Aggregator

In a significant shift in the ransomware landscape, payments to attackers have decreased by approximately 35% year-over-year. This decline is attributed to increased law enforcement actions, improved international collaboration, and a growing trend among victims to refuse ransom demands. Here below we have mentioned all the key developments in 2024:- Shifts in Ransomware Tactics As […]

The post Ransomware Payments Dropped By 35%, As Victims Refusing To Pay appeared first on Cyber Security News.

Let's discuss the major things anyone should look into before choosing an API gateway in today's sprawling, AI-driven threat landscape.

The post API Gateway Security Needs a Stronger Zero-Trust Strategy appeared first on Security Boulevard.

A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Control/Api/Api.php. The manipulation of the argument thumb leads to deserialization. This vulnerability was named CVE-2025-1186. The attack can be initiated remotely. Furthermore, there is an exploit available.

A routine physical penetration test conducted by cybersecurity professionals took an unexpected turn when armed police arrested two security experts during a simulated breach at a corporate office in Malta. The incident involving miscommunication between the client and local authorities has sparked discussions about the importance of coordination in such high-stakes assessments. Physical penetration testing […]

The post Penetration Testers Arrested by Police During Authorized Physical Penetration Testing appeared first on Cyber Security News.

Submit #495820 / VDB-295090

Как хакеры маскируют свои действия, сливаясь с легитимным трафиком.

The UK MoD has announced it is fast-tracking the recruitment of specialist cybersecurity roles, with recruits offered a starting salary of above £40,000

A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2025-1185. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModal_MQTTEdit. The manipulation of the argument id leads to sql injection. This vulnerability is handled as CVE-2025-1184. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #495748 / VDB-295057

Submit #495737 / VDB-295057

Researchers have uncovered a critical flaw in the Linux kernel that could allow attackers to execute remote code.  The vulnerability, which had been inactive for seven years, was uncovered while conducting routine research on the Linux kernel’s TCP subsystem. This bug, now identified as CVE-2024-36904, highlights the persistent risks in widely used open-source software. Discovery […]

The post Seven Years Old Linux Kernel Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.

A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument login_id leads to sql injection. This vulnerability is known as CVE-2025-1183. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #495548 / VDB-295089

Submit #495413 / VDB-295088

A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-1182. It is possible to launch the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in npm-serialize-javascript up to 6.0.1. This issue affects some unknown processing. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-11831. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.