Cybersecurity News - Page 304

The researchers believe that Siamesekitten's focus on the IT and communication companies in Israel is just a way to compromise their clients via supply chain attacks.

The unprotected database was discovered on July 19 when it was indexed by search engines Censys and ZoomEye.

The ransomware attack did not impact the operations of Tesouro Direto program.

The data reportedly includes social security numbers, phone numbers, names, physical addresses, unique IMEI numbers, and driver’s license information.

The first bug is an arbitrary file upload vulnerability, while the second is described as local privilege escalation vulnerability.

Successful exploitation of this vulnerability allows a local hacker to gain SYSTEM privileges on a computer.

The tech giant also released a patch for Windows Update Medic Service elevation of privilege zero day vulnerability.

Acording to cybersecurity researchers, 50% of the stolen cards are still active and valid.

The attacks began after cybersecurity researchers showed technical details of these problems at the Black Hat conference.

Their exploitation could allow unauthenticated attackers to achieve arbitrary code execution on affected devices.