Article Details
Scrape Timestamp (UTC): 2024-12-30 12:19:25.805
Source: https://thehackernews.com/2024/12/thn-weekly-recap-top-cybersecurity_0611565081.html
Original Article Text
Click to Toggle View
β‘ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips. Every week, the digital world faces new challenges and changes. Hackers are always finding new ways to breach systems, while defenders work hard to keep our data safe. Whether it's a hidden flaw in popular software or a clever new attack method, staying informed is key to protecting yourself and your organization. In this week's update, we'll cover the most important developments in cybersecurity. From the latest threats to effective defenses, we've got you covered with clear and straightforward insights. Let's dive in and keep your digital world secure. β‘ Threat of the Week Palo Alto Networks PAN-OS Flaw Under Attack β Palo Alto Networks has disclosed a high-severity flaw impacting PAN-OS software that could cause a denial-of-service (DoS) condition on susceptible devices by sending a specially crafted DNS packet. The vulnerability (CVE-2024-3393, CVSS score: 8.7) only affects firewalls that have the DNS Security logging enabled. The company said it's aware of "customers experiencing this denial-of-service (DoS) when their firewall blocks malicious DNS packets that trigger this issue." π Top News βοΈβπ₯ Trending CVEs Heads up! Some popular software has serious security flaws, so make sure to update now to stay safe. The list includes β CVE-2024-56337 (Apache Tomcat), CVE-2024-45387 (Apache Traffic Control), CVE-2024-43441 (Apache HugeGraph-Server), CVE-2024-52046 (Apache MINA), CVE-2024-12856 (Four-Faith routers), CVE-2024-47547, CVE-2024-48874, and CVE-2024-52324 (Ruijie Networks) π° Around the Cyber World π₯ Expert Webinar π§ Cybersecurity Tools π Tip of the Week Isolate Risky Apps with Separate Spaces β When you need to use a mobile app but aren't sure if it's safe, protect your personal data by running the app in a separate space on your phone. For Android users, go to Settings > Users & Accounts and create a Guest or new user profile. Install the uncertain app within this isolated profile and restrict its permissions, such as disabling access to contacts or locations. iPhone users can use Guided Access by navigating to Settings > Accessibility > Guided Access to limit what the app can do. This isolation ensures that even if the app contains malware, it cannot access your main data or other apps. If the app behaves suspiciously, you can easily remove it from the separate space without affecting your primary profile. By isolating apps you're unsure about, you add an extra layer of security to your device, keeping your personal information safe while still allowing you to use the necessary tools. Conclusion This week's cybersecurity updates highlight the importance of staying vigilant and prepared. Here are some simple steps to keep your digital world secure: By taking these actions, you can protect yourself and your organization from emerging threats. Stay informed, stay proactive, and prioritize your cybersecurity. Thank you for joining us this weekβstay safe online, and we look forward to bringing you more updates next week!
Daily Brief Summary
Palo Alto Networks has recently identified and disclosed a critical vulnerability in its PAN-OS software, rated with a high severity CVSS score of 8.7.
The specific flaw could lead to a denial-of-service (DoS) condition when firewalls configured with DNS Security logging process specially crafted DNS packets.
Known as CVE-2024-3393, the vulnerability impacts only those devices with DNS Security logging activated.
Several customers have reported disruptions due to this DoS when their firewalls intercepted and blocked malicious DNS packets.
The company has acknowledged the attack and is presumably working towards a mitigation or fix to protect against potential exploits.
In broader cybersecurity news, several CVEs have been identified in popular software including Apache Tomcat, Apache MINA, and others, prompting urgent calls for updates to prevent possible breaches.
Additional cybersecurity tips of the week suggest isolating risky mobile apps in separate user profiles to safeguard personal data from untrusted applications.