Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Mi, 25.12.2024 15:30

The Apache Software Foundation (ASF) has shipped security updates to address a critical security flaw in Traffic Control that, if successfully exploited, could allow an attacker to execute arbitrary Structured Query Language (SQL) commands in the database. The SQL injection vulnerability, tracked as CVE-2024-45387, is rated 9.9 out of 10.0 on the CVSS scoring system. "An SQL injection...

Erstellt: Mi, 25.12.2024 15:30

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS —...

Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Mi, 25.12.2024 12:24

The Iranian nation-state hacking group known as Charming Kitten has been observed deploying a C++ variant of a known malware called BellaCiao. Russian cybersecurity company Kaspersky, which dubbed the new version BellaCPP, said it discovered the artifact as part of a "recent" investigation into a compromised machine in Asia that was also infected with the BellaCiao malware. BellaCiao was first...

Erstellt: Mi, 25.12.2024 12:24

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Di, 24.12.2024 15:22

Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index (PyPI) repository and came fitted with capabilities to exfiltrate sensitive information from compromised hosts, according to new findings from Fortinet FortiGuard Labs. The packages, named zebo and cometlogger, attracted 118 and 164 downloads each, prior to them being taken down....

Erstellt: Di, 24.12.2024 15:22

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Di, 24.12.2024 11:40

Japanese and U.S. authorities have formerly attributed the theft of cryptocurrency worth $308 million from cryptocurrency company DMM Bitcoin in May 2024 to North Korean cyber actors. "The theft is affiliated with TraderTraitor threat activity, which is also tracked as Jade Sleet, UNC4899, and Slow Pisces," the agencies said. "TraderTraitor activity is often characterized by targeted social...

Erstellt: Di, 24.12.2024 11:40

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Di, 24.12.2024 11:25

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched high-severity security flaw impacting Acclaim Systems USAHERDS to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild. The vulnerability in question is CVE-2021-44207 (CVSS score: 8.1), a case of hard-coded, static credentials in Acclaim USAHERDS that...

Erstellt: Di, 24.12.2024 11:25

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active Exploitation

Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Di, 24.12.2024 08:06

The Apache Software Foundation (ASF) has released a security update to address an important vulnerability in its Tomcat server software that could result in remote code execution (RCE) under certain conditions. The vulnerability, tracked as CVE-2024-56337, has been described as an incomplete mitigation for CVE-2024-50379 (CVSS score: 9.8), another critical security flaw in the same product that...

Erstellt: Di, 24.12.2024 08:06

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Details: TheHackersNews; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Mo, 23.12.2024 15:48

Cybersecurity researchers have found that it's possible to use large language models (LLMs) to generate new variants of malicious JavaScript code at scale in a manner that can better evade detection. "Although LLMs struggle to create malware from scratch, criminals can easily use them to rewrite or obfuscate existing malware, making it harder to detect," Palo Alto Networks Unit 42 researchers...

Erstellt: Mo, 23.12.2024 15:48

aktualisiert: Mi, 08.01.2025 16:58

Weiterlesen: AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Details: securitymagazine.com RSS; Hauptkategorie: IT News aus aller Welt; Kategorie: Sicherheitsinfos; Veröffentlicht: Mo, 23.12.2024 07:00

Discover how integrating advanced technology with physical security measures can strengthen your organization’s duty of care, ensuring employee safety, trust, and resilience in an ever-evolving workplace environment....

Erstellt: Mo, 23.12.2024 07:00