Category: CyberSecurityNews

Hackers Weaponizing MinIO Storage System flaws to execute remote code on cloud servers
06
Sep
2023

Hackers Weaponizing MinIO Storage System Flaws

Recent reports indicate two vulnerabilities relating to information disclosure and remote code execution in MinIO, and their proof of concept…

Holiday Season Cyber Alert: Reflectiz Declares War on Magecart
06
Sep
2023

Holiday Season Cyber Alert: Reflectiz Declares War on Magecart

Reflectiz, a cybersecurity company specializing in continuous web threat management, offers an exclusive, fully remote solution to battle Magecart web-skimming…

Common Tactics Used by Threat Actors to Weaponize PDFs
06
Sep
2023

Common Tactics Used by Threat Actors to Weaponize PDFs

In the vast and complex world of cybersecurity, danger often hides in the most unsuspecting corners, stalking stealthily where our…

AttackCrypt: Payload Encrypter that Hide Malware Binaries & Evade AV Detection
05
Sep
2023

Payload Encrypter that Hide Malware Binaries

AttackCrypt, an open-source “crypter,” was recently used by cybercriminals to hide malware binaries and avoid antivirus detection. A crypter is…

What is Zero Trust Data Access? – Zero Trust in the SaaS Guide
05
Sep
2023

What is Zero Trust Data Access? Comprehensive Guide

Zero Trust Data Access (ZTDA) constitutes a fundamental aspect of the wider Zero Trust security framework, which entails limiting data…

shelLM – A New AI-Based Honeypot to Engage Attackers as a Real System
05
Sep
2023

AI-Based Honeypot to Engage Attackers as Real System

A honeypot is a trap on a network that lures and studies cyber-attack techniques of threat actors, alerting defenders to…

Freecycle Urges Users to Change Passwords Following Data Breach
05
Sep
2023

Freecycle Urges Users to Change Passwords Following Data Breach

Freecycle, a popular online platform for giving away and receiving free items, reported a significant data breach.  The Freecycle Network…

Hackers Exploit Pre-Authentication RCE Vulnerabilities in Adobe ColdFusion
05
Sep
2023

Hackers Exploit Pre-Authentication RCE Flaws in Adobe ColdFusion

Adobe ColdFusion is a Java-based, commercial web app development platform using CFML for server-side programming. ColdFusion is primarily known for…

IBM Security Verify Flaw Let Attacker Obtain Sensitive Information
04
Sep
2023

Vulnerability in IBM Security Verify Let Attacker Extract Sensitive Information

Multiple Information Disclosure vulnerabilities were discovered in the IBM Security Verify Information Queue, which can reveal several internal product details….

Apple Opens Application for Security Research Device Program
04
Sep
2023

Apple Opens Application for Security Research Device Program

Apple launched the Security Research Device (SRD) program, enabling security researchers to examine the security features of a specially-built hardware…

Sophisticated Earth Estries Group Hack Government Agencies and Tech Companies
04
Sep
2023

Earth Estries Group Hack Govt Agencies & Tech Companies

A new sophisticated cyber espionage group named Earth Estries, which overlaps notorious threat group FamousSparrow, was unveiled. The group has…

Hackers Attacking MSSQL Servers To Deploy Ransomware
04
Sep
2023

Hackers Attacking MSSQL Servers To Deploy Ransomware

Recently, threat actors have been utilizing brute force attacks to compromise exposed MSSQL databases to distribute the FreeWorld ransomware. This attack…