Ubuntu Fixes Two OpenVPN Vulnerabilities
Ubuntu has fixed two vulnerabilities in OpenVPN, a virtual private network software. These vulnerabilities could keep the closing session active or lead to denial of service. Canonical released security updates for affected Ubuntu releases.
Cyware News – Latest Cyber News – Read More
Massive OTP-Stealing Android Malware Campaign Discovered
Android malware can intercept and steal OTPs and login credentials, leading to complete account takeovers.
The post Massive OTP-Stealing Android Malware Campaign Discovered appeared first on SecurityWeek.
SecurityWeek – Read More
Multiple SMTP Servers Vulnerable to Spoofing Attacks, Let Hackers Bypass Authentication
Multiple SMTP servers are vulnerable to spoofing attacks that allow hackers to bypass authentication. Two vulnerabilities, CVE-2024-7208 and CVE-2024-7209, exploit weaknesses in authentication and verification mechanisms provided by SPF and DKIM.
Cyware News – Latest Cyber News – Read More
Analysis of Top Infostealers: Redline, Vidar and Formbook
Protect your data from cyber threats: Learn about RedLine, Vidar, and FormBook infostealers, their tactics, and how ANY.RUN’s…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight
Certificate authority (CA) DigiCert has warned that it will be revoking a subset of SSL/TLS certificates within 24 hours due to an oversight with how it verified if a digital certificate is issued to the rightful owner of a domain.
The company said it will be taking the step of revoking certificates that do not have proper Domain Control Validation (DCV).
“Before issuing a certificate to a
The Hacker News – Read More
Microsoft 365 subscriptions now include a free VPN – here’s how to use it
It’s not bad for a free product but there are a few downsides.
Latest stories for ZDNET in Security – Read More
Dangerous XSS Bugs in RedCAP Threaten Academic & Scientific Research
The security vulnerabilities, CVE-2024-37394, CVE-2024-37395, and CVE-2024-37396, could lay open proprietary and sensitive research to data thieves.
darkreading – Read More
North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS
The threat actors behind an ongoing malware campaign targeting software developers have demonstrated new malware and tactics, expanding their focus to include Windows, Linux, and macOS systems.
The activity cluster, dubbed DEV#POPPER and linked to North Korea, has been found to have singled out victims across South Korea, North America, Europe, and the Middle East.
“This form of attack is an
The Hacker News – Read More