Cybersecurity News

In a significant move to bolster cybersecurity, SAP has released its August 2024 patch set, addressing a total of 17 vulnerabilities across its software suite. The most critical among these is an authentication bypass flaw that could potentially allow remote attackers to completely compromise affected systems. Critical Authentication Bypass Vulnerability in SAP BusinessObjects The authentication … Read more

Microsoft has issued a critical security alert regarding a vulnerability affecting various versions of Office that could potentially expose NTLM hashes to remote attackers. This flaw, identified as CVE-2024-38200, poses a significant risk to organizations and individuals using affected Office products. Understanding the Vulnerability The vulnerability, classified as an information disclosure issue, allows unauthorized access … Read more

In a significant blow to cybercriminal operations, US and German law enforcement agencies have seized the domain of Cryptonator, a popular cryptocurrency wallet platform. The authorities allege that Cryptonator served as a hub for various illicit activities, including ransomware groups, darknet marketplaces, and other illegal services. The Rise and Fall of Cryptonator Launched in 2014, … Read more

In a significant development for digital content security, the popular browser extension Bypass Paywalls Clean (BPC) has been removed from GitHub, along with 3,879 related forks. This action, taken in response to a Digital Millennium Copyright Act (DMCA) complaint, highlights the ongoing tension between content creators and consumers in the digital age. The Rise and … Read more

In a significant move to bolster user privacy, Google is developing a new feature for its Chrome browser on Android devices. This innovation aims to protect sensitive information such as credit card details and passwords during screen sharing or recording sessions, addressing a critical vulnerability in mobile cybersecurity. Understanding the Current Privacy Concern Screen sharing … Read more

Cybersecurity experts have uncovered a new malicious tool called EDRKillShifter, employed by RansomHub ransomware operators to circumvent Endpoint Detection and Response (EDR) solutions. This sophisticated malware utilizes the increasingly prevalent Bring Your Own Vulnerable Driver (BYOVD) attack technique to elevate privileges, disable security measures, and seize control of target systems. Anatomy of EDRKillShifter: A Three-Stage … Read more

In a startling turn of events, the creator of the new infostealer malware Styx Stealer has inadvertently compromised their own computer, leaking sensitive data including client information, profits, nicknames, phone numbers, and email addresses. This incident, uncovered by Check Point analysts, serves as a stark reminder of the importance of robust cybersecurity practices, even for … Read more

In a significant cybersecurity case, 27-year-old Russian citizen Georgy Kavzharadze has been sentenced to 40 months in prison by a U.S. court for his involvement in selling over 300,000 stolen account credentials on the now-defunct hacking marketplace, Slilpp. This case highlights the ongoing battle against cybercrime and the international efforts to combat digital fraud. The … Read more

In a significant move to bolster cybersecurity, Microsoft has released its August Patch Tuesday updates, addressing nearly 90 vulnerabilities across its product line. This comprehensive security update is particularly noteworthy as it tackles six zero-day vulnerabilities that were actively exploited by threat actors. Critical Vulnerabilities and Zero-Day Exploits The August security release includes patches for … Read more

A shocking discovery by French cybersecurity firm Quarkslab has revealed a critical backdoor in millions of smart cards produced by Shanghai Fudan Microelectronics Group, China’s leading chip manufacturer. This vulnerability allows for instant cloning of RFID cards based on NXP’s MIFARE Classic chips, which are extensively used in public transportation, office buildings, hotels, financial institutions, … Read more