Hackers Weaponizing Shortcut Files With Zero-day Tricks
Hackers weaponize shortcut files because they are an inconspicuous way to execute malicious code on a target system. These files can be disguised as harmless…
Category: CyberSecurityNews
Hackers Claiming 8 Million Angel One Customers Data Exposed
Hackers have claimed that the personal data of 8 million customers of Angel One, a prominent broking house, has been exposed. The news report has…
4 Zero Days, 59 code execution Flaws
Microsoft’s July 2024 Patch Tuesday has brought a significant wave of updates, addressing a total of 139 vulnerabilities across various products and components. This release…
Citrix NetScaler Vulnerability Allows Attackers to Access Sensitive Information
Citrix has disclosed two critical vulnerabilities affecting its NetScaler Console (formerly NetScaler ADM), NetScaler SVM, and NetScaler Agent, which could potentially allow attackers to access…
7.6 Million Individuals’ Data Exposed
Evolve Bank & Trust, a prominent financial services institution, has confirmed a data breach that has compromised the personal information of over 7.6 million individuals.…
Adobe Security Update for Premiere Pro, InDesign & Bridge
Adobe has released crucial security updates for its widely-used software products: Premiere Pro, InDesign, and Bridge. The updates, identified as APSB24-46, APSB24-48, and APSB24-51, respectively,…
Microsoft Employees Data Exposed Via Third-Party Breach
A significant data breach involving Microsoft has come to light, exposing sensitive information of over 2,000 employees. The Cyber Press Research Team has uncovered a…
Hackers Leveraging Compiled V8 JavaScript In Wild To Deploy Malware
Hackers exploit compiled V8 JavaScript to obfuscate their malicious code, as the compiled bytecode effectively hides the malware’s original source code and intentions. Recently, the…
Blast-RADIUS Man-In-The-Middle Attack Bypasses RADIUS Authentication
Threat actors carry out man-in-the-middle attacks to intercept, tamper, and manipulate communications between two parties unknown to them. Consequently, they can acquire private information like…
Zero-click RCE Vulnerability Impacts Microsoft Outlook Applications
Morphisec researchers have discovered a critical zero-click remote code execution (RCE) vulnerability in Microsoft Outlook, designated CVE-2024-38021. Unlike the previously disclosed CVE-2024-30103, this vulnerability does…
Fujitsu Cyber Attack: Customers’ Personal Information Exposed
Fujitsu Limited has disclosed the results of an investigation into a cyberattack that potentially exposed customers’ personal information. The breach, first announced on March 15,…
PoC Exploit Released For Splunk Enterprise Local File Inclusion Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical local file inclusion vulnerability in Splunk Enterprise, identified as CVE-2024-36991. This vulnerability affects Splunk Enterprise…