Tag cybersecurity

Twitter Reveals Possible State-Sponsored Attack Following Minor Data Breach

Twitter Faces Data Breach Linked to Suspected State-Sponsored Attack Twitter has recently experienced a minor data breach that the company attributes to a possible state-sponsored attack. In a blog post released on Monday, Twitter disclosed that during an investigation into a vulnerability affecting one of its customer support forms, it…

Read MoreTwitter Reveals Possible State-Sponsored Attack Following Minor Data Breach

Alert! NASA Notifies Employees of Personal Information Breach

In a significant cybersecurity incident, the National Aeronautics and Space Administration (NASA) has confirmed a breach that potentially exposes personal data of current and former employees. The breach, detected on October 23, involved unauthorized access to one of its servers, raising serious concerns about the integrity of sensitive information held…

Read MoreAlert! NASA Notifies Employees of Personal Information Breach

Urgent: Ivanti Reveals Two New Zero-Day Vulnerabilities, One Currently Exploited

Ivanti has issued a warning regarding two significant vulnerabilities impacting its Connect Secure and Policy Secure products. One of these vulnerabilities has reportedly been subjected to targeted exploitation in the wild, elevating concerns among users and security professionals alike. Detailed information about these vulnerabilities can be found via Ivanti’s official…

Read MoreUrgent: Ivanti Reveals Two New Zero-Day Vulnerabilities, One Currently Exploited

Cybercriminals Target Firms Connected to COVID-19 Vaccine Distribution

A sophisticated global phishing operation has been underway since September 2020, targeting entities involved in the distribution of COVID-19 vaccines. According to IBM Security X-Force researchers, these attacks, believed to be orchestrated by a nation-state actor, focus on the vaccine cold chain—the critical supply line managing the storage and transport…

Read MoreCybercriminals Target Firms Connected to COVID-19 Vaccine Distribution

Extracting Data from Air-Gapped Computers Using Wi-Fi Signals (No Wi-Fi Equipment Required)

A recent breakthrough in cybersecurity research reveals a significant vulnerability within air-gapped systems, which are designed to be isolated from unsecured networks. Researchers have successfully demonstrated a method for exfiltrating sensitive data using a novel attack called AIR-FI. This technique operates by leveraging electromagnetic emissions from the computer’s DDR SDRAM…

Read MoreExtracting Data from Air-Gapped Computers Using Wi-Fi Signals (No Wi-Fi Equipment Required)

Widespread Exploitation of Recent SSRF Vulnerability in Ivanti VPN Products

Mass Exploitation of SSRF Vulnerability in Ivanti Products A significant server-side request forgery (SSRF) vulnerability affecting Ivanti Connect Secure and Policy Secure products has been widely exploited. Recent reports indicate that attacks are emanating from over 170 distinct IP addresses, indicating a coordinated effort to establish unauthorized access, including reverse…

Read MoreWidespread Exploitation of Recent SSRF Vulnerability in Ivanti VPN Products

Inotiv Pharmaceutical Company Confirms Data Breach After Ransomware Attack – CybersecurityNews

Pharma Firm Inotiv Confirms Data Breach Following Ransomware Attack In a significant cybersecurity incident, pharmaceutical company Inotiv has reported a data breach that was triggered by a recent ransomware attack. The company disclosed the breach to its stakeholders, emphasizing its commitment to investigating the potential impact on sensitive information. This…

Read MoreInotiv Pharmaceutical Company Confirms Data Breach After Ransomware Attack – CybersecurityNews