Category: CySecurity News – Latest Information Security and Hacking Incidents

Ivanti US Faces Security Crisis, Threatening Worldwide Systems

In a recent development, a critical server-side request forgery (SSRF) vulnerability has been discovered in Ivanti Connect Secure and Ivanti Policy Secure servers, marked as CVE-2024-21893. Security experts have confirmed that this vulnerability is being actively exploited by multiple attackers,…

Canon Patches Seven Critical Flaws in Small Office Printers

  Canon, a Japanese electronics company, released software patches on Monday that address seven major vulnerabilities impacting numerous small office printer models.  Buffer overflow flaws are the issues that can be used to execute code remotely over a network or…

HPE Cybersecurity Challenge: Data Breach Sparks Investigation

  Hewlett Packard Enterprise (HPE), a leading technology company, is currently grappling with a potential security breach as reports emerge of sensitive data being offered for sale on a prominent hacking forum. This latest incident underscores the persistent challenges faced…

ChatGPT Faces Data Protection Questions in Italy

  OpenAI’s ChatGPT is facing renewed scrutiny in Italy as the country’s data protection authority, Garante, asserts that the AI chatbot may be in violation of data protection rules. This follows a previous ban imposed by Garante due to alleged…

Can Face Biometrics Prevent AI-Generated Deepfakes?

AI-Generated deep fakes on the rise A serious threat to the reliability of identity verification and authentication systems is the emergence of AI-generated deepfakes that attack face biometric systems. The prediction by Gartner, Inc. that by 2026, 30% of businesses…

‘Leaky Vessels’ Cloud Flaws Enable Container Escapes Worldwide

  Researchers discovered a collection of four vulnerabilities in container engine components dubbed “Leaky Vessels,” three of which allow the perpetrators to escape out of containers and perform malicious operations on the host system. One of the vulnerabilities, CVE-2024-21626, affects…

EU Takes a Leap Forward with Cybersecurity Certification Scheme

What is the EU cybersecurity certification scheme? The EUCC, or EU cybersecurity certification scheme, has an implementing rule that was adopted by the European Commission. The result is consistent with the cybersecurity certification methodology under consideration on EUCC, which was…

Watch Out for Phone Scams

  At the extent of people’s gullibility, there is an increasing cybersecurity threat known as “vishing” which has become a cause for concern, impacting unsuspecting individuals and even businesses. Vishing, short for voice phishing, involves scammers attempting to trick people…

Phone Scam Siphons Over $200,000 from Bank Account Holder

A bank account holder recounts losing over $200,000 due to phone accessibility issues. Heidi Diamond became a victim of a cyber scam known as sim-swapping, resulting in the depletion of her bank account. Sim-swapping involves fraudsters deceiving cell phone companies…

Leaked Data from Binance Taken Down

One of the biggest cryptocurrency exchanges in the world’s security has come under scrutiny following the recent disclosure of private information from Binance on GitHub. Several documents, including code, internal passwords, and architecture diagrams, were purportedly released by an account…