UNC5537 Hackers Hijacking Snowflake Customer Instances
Threat actors penetrate the networks with the aim of obtaining unauthorized access to personal and corporate details, bank accounts, and organizational resources for purposes of…
Category: CyberSecurityNews
Microsoft Outlook Zero-Click RCE Flaw Executes as Email is Opened
A critical zero-click remote code execution (RCE) vulnerability has been discovered in Microsoft Outlook. This vulnerability, designated as CVE-2024-30103, enables attackers to run arbitrary code…
MultiRDP Malware Let Multiple Attackers Connect Via RDP At Same Time
Threat actors use Remote Desktop Protocol (RDP) to gain unauthorized access to computers and networks, fully control systems, extract sensitive data, and implant malware, among…
APT Hackers Using Google & OneDrive To Host Malicious Scripts
Threat actors are leveraging cloud storage services like Google Drive, OneDrive, and Dropbox to distribute malware and steal user information by uploading malicious files such…
Popular Biometric Terminal Vulnerable To QR Code SQL Injection
A popular hybrid biometric terminal manufactured by ZKTeco has been found to have several critical vulnerabilities, including a significant flaw that allows for SQL injection…
Canada & U.K. To Launch Investigation over 23andMe Hack
Privacy regulators in Canada and the United Kingdom have initiated a collaborative inquiry into the genetic testing firm 23andMe in response to a major data…
Researchers Detailed ValleyRAT Password Stealing Techniques
Hackers use RATs to get unauthorized access and full control of the victim’s computer and all its functionalities and enable other malicious abilities. They allow…
Critical Vulnerabilities In Netgear Routers Let Attackers Bypass Authentication
Security analysis identified multiple vulnerabilities in the Netgear WNR614 JNR1010V2 N300 router (firmware V1.1.0.54_1.0.1) that could allow attackers to bypass authentication and access the router’s…
Hackers Using OTP bots To Bypass Two-Factor Authentication
Two-factor authentication (2FA) is a security method that requires two verification steps for user access and is commonly implemented with one-time passwords (OTPs) delivered via…
Japan Video-Sharing Website Suspensed Services by Cyber Attack
The popular Japanese video-sharing website Niconico has suspended its services due to a large-scale cyberattack. Niconico is one of Japan’s most extensive video-sharing services. Users…
TellYouThePass Ransomware Actor Weaponizing PHP RCE Flaw
The notorious TellYouThePass ransomware gang exploits a critical remote code execution (RCE) vulnerability in PHP to compromise servers and deploy their malicious payloads. The flaw,…
Fortinet to Acquire AI-Powered Cloud Security Platform Lacework
Fortinet, a global leader in broad, integrated, and automated cybersecurity solutions, has announced its acquisition of Lacework, an AI-powered cloud-native application protection platform (CNAPP). This…