cybersecuritynews.com

Windows 11 Escalation Vulnerability Let Attackers Gain Admin Access Within 300 Milliseconds

by
8
80

Oracle Security Update - Patch for 378 Vulnerabilities Including Remote Exploits

by
1
12

MITRE’s Support for CVE Program Set to Expire

by

Archive

3
73
1

Hackers Leveraging Teams Messages to Execute Malware on Windows Systems

by
1
29

New Stealthy Malware 'Waiting Thread Hijacking' Technique Bypasses Modern Defenses

by
0
14

Windows Defender Anti-virus Bypassed Using Direct Syscalls & XOR Encryption

by

"According to the research published by Hackmosphere, the technique works by avoiding the conventional execution path where applications call Windows API functions through libraries like kernel32.dll, which then forwards requests to ntdll.dll before making the actual system call to the kernel."

24
104

Sophisticated QR Code Phishing Attack Targeting Microsoft 365 Users to Steal Logins

by
0
15

Apple Warns of Three 0-Day Vulnerabilities Actively Exploited in Attacks

by
0
11

Meta AI Will Begin Rolling Out Across 41 European Countries

by

Archived

0
15
1

Check Point Acknowledges Data Breach, Claims Information is 'Old

by
0
5

Meta AI Will Begin Rolling Out Across 41 European Countries

by

Archived

4
29
1

Hackers Abuse COM Objects for Fileless Malware Lateral Movements

by
0
4

New SvcStealer Malware Attacking Users To Steal Sensitive Data From Browsers & Apps

by
0
5

New VanHelsingRaaS Attacking Linux, BSD, ARM, and ESXi Systems

by
0
7

New Botnet Dubbed “Eleven11bot” Hacked 30,000 Webcams

by
1
6
1

New Botnet Dubbed “Eleven11bot” Hacked 30,000 Webcams

by
0
1
1

Apache Traffic Server Vulnerabilities Let Attackers Perform Malformed Requests

by
0
8

InvokeADCheck - Powershell Based Tool to Detect Active Directory Misconfigurations

by
0
6

VMware ESXi Vulnerabilities Exploited in Wild to Execute Malicious Code

by
0
8

Exim Mail Transfer Vulnerability Let Attackers Inject Malicious SQL Queries

by
0
3

Hackers Exploited Confluence Server Vulnerability To Deploy LockBit Ransomware

by
0
11

Raymond IT Systems Hit by Cyber Attack – Investigation In progress

by
0
1

Pegasus Spyware Used Widely to Target Individuals in Private Industry & Finance Sectors

by
0
19
1

Cyber Threat Actors Leveraging Exploits To Attack Financial Sector With Advanced Malware

by
0
10

Ransomware Gangs Encrypt Systems After 17hrs From Initial Infection

by
2
13

New XCSSET Malware Attacking macOS Users by Infecting Xcode Projects

by
0
12

New Malware Exploiting Outlook As a Communication Channel via The Microsoft Graph API

by
1
15

USB Army Knife – A Powerful Red Team Tool for Penetration Testers

by
1
12

Seven Years Old Linux Kernel Vulnerability Let Attackers Execute Remote Code

by
4
12

PoC Exploit Released for AnyDesk Vulnerability Exploited to Gain Admin Access Via Wallpapers

by
0
18

Cisco Hacked – Ransomware Group Allegedly Breach Internal Network & Gained AD Access

by
0
51

0-Day Vulnerabilities in Microsoft Sysinternals Tools Allow Attackers To Launch DLL Injection Attacks on Windows

by
0
12

Tata Technologies Hacked - Ransomware Attack Compromises IT Systems

by
1
7

Lazarus Hackers Altering Legitimate Software Packages To Launch Large-Scale Cyber Attack

by
0
8

New SMS-Based Phishing Tool 'DevilTraff' Enables Mass Cyber Attacks

by
0
9

Lynx Ransomware Infrastructure To Attack Windows, Linux, ESXi & Affiliate Panel Uncovered

by
0
9

New Ransomware Attacking VMware ESXi Hosts Via SSH Tunneling to Evade Detection

by
1
13

Pumakit – A Sophisticated Linux Rootkit Attack Critical Infrastructure

by
0
13

Windows 11 BitLocker-Encrypted Files Accessed Without Disassembling Laptops

by

Researchers demonstrated how attackers can bypass its protections without physically tampering with the device. The exploit, known as “bitpixie” (CVE-2023-21563), was showcased at the Chaos Communication Congress (38C3) by security researcher Thomas Lambertz.

1
27

7-Zip Zero-Day Exploit Allegedly Leaked Online

by
3
50

Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked

by

Volkswagen has inadvertently exposed the personal information of 800,000 electric vehicle owners, including their location data and contact details. The breach, which occurred due to a misconfiguration in the systems of Cariad, VW’s software subsidiary, left sensitive data stored on Amazon Cloud publicly accessible for months. The exposed information included precise GPS data, which allowed […] The post Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked appeared first on Cyber Security News.

16
62
2

Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked

by

Volkswagen has inadvertently exposed the personal information of 800,000 electric vehicle owners, including their location data and contact details. The breach, which occurred due to a misconfiguration in the systems of Cariad, VW’s software subsidiary, left sensitive data stored on Amazon Cloud publicly accessible for months. The exposed information included precise GPS data, which allowed […] The post Volkswagen Data Breach: 800,000 Electric Car Owners’ Data Leaked appeared first on Cyber Security News.

14
95
2

New QR Code-Based C2 Attack Lets Hackers Bypass All Type of Browser Isolation Security

by
0
15

Cisco Identity Services Engine Flaw Bypass Authorization Mechanisms

by
0
9

Western Digital My Cloud Devices Flaw Let Attackers Execute Arbitrary Code

by
1
27

Critical 0-Click RCE in Windows TCP/IP Stack Impacts All Systems

by
5
37

Windows Zero-day Flaw Let Hackers Downgrade Fully Updated Systems to Old Vulnerabilities

by

Archived version

8
82

Microsoft Entra ID (Azure AD) Vulnerability Let Attackers Gain Global Admin Access

by
0
1

0.0.0.0 Day - 18 Yr Old Vulnerability Let Attackers Bypass All Browser Security

by
17
74

Bitdefender Vulnerability Let Attackers Trigger SSRF Attacks

by
0
16

Tag-100 Hacker Group Exploiting Citrix NetScaler & F5 BIG-IP Vulnerabilities

by
0
9

Leaked Cellebrite Tool Docs Reveal List of Phones That Can Be Unlocked

by

According to the documents, Cellebrite could not unlock any iPhones running iOS 17.4 or newer as of April 2024, labeling them as “In Research.” For iOS versions 17.1 to 17.3.1, the company could unlock the iPhone XR and iPhone 11 series using their “Supersonic BF” (brute force) capability. However, iPhone 12 and newer models running these iOS versions were listed as “Coming soon.”

0
24
1

Leaked Cellebrite Tool Docs Reveal List of Phones That Can Be Unlocked

by

According to the documents, Cellebrite could not unlock any iPhones running iOS 17.4 or newer as of April 2024, labeling them as “In Research.” For iOS versions 17.1 to 17.3.1, the company could unlock the iPhone XR and iPhone 11 series using their “Supersonic BF” (brute force) capability. However, iPhone 12 and newer models running these iOS versions were listed as “Coming soon.”

27
272
1

TeamViewer Hacked: Attackers Accessed Internal Corporate IT Environment

by

On Wednesday, June 26, 2024, TeamViewer, a leading provider of remote access software, announced that attackers had compromised its internal corporate IT environment.

5
139

U.S. Sanctions Cybercrime Network Behind Massive Residential Proxy Bothnet Service

by
0
9