P2Pinfect Malware Deploy Ransomware Windows Via SSH
Cybersecurity researchers have discovered a significant evolution in the previously dormant P2Pinfect malware strain. The updated version can now deploy ransomware and a cryptominer, posing…
Category: CyberSecurityNews
VMware ESXi Flaw Allows Attackers to Bypass Authentication
VMware has disclosed three critical vulnerabilities in its ESXi hypervisor that allow attackers to bypass authentication mechanisms. These vulnerabilities, identified as CVE-2024-37085, CVE-2024-37086, and CVE-2024-37087,…
Neiman Marcus Hacked: 64,000 customers Data Exposed
A Luxury retailer, Neiman Marcus, has disclosed a data breach affecting approximately 64,000 customers. The incident, which came to light after an investigation, exposed sensitive…
New MOVEit Auth Bypass Vulnerability Under Attack Now, Patch Immediately
Progress Software’s popular MOVEit Transfer and MOVEit Cloud-managed, file transfer solutions, have been found to contain a critical authentication bypass vulnerability (CVE-2024-5806). The vulnerability, which…
ANY.RUN Cyber Attack: Employee Email Address Hacked
A leading cybersecurity company has become the latest victim of a sophisticated phishing attack. The incident, which began in late May and culminated in a…
Hackers Use Windows XSS Flaw To Execute Arbitrary Command
The shift in attack vectors includes JavaScript, MSI files, LNK objects, and ISOs, as Microsoft has disabled Office macros in documents downloaded from the Internet.…
New Zip Slip vulnerability Let Attackers Execute Arbitrary Code
A Zip Slip vulnerability was discovered in Artifactory, the leading software repository manager, allowing attackers to execute arbitrary code through path traversal attacks. JFrog’s Artifactory…
WikiLeaks Founder Released After 5 Years
London, June 25, 2024—In a dramatic and unexpected turn of events, WikiLeaks founder Julian Assange has been released from prison after reaching a deal with…
Google Claims That Only 1% of Installs From Chrome Store Has Malware
In 2024, Google reported that less than 1% of Chrome Web Store installations contained malware. Extensions are small software programs that enhance your browser experience.…
Chinese RedJuliett Exploiting Firewalls, VPNs, & Load Balancers
A suspected Chinese state-sponsored cyberespionage group, RedJuliett, targeted the Taiwanese government and academic, technological, and diplomatic organizations between November 2023 and April 2024. They exploited…
Levi’s Data Breach: 72,000+ Customers’ Data Exposed
Levi Strauss & Co., a renowned American clothing company, has disclosed a significant data breach affecting over 72,000 customers. The breach occurred on June 13,…
Apple Vision Pro Flaw Let Attackers Fill Your Room with Spiders
Cybersecurity experts have discovered a critical flaw in Apple’s latest augmented reality (AR) headset, the Apple Vision Pro. This vulnerability allows malicious actors to exploit…