Cybersecurity News
-
Unpatched SimpleHelp RMM Systems Being Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding active ransomware campaigns exploiting unpatched versions of the SimpleHelp Remote Monitoring and Management (RMM) software. This vulnerability, tracked as CVE-2024-57727,…
-
Massive Data Leak of China-Based Users Discovered
Recent research has highlighted a significant data leak involving hundreds of millions of Chinese citizens. And the nature of the data suggests it may have been collected for a variety of purposes,…
-
Acer Releases Patch for Care/Control Center Vulnerability
Acer recently discovered a security issue affecting its Acer Care Center and Acer Control Center software. These programs come pre-installed on many Acer laptops and desktops (since 2014 for verisons as early…
-
Research Reveals Security Misconfiguration Risks and Zero-Day Vulnerabilities in Salesforce
Recent research has revealed significant security vulnerabilities in Salesforce, affecting core components used by businesses across industries. AppOmni, a SaaS security platform, uncovered over 20 misconfigurations, along with several zero-day vulnerabilities that…
-
United Natural Foods Cyberattack Disrupts Operations
United Natural Foods Inc (UNFI), the largest wholesale distributor of natural and organic products in North America, is currently dealing with the aftermath of a cyberattack that has temporarily disrupted its business…
-
HP Releases Fix for Vulnerability in Support Assistant Tool
In a recent security advisory, HP has announced the discovery of a critical vulnerability in its HP Support Assistant software, which is used on a wide range of HP laptops and desktops.…
-
iVerify Finds Evidence of Potential Hidden iPhone Attacks
iVerify, a mobile MDR (Managed Detection and Response) software company, has identified signs that some iPhones may have been targeted by highly sophisticated, covert hacking techniques. These attacks are believed to involve…
-
Fake AI Tools and Websites Used to Distribute Malware
In an environment where AI tools are becoming increasingly integral to innovation and daily operations, cybercriminals are seizing the opportunity to exploit this trend. Recent research from Talos, Cisco’s threat intellegence research…
-
Malicious Fake Caching Plugin Used to Steal WordPress Admin Credentials
Cybersecurity researchers have identified a new tactic used by attackers to compromise WordPress sites. A fake caching plugin, named wp-runtime-cache, has been discovered hiding in the plugin directory of affected sites. While…