Researchers found a vulnerability in the Shimano Di2 system’s proprietary protocol, making it susceptible to a replay attack. They demonstrated that an attacker could intercept and replay commands using off-the-shelf software-defined radio. This article has been indexed from Cyware News…
Category: Cyware News – Latest Cyber News
Tech Support Scam Found Hijacking Microsoft Search Queries Through Google Ads
Two deceptive campaigns were identified recently using Google ads and Microsoft’s infrastructure. The first scam involves a fake helpdesk page on Microsoft Learn whereas the second one hijacks Microsoft search queries through a Google ad. This article has been indexed…
Centreon Issues Critical Security Update to Fix SQL Injection Vulnerabilities That Threaten IT Monitoring
These vulnerabilities, known as CVE-2024-32501, CVE-2024-33852, CVE-2024-33853, CVE-2024-33854, CVE-2024-5725, and CVE-2024-39841, pose a significant risk to organizations relying on Centreon for IT infrastructure monitoring. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Critical SSTI Flaw in WPML Plugin Exposes Millions of WordPress Sites to RCE Attacks
This vulnerability allows authorized users to inject and execute malicious code through the plugin’s shortcode feature, potentially leading to data theft and website takeover. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Audit Finds Notable Security Gaps in FBI’s Storage Media Management
The FBI lacks proper policies and controls for tracking and disposing of storage media, leading to risks of loss or theft. The audit also identified physical security gaps in the media destruction process at FBI facilities. This article has been…
Marketing Data Security Threats Are Rising: Where CMOs See Gaps
A new report from the CMO Council and KPMG shows that building strong relationships between marketing and data security teams is crucial, but one-third of partnerships struggle with collaboration. This article has been indexed from Cyware News – Latest Cyber…
Vulnerability Prioritization is Only the Beginning
Vulnerability prioritization is crucial in managing security threats but is only the beginning. Knowing which vulnerabilities to address is not enough; the focus should be on quickly addressing and mitigating them. This article has been indexed from Cyware News –…
Fraud Tactics and the Growing Prevalence of AI Scams
Hiya, a call-blocking service, identified nearly 20 billion spam calls in the first half of 2024, with over 107 million spam calls daily. Of the 42 countries analyzed, 25 had spam flag rates exceeding 20%, some even surpassing 50%. This…
Over 3400 High and Critical Cyber Alerts Recorded in First Half 2024
A report from Critical Start’s Cyber Research Unit revealed over 3400 high and critical cyber alerts in the first half of 2024, marking a 46.15% increase in attacks in the US compared to 2023. This article has been indexed from…
US Charges Alleged Member of Russian Karakurt Ransomware Group
A 33-year-old Latvian man, Deniss Zolotarjovs, residing in Moscow, has been charged in the U.S. with money laundering, financial fraud, and extortion related to the Russian ransomware group Karakurt. This article has been indexed from Cyware News – Latest Cyber…
WordPress Websites Used to Distribute ClearFake Trojan Malware
WordPress websites were found distributing the ClearFake Trojan malware, a dangerous threat that can lead to ransomware infections. The malware was disguised as a prompt to install a root certificate. This article has been indexed from Cyware News – Latest…
Russian Laundering Millions for Lazarus Hackers Arrested in Argentina
A 29-year-old Russian national has been arrested in Buenos Aires, Argentina by the federal police on charges of money laundering for North Korean Lazarus hackers using cryptocurrency. This article has been indexed from Cyware News – Latest Cyber News Read…
Fake Funeral Live Stream Scams Target Grieving Users on Facebook
This type of scam typically starts with a comment on a funeral home’s Facebook notification, promoting a fake live stream of the funeral service or soliciting donations on behalf of the deceased family. This article has been indexed from Cyware…
Hundreds of Online Stores Hacked in New Campaign
A new malware campaign has targeted numerous online stores, compromising their security by injecting digital skimmers that can steal credit card information during the checkout process. This article has been indexed from Cyware News – Latest Cyber News Read the…
CISA’s $524M headquarters slated for DHS campus in 2027
CISA’s new $524M headquarters, set to be completed in 2027, will be located at the DHS campus in Washington. Construction is expected to begin in the fall, consolidating the agency’s workforce currently spread across five office rentals. This article has…
US Authorities Warn Healthcare Sector of Everest Ransomware Threats
The group, which has been active since 2020, specializes in data extortion and ransomware attacks. They have targeted at least 20 healthcare entities since 2021 and claim to have stolen patient information. This article has been indexed from Cyware News…
Telecom Company Hit with $1 Million Penalty Over AI-Generated Fake Robocalls
Lingo Telecom failed to comply with caller ID rules before the New Hampshire primary. FCC is seeking a $6 million fine against political consultant Steve Kramer for arranging the calls. This article has been indexed from Cyware News – Latest…
NIST Hands Off Post-Quantum Cryptography Work to Cyber Teams
NIST has issued new quantum-resistant cryptography standards, alerting cybersecurity teams to prepare for quantum threats. Quantum computing is expected to jeopardize current cryptographic methods within ten years. This article has been indexed from Cyware News – Latest Cyber News Read…
Two Remote Code Execution Vulnerabilities Discovered in Traccar GPS Tracking System
The two vulnerabilities are path traversal flaws, with CVE-2024-24809 allowing unrestricted file upload with dangerous types and CVE-2024-31214 enabling remote code execution through device image uploads. This article has been indexed from Cyware News – Latest Cyber News Read the…
Stealthy ‘sedexp’ Linux Malware Evaded Detection for Two Years
A sophisticated Linux malware called ‘sedexp’ has been flying under the radar since 2022, utilizing a unique persistence technique not yet recognized by the MITRE ATT&CK framework. This article has been indexed from Cyware News – Latest Cyber News Read…