Information Security (Page 39)

Critical SQL injection vulnerability in Nextcloud Server

On: April 26, 2022

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, incidents, Information Security, Nextcloud, security flaws, SQL injections, technology

Cybersecurity specialists report the detection of a critical vulnerability in Nextcloud Server, part of the client-server programs developed by Nextcloud that allow the creation of file hosting services. According toRead More →

Iran thwarted massive cyber attacks that planned to target the infrastructure of more than 100 public sector agencies and shut down the country

On: April 26, 2022

In: Cyber Security

Tagged: critical infrastructure, Cyberattack, cybercrime, cybersecurity, cyberwarfare, Hacking, incidents, Information Security, IP address, Iran, Israel, malware, security flaws, technology, United States

Through a recent investigation, representatives of Iran state TV mentioned that the country’s security teams managed to disrupt a series of cyberattacks that appeared to be aimed at massive disruptionRead More →

CVE-2022-22954: Remote code execution vulnerability in VMware Workspace ONE Access is actively exploited by Iranian hackers

On: April 26, 2022

In: Vulnerabilities

Tagged: advanced persistent threat (APT), APT35, cybersecurity, Hacking, Information Security, Proof of Concept (PoC), remote code execution (RCE), Rocket Kitten, security flaws, technology, VMware, VMware Workspace ONE Access, vulnerability

At least one sophisticated hacking group has been exploiting a critical remote code execution (RCE) vulnerability in VMware Workspace ONE Access. Tracked as CVE-2022-22954, the flaw was addressed in aRead More →

450 security researchers working through the Department of Homeland Security’s “Hack the DHS” bug bounty program identified over 122 vulnerabilities

On: April 25, 2022

In: Vulnerabilities

Tagged: Bug Bounty program, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS), Hack the DHS, hackers, Hacking, Information Security, Log4j, Log4Shell, security flaws, technology, vulnerability

A recent report by the U.S. Department of Homeland Security (DHS) notes that, over the past year, the “Hack the DHS” vulnerability bounty program involved more than 450 cybersecurity professionals,Read More →

How hackers are spoofing credit union emails to steal funds and credentials from end users

On: April 25, 2022

In: Cyber Security

Tagged: Avanan, Cyberattack, cybercrime, cybersecurity, data breach, data theft, electronic fraud, financial institutions, hackers, Hacking, Information Security, phishing, Security breach, security flaws

A couple of months ago, the U.S. National Credit Union Administration (NCUA) issued a report asking thrift cooperatives to take proactive measures in the face of potential cybersecurity threats, asRead More →

Russian hackers attack Ukrainian postal service systems

On: April 22, 2022

In: Cyber Security

Tagged: Anonymous, Cyberattack, cybercrime, cybersecurity, cyberwarfare, Denial of Service (DDoS), Distributed Denial of Secrets (DDoSecrets), hackers, Hacking, hacktivism, Information Security, Russia, security flaws, Ukraine

Representatives of Ukrposhta ,Ukraine’s national postal service report detecting a cyberattack after a postage stamp showing a Ukrainian soldier making a rude gesture to a Russian warship was put upRead More →

Critical vulnerabilities in industrial solutions Elcomplus, manufacturer of radiocommunication and industrial automation products

On: April 22, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Elcomplus, Elcomplus SmartPPT SCADA, hackers, Hacking, Information Security, SCADA systems, technology, vulnerability

Cybersecurity specialists report the detection of a series of vulnerabilities in Elcomplus SmartPPT SCADA, an integrated voice and data dispatch software. According to the report, successful exploitation of the flawRead More →

Two serious vulnerabilities in Drupal would allow hackers to take full control of affected websites

On: April 21, 2022

In: Vulnerabilities

Tagged: content management system (CMS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Drupal, Hacking, incidents, Information Security, Security breach, security flaws, vulnerability

This week, Drupal administrators announced the release of security updates in order to address some security flaws that could lead to access bypass and data overwriting attacks. In its report,Read More →

Vulnerability in Snort detection engine would allow unauthenticated remote hackers to cause DoS attacks on affected devices

On: April 21, 2022

In: Vulnerabilities

Tagged: Cisco, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, intrusion prevention system (IPS), Modbus, security flaws, Snort, technology

A flaw has been reported in the Modbus preprocessor of the Snort detection engine whose exploitation could lead to severe hacking scenarios. Snort is a free network intrusion detection systemRead More →