CySecurity News - Latest Information Security and Hacking Incidents: Vulnerabilities and Exploits

Labels



 Trendy Right Now

Showing posts with label Vulnerabilities and Exploits. Show all posts

Operation Zero Offers Up to $4M for Telegram Exploits



 

Zero-Day Vulnerabilities

(RCE) Cybersecurity Threats Remote Code Execution Telegram security Vulnerabilities and Exploits Zero-Day Vulnerabilities

Operation Zero Offers Up to $4M for Telegram Exploits

Operation Zero, a firm specializing in acquiring and selling zero-day vulnerabilities exclusively to Russian government entities and local companies, has announced a significant...

Windows Shortcut Vulnerability Exploited by 11 State-Sponsored Outfits



 

Zero-day Flaw

Malicious Files nation-state hackers Threat Landscape Vulnerabilities and Exploits Zero-day Flaw

Windows Shortcut Vulnerability Exploited by 11 State-Sponsored Outfits

Since 2017, at least 11 state-sponsored threat groups have actively exploited a Microsoft zero-day issue that allows for abuse of Windows shortcut files to steal data and...

Critical Security Flaws Discovered in mySCADA myPRO SCADA System



 

Vulnerabilities and Exploits

command injection flaw critical infrastructure cybersecurity industrial cybersecurity mySCADA vulnerabilities OT security risks SCADA security Vulnerabilities and Exploits

Critical Security Flaws Discovered in mySCADA myPRO SCADA System

Cybersecurity researchers have identified two high-severity vulnerabilities in mySCADA myPRO, a Supervisory Control and Data Acquisition (SCADA) system widely used in operational...

Cybercriminals Target Paragon Partition Manager Vulnerability in BYOVD Attacks



 

Windows

BYOVD Attack CyberCrime Cybersecurity CyberThreat Vulnerabilities and Exploits Vulnerability Windows

Cybercriminals Target Paragon Partition Manager Vulnerability in BYOVD Attacks

It has been reported that threat actors have been actively exploiting a security vulnerability within the BioNTdrv.sys driver of Paragon Partition Manager in ransomware...

Qualcomm Identifies and Patches Critical Security Issues in Latest Update



 

Vulnerabilities and Exploits

Cyberattacks CyberCrime Cyberhackers CyberThreat Cyersecurity Qualcomm Vulnerabilities and Exploits

Qualcomm Identifies and Patches Critical Security Issues in Latest Update

Several vulnerabilities were identified in Qualcomm's latest security update for March 2025 that impacted many products, including automotive systems, mobile chipsets, and...

FBI And CISA Issues Warning of Ongoing ‘Ghost’ Ransomware Attack



 

Vulnerabilities and Exploits

Chinese Hacker CISA FBI Ransomware Gang Vulnerabilities and Exploits

FBI And CISA Issues Warning of Ongoing ‘Ghost’ Ransomware Attack

Ghost, a ransomware outfit, has been exploiting software and firmware flaws since January, according to an FBI and Cybersecurity and Infrastructure Security Agency (CISA)...

XE Group Rebrands Its Cybercrime Strategy by Targeting Supply Chains



 

XE Group

CVSS CyberCrime Cyberhackers CyberThreat Microsoft Software SQL Vulnerabilities and Exploits XE Group

XE Group Rebrands Its Cybercrime Strategy by Targeting Supply Chains

Over the past decade, there has been a rise in the number of cyber threats targeting the country, including the XE Group, a hacker collective with Vietnamese connections....

Apple Patches Zero-Day Flaw allowing Third-Party Access to Locked Devices



 

Vulnerabilities and Exploits

Data Privacy Locked Device Security Patch Tech Giant Vulnerabilities and Exploits

Apple Patches Zero-Day Flaw allowing Third-Party Access to Locked Devices

Tech giant Apple fixed a vulnerability that "may have been leveraged in a highly sophisticated campaign against specific targeted individuals" in its iOS and iPadOS mobile...

BitLocker Vulnerability Exposes Encryption Flaws: A New Challenge for Cybersecurity



 

Vulnerabilities and Exploits

AES-XTS Bitlocker encryption system Microsoft Vulnerabilities and Exploits

BitLocker Vulnerability Exposes Encryption Flaws: A New Challenge for Cybersecurity

Password theft has recently dominated headlines, with billions of credentials compromised. Amid this crisis, Microsoft has been pushing to replace traditional passwords...

Cloudflare CDN Vulnerability Exposes User Locations on Signal, Discord



 

Vulnerabilities and Exploits

Cloudfare Discord Signal User Privacy Vulnerabilities and Exploits

Cloudflare CDN Vulnerability Exposes User Locations on Signal, Discord

A threat analyst identified a vulnerability in Cloudflare's content delivery network (CDN) which could expose someone's whereabouts just by sending them an image via platforms...

Critical Flaws in VPN Protocols Leave Millions Vulnerable



 

WireGuard

IPsec Security VPN Vulnerabilities and Exploits WireGuard

Critical Flaws in VPN Protocols Leave Millions Vulnerable

Virtual Private Networks (VPNs) are widely trusted for protecting online privacy, bypassing regional restrictions, and securing sensitive data. However, new research has...

FortiGate Vulnerability Exposes 15,000 Devices to Risks



 

Vulnerabilities and Exploits

CyberCrime Cyberfrauds Cybersecurity Cyberthreats Darkweb Databreach Hackers Vulnerabilities and Exploits

FortiGate Vulnerability Exposes 15,000 Devices to Risks

Fortinet Firewall Data Breach: 15,000 Devices Compromised by Belsen Group On January 14, 2025, it was reported that the configuration data of over 15,000 Fortinet...

TPM-Equipped Devices Trigger Warnings Due to a Windows BitLocker Flaw



 

Windows Security

Bitlocker Security flaw TPM Vulnerabilities and Exploits Windows Security

TPM-Equipped Devices Trigger Warnings Due to a Windows BitLocker Flaw

Microsoft is examining a flaw that activates security alerts on systems equipped with a Trusted Platform Module (TPM) processor after enabling BitLocker. A Windows...

Millions of Email Servers Found Vulnerable in Encryption Analysis



 

Vulnerabilities and Exploits

Cyberfrauds CyberThreat Cyercrime Cyersecurity Email Phishing Vulnerabilities and Exploits

Millions of Email Servers Found Vulnerable in Encryption Analysis

In a new study published by ShadowServer, it was revealed that 3.3 million POP3 (Post Office Protocol) and IMAP (Internet Message Access Protocol) servers are currently...

Palo Alto Networks Alerts on Exploit Causing Firewall Vulnerabilities



 

Vulnerabilities and Exploits

DNS security issue firewall vulnerability malicious packets manual intervention Palo Alto Networks PAN-OS update Vulnerabilities and Exploits

Palo Alto Networks Alerts on Exploit Causing Firewall Vulnerabilities

Palo Alto Networks has issued a warning about the active exploitation of the CVE-2024-3393 denial of service (DoS) vulnerability, which attackers are using to compromise...

Critical Security Issue Hits Four-Faith Routers



 

Vulnerabilities and Exploits

Cyberattacks CyberCrime Cyberhackers Cybersecurity Cyberthreats Four-Fait Routers VulnCheck Vulnerabilities and Exploits

Critical Security Issue Hits Four-Faith Routers

According to VulnCheck, a critical vulnerability identified as CVE-2024-12856 has been discovered in Four-Faith industrial routers, specifically affecting the F3x24 and...

Understanding and Preventing Botnet Attacks: A Comprehensive Guide



 

Vulnerabilities and Exploits

Botnet Cyberattacks CyberCrime Cybersecurity CyberThreat Cyberthreats DDOS Attacks IoT Vulnerabilities and Exploits

Understanding and Preventing Botnet Attacks: A Comprehensive Guide

Botnet attacks exploit a command-and-control model, enabling hackers to control infected devices, often referred to as "zombie bots," remotely. The strength of such...

Thousands of SonicWall Devices Vulnerable to Critical Security Threats



 

Vulnerabilities and Exploits

Business Security firewall exploits Security Patch SonicWall Vulnerabilities and Exploits

Thousands of SonicWall Devices Vulnerable to Critical Security Threats

Thousands of SonicWall network security devices are currently exposed to severe vulnerabilities, with over 20,000 running outdated firmware that no longer receives...

Active Exploitation of Cleo Communications' File Transfer Software Exposes Critical Vulnerabilities



 

Vulnerabilities and Exploits

Cleo Server Data Leak File Transfer Tool Security Patch Vulnerabilities and Exploits

Active Exploitation of Cleo Communications' File Transfer Software Exposes Critical Vulnerabilities

Cleo Communications' file transfer software is under active attack, with security researchers from Huntress revealing that a recently issued patch fails to address the...

Page 1 of 321234567...32Next »Last

Search This Blog

Sections

Popular Posts

Blog Archive

Labels

About Me

Showing result(s) for

Popular Posts

Pages

Menu Item