Two critical vulnerabilities, CVE-2024-8503 (SQL Injection) and CVE-2024-8504 (Privilege Escalation), have been uncovered in the VICIdial Contact Center Suite, posing a major risk for call centers globally. This article has been indexed from Cyware News – Latest Cyber News Read…
Tag: Cyware News – Latest Cyber News
EchoStrike: Generate Undetectable Reverse Shells, Perform Process Injection
EchoStrike features an interactive Python wizard for easy customization, various persistence techniques, binary padding for evasion, AES payload encryption, and dynamic binary download. This article has been indexed from Cyware News – Latest Cyber News Read the original article: EchoStrike:…
Update: PoC Exploit Released for Windows Hyper-V Zero-Day Vulnerability
This critical flaw, actively exploited in the wild, allows attackers to elevate privileges to SYSTEM level, posing a significant risk to organizations using Microsoft’s Hyper-V virtualization technology. This article has been indexed from Cyware News – Latest Cyber News Read…
US Hits Intellexa Spyware Maker With More Sanctions
The US has imposed further sanctions on Intellexa, the maker of the Predator spyware, targeting individuals and entities associated with the company due to its opaque corporate structure designed to evade accountability. This article has been indexed from Cyware News…
23andMe Pledges $30 Million to the 6.4 Million People Affected by Data Breach
23andMe has pledged $30 million to compensate the 6.4 million people affected by a data breach in October 2023. The breach occurred when a hacker used stolen credentials to access a significant amount of account information, including health data. This…
Zero-Click Calendar Invite: Critical macOS Vulnerability Chain Uncovered
The vulnerability, tracked as CVE-2022-46723, enables attackers to manipulate files within the macOS Calendar app environment and execute remote code during system upgrades. This article has been indexed from Cyware News – Latest Cyber News Read the original article: Zero-Click…
Rising Clipper Malware Attacks Target Cryptocurrency Users
The malicious software called ClipBankers can monitor clipboard activity and replace cryptocurrency addresses with those controlled by attackers, diverting digital asset transfers to rogue wallets. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Critical Vulnerability in AutoGPT Puts Over 166,000 Projects at Risk
A critical vulnerability, CVE-2024-6091 (CVSS 9. 8), has been found in AutoGPT, a popular AI tool with over 166,000 projects at risk. The flaw allows for OS Command Injection, potentially enabling unauthorized actions. This article has been indexed from Cyware…
D-Link Fixes Critical RCE, Hardcoded Credential Flaws in WiFi 6 Routers
D-Link has addressed critical vulnerabilities in three popular WiFi 6 router models, fixing issues that could allow remote attackers to run arbitrary code or access devices with hardcoded credentials. This article has been indexed from Cyware News – Latest Cyber…
Metabase Q Raises $11M in Series A Extension Funding
Metabase Q, an IT cybersecurity management company based in San Francisco, has raised $11M in its Series A extension funding. Backers include SYN Ventures and John Watters. This article has been indexed from Cyware News – Latest Cyber News Read…
The Dark Nexus Between Harm Groups and ‘The Com’ – Krebs on Security
Western cybercriminals in online groups, like Scattered Spider, target vulnerable teens, pushing them towards harm and violence. The Com, a cybercriminal network, fosters extortion and violence among its members. This article has been indexed from Cyware News – Latest Cyber…
Strider Secures $55M to Fuel AI Growth and Global Expansion
Strider Technologies has secured $55 million in Series C funding to bolster its artificial intelligence research, expand into the government sector, and support global growth. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Woo Skimmer Uses Style Tags and Image Extension to Steal Card Details
A recent WooCommerce skimming attack used a creative method to steal credit card details by hiding malicious code within style tags and embedding a fake payment overlay in an image file disguised as a favicon. This article has been indexed…
Largest Crypto Exchange in Indonesia Suffers $22 Million Theft
Although Indodax did not confirm the exact amount stolen, reports suggest $22 million. The company warned users about potential scammers taking advantage of the situation. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Hackers Target Selenium Grid Servers for Proxyjacking and Cryptomining Attacks
Threat actors are infecting publicly exposed Selenium Grid servers to utilize victims’ internet bandwidth for cryptomining, proxyjacking, and potentially more harmful activities. This article has been indexed from Cyware News – Latest Cyber News Read the original article: Hackers Target…
Windows Vulnerability Abused Braille “Spaces” in Zero-Day Attacks
A recently patched Windows vulnerability, identified as CVE-2024-43461, was exploited by the Void Banshee APT hacking group in zero-day attacks to install information-stealing malware. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Cyber Threats Intensify in Mexico; Espionage and Extortion Risks Grow
Mandiant’s report highlights the escalating cyber threats facing Mexico, with a rise in global espionage and local cybercrime targeting individuals and businesses. Since 2020, cyber espionage groups from over 10 countries have targeted Mexican firms. This article has been indexed…
Applications are Open for IoT Device Cyber Certifiers
The FCC is seeking volunteers to serve as administrators for a new cybersecurity labeling program, allowing consumers to identify products less vulnerable to cyberattacks. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Python Libraries Exploited for Malicious Intent
A recent report by Xavier Mertens, a Senior ISC Handler and cybersecurity consultant, highlights a concerning trend where cybercriminals are increasingly using legitimate Python libraries for malicious activities. This article has been indexed from Cyware News – Latest Cyber News…
Aembit Raises $25M to Tackle Nonhuman Identity Security Challenges
Nonhuman identity and access management company Aembit Inc. has secured $25 million in funding to enhance its solutions. The Series A funding round was led by Acrew Capital. This article has been indexed from Cyware News – Latest Cyber News…