypot is a bait system specifically designed to attract and analyze cyber-attacks, functioning as a trap for potential intruders. By mimicking legitimate…
What is Security Auditing?
With the global cost of cybercrime reaching nearly $9.4 million in 2024, organizations are under immense pressure to protect their data and systems from potential…
Threat Actor 888 Allegedly Claims Leak of SAP Employees Data
A Twitter account known as DarkWebInformer has claimed that a notorious hacker, identified only by the alias “888,” has allegedly leaked sensitive data belonging to…
Beware of Fake AppleCare+ Service that Steals Money from Users
A malicious campaign targeting Mac users seeking support or extended warranty services through AppleCare+ has been uncovered. This scam involves perpetrators purchasing Google ads to…
Medusa Ransomware Exploiting Fortinet Flaw For Sophisticated Attacks
The notorious Medusa ransomware group has been exploiting a critical vulnerability in Fortinet’s FortiClient EMS software to launch sophisticated ransomware attacks. The SQL injection flaw,…
Azure API Management Vulnerability Let Users Escalate Privileges
A critical vulnerability was recently discovered in Azure API Management (APIM) that allowed users with Reader-level access to escalate their privileges to the equivalent of…
New Linux Malware Exploiting Oracle Weblogic Servers
Oracle WebLogic Server is an application server that is primarily designed to develop, deploy, and manage enterprise applications based on Java EE and Jakarta EE…