Moody’s Ratings reported that competition in the cyber insurance market is increasing, leading to a decrease in prices, with new players entering the market despite concerns about systemic risk. This article has been indexed from Cyware News – Latest Cyber…
Category: Cyware News – Latest Cyber News
PoC Exploit Releases for Windows Elevation of Privilege Vulnerability (CVE-2024-26230)
A PoC exploit for an Elevation of Privilege vulnerability in Windows has been released by a security researcher. This exploit targets a flaw in the Windows Telephony service, allowing attackers to gain SYSTEM privileges on affected systems. This article has…
Homeland Security Hopes to Scuttle Maritime Cyber-Threats
The U.S. Department of Homeland Security (DHS) has issued a request for information to assess the security of technology at ports in order to develop a Maritime Port Resiliency and Security Research Testbed. This article has been indexed from Cyware…
CAMO Unveiled: How Cybercriminals Exploit Legitimate Software for Stealthy Attacks
CAMO, short for Commercial Applications, Malicious Operations, showcases how cybercriminals are increasingly utilizing legitimate IT tools to evade security measures and conduct stealthy attacks. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Musician Charged With $10M Streaming Royalties Fraud Using AI and Bots
North Carolina musician Michael Smith has been indicted for allegedly scamming over $10 million in royalty payments from Spotify, Amazon Music, Apple Music, and YouTube Music through a massive streaming fraud scheme. This article has been indexed from Cyware News…
New RAMBO Attack Steals Data Using RAM in Air-Gapped Computers
The attack involves malware manipulating the computer’s RAM to emit controlled electromagnetic radiation that can transmit data to nearby recipients. The attack, created by Israeli researchers, leverages memory access patterns to modulate the RAM. This article has been indexed from…
Critical Kibana Flaws Expose Systems to Arbitrary Code Execution
A couple of critical vulnerabilities in Kibana, tracked as CVE-2024-37288 and CVE-2024-37285, can lead to arbitrary code execution. Elastic urges an immediate update to version 8.15.1. This article has been indexed from Cyware News – Latest Cyber News Read the…
Sextortion Scam Now Use Your “Cheating” Spouse’s Name as a Lure
A new sextortion scam variant is targeting spouses by claiming their partner is cheating on them and providing alleged proof in emails. These scams involve threatening to share compromising images or videos unless a payment is made. This article has…
HAProxy Vulnerability CVE-2024-45506 Under Active Exploit: Urgent Patching Required
This flaw in the HTTP/2 multiplexer can lead to an endless loop, system crashes, and remote denial-of-service attacks, with a CVSS score of 7. 5. The vulnerability impacts HAProxy Enterprise, ALOHA, and Kubernetes Ingress Controller products. This article has been…
Critical GeoServer Flaw Enabling Global Hack Campaigns
The flaw in GeoServer, tracked as CVE-2024-36401 and with a CVSS score of 9.8, was swiftly capitalized on by hackers who launched campaigns using botnet families and cryptominers to spread malicious tools like Goreverse, a reverse proxy server. This article…
LummaC2 Stealer and Malicious Chrome Extension Wreak Havoc
This attack begins with victims unknowingly downloading a malicious ZIP archive containing an installer file that sideloads a malicious DLL. This DLL then downloads the LummaC2 Stealer and a PowerShell script from a command-and-control server. This article has been indexed…
SonicWall SSLVPN Access Control Flaw is Now Exploited in Akira Ransomware Attacks
Initially believed to only impact SonicOS management access, it has now been confirmed to affect SSLVPN on SonicWall firewalls, including by Akira ransomware affiliates targeting accounts with disabled MFA and outdated firmware versions. This article has been indexed from Cyware…
Unmasking PackXOR: The FIN7 Packer Exposed
Despite its connection to FIN7, other threat actors have also employed PackXOR to distribute payloads like XMRig cryptominer and R77 rootkit, often in conjunction with SilentCryptoMiner. This article has been indexed from Cyware News – Latest Cyber News Read the…
Absolute Purchases Syxsense to Tackle Cyber Vulnerabilities
Absolute Security has acquired Syxsense, an endpoint and vulnerability management provider, to enhance its cyber resilience platform. The acquisition aims to simplify patching and remediation through automated workloads. This article has been indexed from Cyware News – Latest Cyber News…
Feds Indicted Two Alleged Administrators of WWH Club Dark Web Marketplace
Two men from Russia and Kazakhstan, Alex Khodyrev and Pavel Kublitskii, have been indicted in Tampa, Florida, for operating the Dark Web cybercriminal marketplace WWH Club. This article has been indexed from Cyware News – Latest Cyber News Read the…
Feds Warn Health Sector to Patch Apache Tomcat Flaws
The Department of Health and Human Services’ Health Sector Cybersecurity Coordination Center highlighted the ongoing discovery of vulnerabilities in Tomcat that pose a risk to organizations. This article has been indexed from Cyware News – Latest Cyber News Read the…
Critical Flaw in IBM webMethods Integration Demand Immediate Action
IBM webMethods Integration Server is hit by a critical flaw (CVE-2024-45076) with a CVSS score of 9. 9, demanding urgent attention. This flaw allows authenticated users to execute arbitrary commands, escalate privileges, and access sensitive files. This article has been…
Red Hat Issues Critical Patch for Pulpcore Authentication Bypass Flaw (CVE-2024-7923)
Red Hat has issued a critical security advisory for an authentication bypass vulnerability (CVE-2024-7923) in Pulpcore, a content management system used in Red Hat Satellite deployments. This article has been indexed from Cyware News – Latest Cyber News Read the…
Apache fixes critical OFBiz remote code execution vulnerability
Apache has addressed a critical remote code execution vulnerability in its OFBiz software, which could allow attackers to run malicious code on Linux and Windows servers. OFBiz is a CRM and ERP suite that serves as a Java-based web framework.…
Veeam Backup & Replication Faces RCE Flaw Allows Full System Takeover
A critical Remote Code Execution (RCE) flaw, CVE-2024-40711, with a CVSS score of 9. 8 has been discovered in Veeam Backup & Replication, allowing unauthorized attackers to take full control over systems. This article has been indexed from Cyware News…