OpenStack’s Ironic project, which is used for provisioning bare metal machines, has been identified with a critical security flaw (CVE-2024-44082) that allows authenticated users to exploit unvalidated image data. This vulnerability impacts multiple versions of Ironic and the Ironic-Python-Agent…
Category: CySecurity News – Latest Information Security and Hacking Incidents
Critical Security Flaw Discovered in LiteSpeed Cache Plugin for WordPress
A major security vulnerability has been uncovered in the LiteSpeed Cache plugin, used on over 5 million WordPress websites worldwide. The flaw, identified as CVE-2024-44000, was discovered by Rafie Muhammad, a security researcher at Patchstack. Rated with a CVSS…
Enterprise Resilience in the Face of Cyber Risk
There are now more than $10 trillion in annual cybercrime costs in the world, which speaks volumes about how quickly data breaches, ransomware attacks, and malicious disruption of business and government operations are growing in scale and scope. Cyber…
Irish Data Protection Commission Halts AI Data Practices at X
The Irish Data Protection Commission (DPC) recently took a decisive step against the tech giant X, resulting in the immediate suspension of its use of personal data from European Union (EU) and European Economic Area (EEA) users to train…
Halliburton Hit by Cyberattack, Data Stolen
Halliburton, one of the world’s largest energy companies, has confirmed that it was the victim of a cyberattack. Hackers infiltrated the company’s systems and stole sensitive information. The attack occurred last week, and Halliburton is still determining the extent…
Iran Cyber Attack: Fox Kitten Aids Ransomware Operations in the U.S
A new joint cybersecurity advisory from the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense Cyber Crime Center (DC3) has revealed updated details about the Iran-based cyber threat group known as…
Microchip Technology Confirms Private Data Stolen in Ransomware Attack
Microchip Technology has acknowledged that employee information was stolen from vulnerable systems in an August incident. The Play ransomware group later claimed responsibility. The chipmaker, headquartered in Chandler, Arizona, serves over 123,000 clients across a variety of industries, including…
CISA Launches Major Effort to Secure the 2024 U.S. Elections
The Cybersecurity and Infrastructure Security Agency (CISA) in the United States has initiated a comprehensive campaign to secure the 2024 elections. This effort involves deploying specialized advisory teams across the nation and coordinating security exercises with federal, state, and…
Protecting Your Digital Identity: The Impact of EUCLEAK on FIDO Devices
A new vulnerability has emerged that poses a significant threat to FIDO devices, particularly those using the Infineon SLE78 security microcontroller. Thomas Roche of Ninja Labs discovered the flaw. This vulnerability, dubbed “EUCLEAK,” has raised concerns among security experts and…
WazirX Hacker Starts Moving Stolen Ether Anonymously Using Tornado Cash
As a result of an attack by an unknown entity, some of the $234 million allegedly stolen from the WazirX exchange in one of India’s worst crypto hacks has already been laundered. This action occurred on the same day…
Sophos X-Ops Uncovers Major Qilin Ransomware Breach Targeting Chrome Browser Credentials
Cybersecurity firm Sophos X-Ops has exposed a significant ransomware breach by the Qilin group, which has introduced a new and highly concerning technique of stealing credentials stored in Google Chrome browsers on compromised systems. Qilin, active since at least…
Transport for London Faces Ongoing Cyber Security Incident, Works to Safeguard Systems and Data
Transport for London (TfL), which oversees much of the public transport network in England’s capital, is dealing with an ongoing “cyber security incident.” The organization confirmed the situation yesterday, stating: “We are currently dealing with an ongoing cyber security…
IT Manager Faces Charges for Locking Computers to Demand Money
A recent case has highlighted that ransomware threats can sometimes come from within an organisation. Daniel Rhyne, a 57-year-old IT administrator from Kansas City, Missouri, has been accused of holding his own company hostage by locking down their systems…
CISO Role Expands as Cybersecurity Becomes Integral to Business Strategy
Over the past decade, the role of Chief Information Security Officers (CISOs) has expanded significantly, reflecting cybersecurity’s growing importance in corporate governance and risk management. Once primarily responsible for managing firewalls and protecting data, CISOs now play a critical role…
MIT Database Lists Hundreds of AI Dangers Impacting Human Lives
Artificial intelligence is present everywhere. If it isn’t powering your online search results, it’s just a click away with your AI-enabled mouse. If it’s not helping you enhance your LinkedIn profile, it’s benefiting you at work. As AIs become…
Citrine Sleet APT Exploits Chrome Zero-Day Vulnerability for Rootkit Infiltration
It is believed that North Korean hackers have been able to use unpatched zero-day in Google Chrome (CVE-2024-7971) to install a rootkit called FudModule after gaining admin privileges by exploiting a kernel vulnerability in Microsoft Windows. An investigation by…
Rise in Ransomware Attacks in Southeast Asia Driven by Rapid Digitalization and Security Gaps
A wave of ransomware attacks across Southeast Asia during the first half of this year marks just the beginning of a larger trend. Companies and government agencies, particularly in countries like Thailand, Japan, South Korea, Singapore, Taiwan, and Indonesia,…
Security Analysts Observe Massive Surge in Telegram App Downloads Following Durov Arrest
The arrest of Telegram creator and CEO Pavel Durov in France is beginning to have an influence on the app’s popularity and position. The founder was arrested last month for allegedly allowing illicit practices to thrive on the social…
Adopting a Connected Mindset: A Strategic Imperative for National Security
In today’s rapidly advancing technological landscape, connectivity goes beyond being just a buzzword—it has become a strategic necessity for both businesses and national defense. As security threats grow more sophisticated, an integrated approach that combines technology, strategic planning, and…
Is Telegram Still a Safe Messaging App? An In-Depth Look
Telegram, a popular messaging app launched in 2013, has earned a reputation for its robust security features. This Dubai-based platform offers end-to-end encryption for video and voice calls and in its optional feature, Secret Chats. This encryption ensures that only…