407/67 Friday, November 15, 2024 Zoom has patched six vulnerabilities in its video conferencing and communication platform, including two high-severity vulnerabilities that could be exploited by remote attackers to escalate privileges or leak sensitive information. These two vulnerabilities were discovered by the Zoom Offensive Security team, with details as follows: Additionally, Zoom addressed four medium-severity […]
406/67 Friday, November 15, 2024 Bitdefender, the renowned cybersecurity company, has launched a free decryption tool to help victims unlock data encrypted by the ShrinkLocker ransomware. After thoroughly analyzing this malware, it was discovered that ShrinkLocker uses VBScript techniques and the BitLocker encryption feature of Microsoft Windows to encrypt files on victims’ systems. Despite its […]
405/67 Thursday, November 14, 2024 SAP released its July 2024 security update to address 18 vulnerabilities across various products. This update includes fixes for two critical vulnerabilities that could allow attackers unauthorized access to sensitive data and systems. The most severe of these is CVE-2024-39592, affecting the SAP Product Design Cost Estimating (PDCE) tool, with […]
404/67 Thursday, November 14, 2024 Renowned credit rating agency Moody’s has released a recent report indicating that the telecommunications, airline, and power generation industries are currently facing high cyber risks. The report highlights that these industries’ heavy reliance on digital technology, combined with insufficient security practices, increases their vulnerability to cyberattacks. This heightened risk is […]
403/67 Wednesday, November 13, 2024 Amazon has disclosed a data breach that exposed employee information following the MOVEit attack in May 2023. The stolen data was taken from an external service provider partnered with the company. However, Amazon did not specify the number of employees affected by the incident. A threat actor group known as […]
402/67 Wednesday, November 13, 2024 Researchers at Kaspersky have discovered a new type of ransomware called Ymir, which is being used in attacks alongside the RustyStealer malware. RustyStealer is a data-stealing program that infiltrates the victim’s system before deploying Ymir ransomware. Ymir targets networks containing sensitive information, with RustyStealer employing techniques to collect credentials and […]
401/67 Tuesday, November 12, 2024 Palo Alto Networks has issued an urgent alert for customers to review the security settings of the PAN-OS management interface following the discovery of a potential Remote Code Execution (RCE) vulnerability that could be exploited. Although the source of the allegations remains unclear, the company is closely monitoring the situation. […]
400/67 Tuesday, November 12, 2024 Researchers from Securelist have discovered a new malware called SteelFox that is spreading through fake software activation tools, primarily targeting Microsoft Windows users who download pirated software like Foxit PDF Editor, AutoCAD, and JetBrains. The malware attack began in February 2023, and over 11,000 victims have been identified worldwide so […]
399/67 Monday, November 11, 2024 On October 29, 2024, Newpark Resources, a major oil industry supplier in the United States, was impacted by a ransomware attack that temporarily disrupted access to some of its information systems and business applications. Upon detecting the incident, the company promptly activated its cyber threat response plan and initiated an […]
398/67 Monday, November 11, 2024 D-Link has issued a warning regarding over 60,000 end-of-life (EoL) network-attached storage (NAS) devices that are being targeted due to a vulnerability that could allow malicious actors to take control of the devices. This vulnerability, identified as CVE-2024-10914, has been given a critical severity rating of 9.2. The flaw stems […]
