Security researchers revealed a critical authentication bypass vulnerability (CVE-2024-53704) in SonicWall's SonicOS SSL VPN, affecting multiple firewall series. The flaw allows attackers to hijack VPN sessions and gain unauthorized network access through crafted session cookies. With 4,50...
Fortinet reveals two critical vulnerabilities in FortiOS and FortiProxy systems, with one (CVE-2024-55591) actively exploited as a zero-day. The flaws affect multiple versions and could allow attackers to gain super-admin privileges, create unauthorized accounts, and access SSL VPN. Immedi...
Brazilian hacker Junior Barros De Oliveira faces U.S. charges for a $3.2M Bitcoin extortion scheme after breaching a Brazilian subsidiary of a New Jersey company in 2020. He allegedly stole data of 300,000 customers and demanded 300 bitcoin from the CEO, later reducing his demand to 75 bit...
A major U.S. organization with Chinese operations faced a sophisticated cyber attack between April-August 2024, likely conducted by Chinese threat actors. The campaign, discovered by Symantec, showed similarities to previous 'Daggerfly' group attacks and employed advanced techniques includ...
