Category: CySecurity News – Latest Information Security and Hacking Incidents

The Use of AI by Sales Teams is Booming

  According to Salesforce’s 2024 State of Sales report, sales teams are combining tools and strengthening data security to reap the benefits of AI. Following a global survey of 5,500 sales professionals, the report’s four main findings are as follows: …

Ransomware Groups Exploit VMware ESXi Bug for Widespread Attacks

  Several ransomware groups have been exploiting a vulnerability in VMware ESXi hypervisors that allows them to bypass authentication and rapidly deploy malware across virtual environments. Identified as CVE-2024-37085, this bug has been assigned a “medium” severity rating of 6.8…

Domain Validation Bug: DigiCert Revokes TLS Certificates

In a major development in the tech landscape, SSL/TLS certificate provider “DigiCert” recently announced that it will be revoking around 83,267 certificates. This big step was taken due to a bug in their domain validation process, which dented the integrity…

HealthEquity Data Breach Exposes Personal Information

  HealthEquity, a leading provider of Health Savings Accounts (HSAs), has confirmed a significant data breach affecting potentially 4.3 million customers. The breach, discovered in March but only confirmed in June, involved unauthorized access to a data repository containing sensitive…

OAuth and XSS Bugs: Exposing Data of Millions of Users

The cyberspace landscape changes frequently, sometimes the change is good, while sometimes we stumble across challenges.  One such problem surfaced recently when Salt Labs experts found OAuth (Open Authorization) implementation flaws and cross-site scripting (XSS) vulnerabilities in the Hotjar service,…