CISA Adds Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and MSSQL Server Bugs to its KEV Catalog

These vulnerabilities can lead to remote code execution and privilege escalation, posing a significant risk to affected systems. For example, the Oracle JDeveloper vulnerability can allow attackers to compromise the software and take over the system.

Cyware News – Latest Cyber News – ​Read More

Clever ‘GitHub Scanner’ Campaign Abusing Repositories to Push Malware

A sophisticated campaign is using GitHub repositories to spread the Lumma Stealer malware, targeting users interested in open-source projects or receiving email notifications from them.

Cyware News – Latest Cyber News – ​Read More

Microsoft Entra ID’s Administrative Units Weaponized to Gain Stealthy Persistence

Datadog Security Labs recently revealed a security risk within Microsoft Entra ID, showing how its administrative units (AUs) can be weaponized by attackers to create persistent backdoor access.

Cyware News – Latest Cyber News – ​Read More

Adversarial attacks on AI models are rising: what should you do now?

With AI’s growing influence across industries, malicious attackers continue to sharpen their tradecraft to exploit ML models.Read More

Security News | VentureBeat – ​Read More

Ivanti’s Cloud Service Appliance Attacked via Second Vuln

The critical bug, CVE-2024-8963, can be used in conjunction with the prior known flaw to achieve remote code execution (RCE).

darkreading – ​Read More

Citrine Sleet Poisons PyPI Packages With Mac & Linux Malware

A North Korean advanced persistent threat (APT) actor (aka Gleaming Pisces) tried to sneak simple backdoors into public software packages.

darkreading – ​Read More

More than $44 million in cryptocurrency stolen from Singaporean platform BingX

Singaporean crypto platform BingX said Friday that more than $44 million was stolen from their platform in a cyberattack.

The Record from Recorded Future News – ​Read More

Zero-Click MediaTek Bug Opens Phones, Wi-Fi to Takeover

Critical-rated CVE-2024-20017 allows remote code execution (RCE) on a range of phones and Wi-Fi access points from a variety of OEMs.

darkreading – ​Read More

Police Broke Tor Anonymity to Arrest Dark Web Users in Major CSAM Bust

German authorities dismantled Boystown, a notorious Dark Web platform for CSAM, by deanonymizing Tor users in 2021. This…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Airline exec settles hack-for-hire case against law firm, pledging to ‘vigorously’ prosecute other alleged conspirators

The aviation executive Farhad Azima settled litigation this week against the law firm Dechert and two of its former attorneys who he alleged were involved in the hacking of his personal accounts in order to smear his reputation.

The Record from Recorded Future News – ​Read More