Information Security Archives | Page 115 of 685

Fintech Blockchain

Is Cardano’s New zkApp on Midnight the Future of Blockchain Privacy?

Cardano’s blockchain ecosystem has witnessed a significant milestone with the launch of its Midnight sidechain’s first zero-knowledge application (zkApp), developed in collaboration with Paima Studios. This gaming studio, specializing in Web3 technologies, has joined forces with Cardano to create a groundbreaking advancement that has generated excitement within the Cardano community, including its founder, Charles Hoskinson. The announcement by Sebastien Guillemot,

November 18, 2024

Fintech Blockchain

$SINK Token: Revolutionizing Meme Coins with Profit and Purpose

In the rapidly evolving world of cryptocurrency, a new player has emerged, aiming to integrate financial innovation with community-centric initiatives. Known as the $SINK Token, this digital asset falls within the realm of meme coins but distinguishes itself by offering diverse trading opportunities and building community trust. By delivering lucrative benefits such as staking rewards with higher returns, $SINK has

November 18, 2024

Fintech Blockchain

MezFi Launches Blockchain Platform Opening Mezzanine Finance to Investors

Imagine you are an average retail investor in Australia or New Zealand, typically limited in options to grow your wealth beyond traditional stock markets or savings accounts. Now, thanks to innovation in the fintech sector, you have an opportunity to access a sophisticated investment world previously dominated by institutional investors and the super-wealthy. Melbourne-based fintech company, MezFi, introduces a blockchain-backed

November 18, 2024

Cyber Security

Dell Urges Immediate Update Due to Critical SONiC Security Vulnerabilities

Dell Technologies has identified three critical security vulnerabilities in their Enterprise SONiC (Software for Open Networking in the Cloud) operating system, addressing versions 4.1.x and 4.2.x. These vulnerabilities, recorded as CVE-2024-45763, CVE-2024-45764, and CVE-2024-45765, present alarming risks detailed by cybersecurity experts. Two of these, CVE-2024-45763 and CVE-2024-45765, are OS Command Injection flaws with a concerning CVSS score of 9.1. They

November 18, 2024

Cyber Security

Is Your PostgreSQL Database Vulnerable to CVE-2024-10979 Flaw?

Imagine discovering that your trusted PostgreSQL database, which stores critical organizational data, has a high-severity security flaw that could allow unprivileged users to execute arbitrary code or access sensitive information. This concerning scenario has become a reality with the identification of CVE-2024-10979, a significant vulnerability in the PostgreSQL open-source database system. Assigned a Common Vulnerability Scoring System (CVSS) score of

November 18, 2024

Cyber Security

Are You Prepared to Address New Microsoft Windows Vulnerabilities?

In today’s rapidly evolving digital landscape, the importance of cybersecurity cannot be overstated. Recently, the Cybersecurity and Infrastructure Security Agency (CISA) issued a critical warning about two newly identified vulnerabilities in Microsoft Windows, designated CVE-2024-49039 and CVE-2024-43451. These vulnerabilities pose significant threats as they could permit attackers to escalate their privileges and access sensitive data. Given the potential ramifications, it

November 18, 2024

Cyber Security

Roblox Developers Targeted by Malware in Fake npm Packages Attack

As Roblox continues to maintain its position as one of the most popular online gaming platforms with over 79.5 million daily users as of mid-2024, the large developer community associated with it has become a prime target for cybercriminals. A recent cyberattack has specifically targeted Roblox developers through malicious npm packages designed to steal credentials and personal information. This latest

November 18, 2024

Cyber Security

Massive MOVEit Breach Exposes Data of Millions Across Major Industries

The recent discovery of a significant data breach due to a critical vulnerability in the MOVEit file transfer software has sent shockwaves through various industry sectors. Identified as CVE-2023-34362, this breach has compromised the sensitive information of millions of employees across 25 major organizations, including financial, technological, healthcare, and retail companies. Operating under the alias “Nam3L3ss,” the hacker has revealed

November 18, 2024

Cyber Security

Can AI Granny Contain the Rising Threat of Scam Phone Calls?

The increasing frequency of scam phone calls has become a significant concern, with a majority of Brits wary of being caught in the fraudulent web. Over two-thirds of the population express apprehension about phone fraud, while an alarming one in five has endured weekly attempts. To counter this burgeoning menace, Virgin Media O2 has introduced an innovative solution: an AI-powered

November 18, 2024

Cyber Security

Ransomware Attackers Target Cloud Services for Data Exfiltration

In an alarming development, ransomware attackers have increasingly turned to exploiting cloud services, such as Amazon S3 and Microsoft Azure Blob Storage, to facilitate data exfiltration and increase the pressure on their victims for ransom payments. The SentinelLabs report highlights this growing trend, where these popular cloud storage services are being leveraged for compromising IT systems. The Growing Trend This

November 18, 2024

Cyber Security

Can Fortinet’s Vulnerable Codebase Survive Sophisticated Cyber Threats?

In a recent development that has heightened concerns in the cybersecurity community, watchTowr, a prominent attack surface management provider, has identified a new zero-day vulnerability in Fortinet products. Dubbed "FortiJump Higher," this flaw allows a managed FortiGate device to elevate its privileges and gain control over the FortiManager instance, posing significant risks to the security of these systems. The discovery

November 18, 2024

Cyber Security

Are Your AI Models at Risk of Security Flaws and Data Exfiltration?

When Palo Alto Networks’ Unit 42 recently discovered two significant security vulnerabilities in Google’s Vertex AI machine learning (ML) platform, it highlighted notable risks. These vulnerabilities have the potential to lead to unauthorized access, privilege escalation, and critical data exfiltration if exploited. Vertex AI, introduced in May 2021, offers a scalable environment for training and deploying custom ML models and

November 18, 2024