Researchers Exploited Remote Code Execution Moodle Platform
The popular learning platform Moodle was found to have a critical vulnerability that allowed for remote code execution, which was caused by an improper sanitization…
Category: CyberSecurityNews
Vulnerabilities Exploited in Wireless Gear-Shifting Systems
Researchers have uncovered significant cybersecurity vulnerabilities in the wireless gear-shifting systems of high-end bicycles, particularly those using Shimano’s Di2 technology. This revelation has sent shockwaves…
CISA & FBI Details Phishing Techniques used by Malicious Hackers
The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have detailed the latest phishing techniques of malicious hackers. This joint…
Chinese Hackers Exploited Versa Director Zero-Day to Target IT Sectors
Chinese state-sponsored threat actors have been exploiting a zero-day vulnerability in Versa Director servers, identified as CVE-2024-39717. This vulnerability, discovered by Black Lotus Labs at…
Critical SQL Injection Vulnerabilities Discovered in Fortra FileCatalyst Workflow
Fortra has urgently released patches to address two critical SQL injection vulnerabilities in its FileCatalyst Workflow software, identified as CVE-2024-6632 and CVE-2024-6633. If exploited, these…
Research Unveils Eight Android & iOS that leaks User’s Sensitive Data
The eight Android and iOS apps fail to adequately protect user data, which transmits sensitive information, such as device details, geolocation, and credentials, over the…
Cisco to Acquire AI Application Security Platform Robust Intelligence
Cisco has announced its intent to acquire Robust Intelligence, a leader in AI application security. This acquisition aligns with Cisco’s commitment to enhancing IT infrastructure…
Copilot Prompt Injection Vulnerability Let Hackers Exfiltrate Personal Data
Researchers have revealed that a critical security flaw in Microsoft 365 Copilot allowed attackers to exfiltrate sensitive user information through a sophisticated exploit chain. The…
Argentina Busted Crypto Ring Used Linked with North Korean Hackers
Argentine authorities have dismantled a sophisticated cryptocurrency operation based in Buenos Aires. The operation, which was allegedly connected to North Korean hackers, involved illegal currency…
Greasy Opal, Hackers Created 750 Million Fake Microsoft Accounts
Greasy Opal, based in the Czech Republic since 2009, is reportedly a Cyber Attack Enablement company that manufactures and markets advanced cyber attack bypassing tools…
Microsoft 365 Flags Users Email Messages Having Images Flagged as Malware
Microsoft 365 has acknowledged an issue affecting its Exchange Online service, where some users’ email messages containing images are being incorrectly flagged as malware and…
WordPress Plugin Flaw Exposes 1,000,000 WordPress Sites
A vulnerability in the WPML (WordPress Multilingual) plugin has put over a million WordPress sites at risk of remote code execution (RCE) attacks. This flaw…