The Cyber Express
The ever-evolving landscape of cybersecurity is shaped by a dedicated group of individuals. These pioneers, through their research, entrepreneurship, and
SecurityWeek
Russian-speaking threat actors are caught abusing a GitHub profile to distribute information stealers posing as legitimate software.
Infosecurity News
The flaws include CVE-2023-47610, a security weakness within the modem’s SUPL message handlers
The Hacker News
Kaspersky researchers have uncovered multiple security flaws in Cinterion cellular modems that could put your communication networks and IoT devices a
SC Magazine
Security pros say critical flaws in cellular these modems could cut across the industrial, healthcare, automotive, financial, and telecom sectors.
Security Affairs
CERT Polska warns of a large-scale malware campaign against Polish government institutions conducted by Russia-linked APT28.
Bleeping Computer
Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS.
Bleeping Computer
Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS.
Bleeping Computer
Poland says a state-backed threat group linked to Russia's military intelligence service (GRU) has been targeting Polish government institutions throughout the week.
The Hacker News
Russia-Linked APT28 Strikes Poland with Malware Campaign Polish government bodies were hit by a sophisticated malware attack orchestrated by the infam
The Record
A phishing campaign against Polish institutions was the work of Russia’s military intelligence agency, the GRU, according to CERT-PL.
Infosecurity News
Researchers from Carnegie Mellon University have shared an overview of their new AI Security Incident Response Team (AISIRT)
Latest Hacking News
Researchers caught a serious security vulnerability in the R programming language that could allow arbitrary code execution. Given the extensive application of this language, particularly for AI/ML projects, the vulnerability could have a huge impact
Security Affairs
LockBit ransomware operators have published sensitive data allegedly stolen from the Simone Veil hospital in Cannes.
SecurityWeek
4,000 take part in Locked Shields 2024 exercise, Qantas and JP Morgan hit by data exposure bugs, NVIDIA patches critical flaw.
The Record
“The emergence of new actors suggests a deliberate strategy by Russia to diversify its cyberwarfare arsenal,” according to an official with Ukraine's cyber agency.
Bleeping Computer
A new vulnerability has been discovered in the R programming language that allows arbitrary code execution upon deserializing specially crafted RDS and RDX files.
The Hacker News
The U.S. government has unveiled new security guidelines to fortify critical infrastructure against AI-related risks.
The Cyber Express
The LockBit ransomware group has allegedly claimed responsibility for an earlier Cannes Hospital cyberattack impacting the Cannes Simone Veil Hospital
Security Affairs
Identity and access management services provider Okta warned of a spike in credential stuffing attacks aimed at online services.
The Hacker News
Cybersecurity researchers have uncovered a targeted cyber attack against Ukraine that leveraged a 7-year-old Microsoft Office flaw to deploy Cobalt St
SecurityWeek
More than 1,400 CrushFTP servers remain vulnerable to an actively exploited zero-day for which PoC has been published.
Security Affairs
Over 1,400 CrushFTP internet-facing servers are vulnerable to attacks exploiting recently disclosed CVE-2024-4040 vulnerability.
Security Affairs
CISA adds Cisco ASA and FTD and CrushFTP VFS vulnerabilities to its Known Exploited Vulnerabilities catalog.
HACKRead
A critical zero-day vulnerability in CrushFTP, a popular file transfer software, allows attackers to download sensitive system files.
Security Affairs
A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute backdoors and cryptocurrency miners.
DarkReading
An exploit for the vulnerability allows attackers to escape a virtual file system sandbox to download system files and potentially achieve RCE.
Latest Hacking News
WordPress admins using the Forminator plugin on their websites must rush to update their sites with the latest plugin release. That’s because numerous vulnerabilities existed in the Forminator plugin that could allow triggering site crashes
CyberSecurity Dive
CrushFTP CEO Ben Spink said the company isn’t aware of any data theft thus far, but researchers see echoes of MOVEit exploits and other high-profile file-transfer vulnerabilities.
Cyber Security News
Researchers identified a cyberattack by the Sandworm group targeting critical infrastructure in Ukraine in March 2024, which aimed to disrupt
Ars Technica
eScan AV updates were delivered over HTTP for five years.
Cyber Security News
A sophisticated malware campaign has been compromising the update mechanism of eScan antivirus software to distribute malicious backdoors and cryptocurrency mining software.
Infosecurity News
Notorious APT44 group Sandworm launched a mass campaign against Ukrainian critical infrastructure in March
The Record
Ukraine’s computer emergency response team said it has confirmed the compromise of at least three "supply chains" by the Sandworm hacking group this spring.
SC Magazine
Arbitrary code in Lambda Layers may be unsafely executed in older versions of Keras.
Bleeping Computer
Russian hacker group Sandworm aimed to disrupt operations at around 20 critical infrastructure facilities in Ukraine, according to a report from the Ukrainian Computer Emergency Response Team (CERT-UA).
SecurityWeek
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files.
Security Affairs
Japan's CERT warns of a vulnerability in the Forminator WordPress plugin that allows unrestricted file uploads to the server.
Security Affairs
Threat actors exploited a critical zero-day vulnerability in the CrushFTP enterprise in targeted attacks, Crowdstrike experts warn.
Security Affairs
A French hospital was forced to return to pen and paper and postpone medical treatments after a cyber attack.
Bleeping Computer
The Forminator WordPress plugin used in over 500,000 sites is vulnerable to a flaw that allows malicious actors to perform unrestricted file uploads to the server.
The Hacker News
If you use CrushFTP for file transfers, update to the latest version immediately.
Bleeping Computer
CrushFTP warned customers today in a private memo of an actively exploited zero-day vulnerability fixed in new versions released today, urging them to patch their servers immediately.
SecurityWeek
OpenSSF and OpenJS incidents similar to XZ backdoor, Moldovan botnet operator charged, US automotive company targeted by FIN7.
The Record
CERT-UA is attributing the surge to a group tracked as UAC-0184, which was also recently spotted targeting an unnamed Ukrainian entity in Finland.
CyberNews
The Hôpital de Cannes - Simone Veil in France is hit by a major cyberattack, shutting down all IT systems and forcing medical staff to use paper and pencil.
Bleeping Computer
The Hospital Simone Veil in Cannes (CHC-SV) has announced that it was targeted by a cyberattack on Tuesday morning, severely impacting its operations and forcing staff to go back to pen and paper.
The Cyber Express
Cannes Simone Veil Hospital Center (CHC-SV) is grappling with the aftermath of a cyberattack that struck the hospital on April
DarkReading
Delinea rolls out Secret Server SOAP API flaw fixes, while researcher claims the vendor ignored his findings for weeks.
SecurityWeek
Delinea rushed to patch a critical authentication bypass vulnerability after it apparently ignored the researcher who found the flaw.
Security Affairs
A critical flaw, named ‘BatBadBut’, impacts multiple programming languages, its exploitation can lead to command injection in Windows apps.
HACKRead
Critical 'BatBadBut' Flaw in Windows Lets Hackers Inject Commands (Patch Now!)
SecurityWeek
A critical vulnerability in multiple programming languages allows attackers to inject commands in Windows applications.
Bleeping Computer
Researchers have demonstrated the "first native Spectre v2 exploit" for a new speculative execution side-channel flaw that impacts Linux systems running on many modern Intel processors.
Infosecurity News
A flaw in the Rust standard library exposes Windows systems to command injection attacks
The Hacker News
Cybersecurity researchers reveal the 'first native Spectre v2 exploit' targeting Linux kernel on Intel systems.
The Hacker News
A severe vulnerability (CVE-2024-24576) in the Rust standard library could lead to command injection attacks on Windows systems.
Security Affairs
HTTP/2 CONTINUATION Flood: a new HTTP/2 vulnerability can be exploited to conduct powerful denial-of-service (DoS) attacks
Bleeping Computer
Newly discovered HTTP/2 protocol vulnerabilities called "CONTINUATION Flood" can lead to denial of service (DoS) attacks, crashing web servers with a single TCP connection in some implementations.
The Hacker News
New research exposes vulnerability in HTTP/2 protocol! The CONTINUATION frame can be exploited for DoS attacks, warns security expert Bartek Nowotarsk
SecurityWeek
New HTTP/2 DoS method named Continuation Flood can pose a greater risk than Rapid Reset, which has been used for record-breaking attacks.
DarkReading
New AcidPour variant can attack a significantly broader range of targets including IoT devices, storage area networks, and handhelds.
Cyber Security News
Linux systems are used widely for servers, cloud environments, and IoT devices which makes them an attractive target to cyber criminals as
CyberNews
Russia is using a new malware variant with expanded capabilities to target Ukrainian telecommunication networks.
The Hacker News
AcidPour malware targets four telecom providers in Ukraine, linked to AcidRain and Russian military intelligence operations.
The Record
A group known as Solntsepek claimed responsibility for the incidents. Ukrainian officials confirmed that they are investigating it as a Russian state-backed operation.
DarkReading
Attackers can create a self-perpetuating, infinite attack scenario in such a way that volumes of traffic overwhelm network resources indefinitely.
Bleeping Computer
A new denial-of-service attack dubbed 'Loop DoS' targeting application layer protocols can pair network services into an indefinite communication loop that creates large volumes of traffic.
Cyber Security News
The reason hackers go after financial institutions is because these places have valuable things like money, intellectual property, and
DarkReading
Russia's government is pretending to be other governments in emails, with an eye toward stealing strategic intel.
SecurityWeek
Academic researchers describe a new application-layer loop DoS attack affecting Broadcom, Honeywell, Microsoft and MikroTik.
The Record
Smokeloader malware used by Russia-linked cybercriminals remains one of the major tools for financial hacks in Ukraine, according to a recent report.
Latest Hacking News
Another security vulnerability has been found in the modern CPUs supporting speculative execution. Identified as “GhostRace”, the vulnerability is a Spectre variant that combines with race condition, exposing data to an adversary. GhostRace Vulnerability Impacts Most
Bleeping Computer
Certifications are a great way to enshrine your practical knowledge on your resume. This four-course exam prep bundle for CompTIA's cybersecurity credentials adds those lines for $39.99, $116 off the $156 MSRP.
The Hacker News
New CPU attack, "GhostRace" discovered. Exploits speculative execution + race conditions to steal sensitive data.
Ars Technica
Toss certbot or acme.sh onto some servers and baby, you got a stew going!
.png)
Cyber Security News
Threat actors target Notepad++ as it is a widely used text editor among developers and users, offering a large potential victim pool.
The Record
As Russia prepares for its presidential election this week, its systems are reportedly being targeted by “massive” cyberattacks, according to local authorities.
DarkReading
Open-source software ecosystem compromise leaves developers in Asia and around the globe at risk.
SecurityWeek
Multiple vulnerabilities in Sceiner firmware allow attackers to compromise several smart lock brands and open doors.
The Cyber Express
In an age where digital threats loom large and cyberattacks continue to proliferate, the resilience of a nation's cybersecurity infrastructure
Security Affairs
A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs are free for you.
The Cyber Express
According to the findings from a recent Kaspersky study revealed at Cybersecurity Weekend, 41% of companies worldwide are facing a
Infosecurity News
Government agencies from the Five Eyes coalition said that Ivanti’s own tools are not sufficient to detect compromise
Security Affairs
A new malware campaign is targeting a Ukraine entity in Finland with Remcos RAT distributed via a loader called IDAT Loader.
Cyber Security News
Steganography is employed by threat actors to hide malicious payloads in benign files such as pictures or documents.
Bleeping Computer
A hacking group tracked as 'UAC-0184' was observed utilizing steganographic image files to deliver the Remcos remote access trojan (RAT) onto the systems of a Ukrainian entity operating in Finland.
The Hacker News
Ukrainian entities in Finland targeted in a malicious campaign distributing Remcos RAT using IDAT Loader.
The DFIR Report
Key Takeaways More information about Gootloader can be found in the following reports: The DFIR Report, GootloaderSites, Mandiant, Red Canary, & Kroll. An audio version of this report can be … Read More
Infosecurity News
Kaspersky’s recent report said the shortage is particularly acute in Europe, Russia and Latin America
The Cyber Express
In a coordinated effort between the FBI and UK authorities, an aggressive blow has been dealt to the infamous LockBit
The Record
Russian hackers attacked several popular Ukrainian media outlets over the weekend, posting fake news related to the war.
Infosecurity News
Adversaries targeting EU-based victims increasingly leverage EU affairs in spear phishing attacks, CERT-EU found
The Cyber Express
A new threat has emerged on the dark web, promising to target victims across multiple operating systems. Dubbed M.O.R.E (Multi
DarkReading
Southeast Asia is learning the hard way that, in 2024, biometric scans are nearly as easy to bypass as other kinds of authentication data, thanks to a creative banking trojan.
HACKRead
Group-IB has discovered a new iOS Trojan, dubbed GoldPickaxe.iOS designed to steal facial recognition data, ID documents, and intercept SMS.
The Hacker News
Chinese-speaking cybercrime group behind sophisticated banking trojans like GoldPickaxe is targeting iOS and Android users.
Cyber Security News
Wireshark, the most popular network protocol analyzer worldwide, has released version 4.2.3, which includes new features and upgrades.
HACKRead
too Hackread.com has been following the exploitation of 0-day vulnerabilities in Ivanti VPN devices and the latest backdoor exploit raises alarm.
Cyber Security News
Ivanti Connect Secure was previously discovered with another SSRF vulnerability that could allow unauthenticated threat actors.
Loading more articles....