Tag cybersecurity

Extracting Data from Air-Gapped Computers Using Wi-Fi Signals (No Wi-Fi Equipment Required)

A recent breakthrough in cybersecurity research reveals a significant vulnerability within air-gapped systems, which are designed to be isolated from unsecured networks. Researchers have successfully demonstrated a method for exfiltrating sensitive data using a novel attack called AIR-FI. This technique operates by leveraging electromagnetic emissions from the computer’s DDR SDRAM…

Read MoreExtracting Data from Air-Gapped Computers Using Wi-Fi Signals (No Wi-Fi Equipment Required)

Widespread Exploitation of Recent SSRF Vulnerability in Ivanti VPN Products

Mass Exploitation of SSRF Vulnerability in Ivanti Products A significant server-side request forgery (SSRF) vulnerability affecting Ivanti Connect Secure and Policy Secure products has been widely exploited. Recent reports indicate that attacks are emanating from over 170 distinct IP addresses, indicating a coordinated effort to establish unauthorized access, including reverse…

Read MoreWidespread Exploitation of Recent SSRF Vulnerability in Ivanti VPN Products

Inotiv Pharmaceutical Company Confirms Data Breach After Ransomware Attack – CybersecurityNews

Pharma Firm Inotiv Confirms Data Breach Following Ransomware Attack In a significant cybersecurity incident, pharmaceutical company Inotiv has reported a data breach that was triggered by a recent ransomware attack. The company disclosed the breach to its stakeholders, emphasizing its commitment to investigating the potential impact on sensitive information. This…

Read MoreInotiv Pharmaceutical Company Confirms Data Breach After Ransomware Attack – CybersecurityNews

Google’s New Tool Notifies You When Compromised Credentials Are Used on Any Website

Google Launches Privacy-Focused Password Checkup Service Amid Rising Data Breaches In an era of escalating data breaches, where compromised credentials are frequently traded across the web, users face a daunting challenge: determining if their login information has been exposed. Recognizing this critical threat, Google has taken an affirmative step by…

Read MoreGoogle’s New Tool Notifies You When Compromised Credentials Are Used on Any Website

Over 92 Million New Accounts Available for Purchase Due to Additional Unreported Breaches

Recent reports reveal alarming statistics regarding data breaches and their implications for cybersecurity. In 2018 alone, over 5 billion records were exposed due to approximately 6,500 data breaches, as indicated by a report from Risk Based Security. Additionally, DLA Piper documented that more than 59,000 data breaches have been reported…

Read MoreOver 92 Million New Accounts Available for Purchase Due to Additional Unreported Breaches

LPG Gas Company Exposes Aadhaar Numbers of 6.7 Million Indian Customers

Data Leak Exposes Sensitive Aadhaar Information of Millions A recent security oversight has exposed the personal data of millions of customers belonging to Indane, a state-owned liquefied petroleum gas (LPG) company in India. The breach, discovered by French security researcher Baptiste Robert, also known as “Elliot Alderson” on Twitter, highlights…

Read MoreLPG Gas Company Exposes Aadhaar Numbers of 6.7 Million Indian Customers

Urgent: CISA Issues Warning on Ongoing ‘Roundcube’ Email Attacks – Update Your Patches Immediately

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reported on Monday the addition of a significant security vulnerability pertaining to Roundcube email software to its Known Exploited Vulnerabilities (KEV) catalog. This extension is based on confirmed instances of active exploitation. Identified as CVE-2023-43770 with a CVSS score of 6.1, the…

Read MoreUrgent: CISA Issues Warning on Ongoing ‘Roundcube’ Email Attacks – Update Your Patches Immediately