Bleeping Computer
Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad.
%20(1).webp)
Cyber Security News
Earth Hundun, a notable Asia-Pacific malware organization, uses Waterbear and Deuterbear, first encountered Deuterbear.
Cyber Security News
The Wireshark team has announced the release of Wireshark 4.2.5, a maintenance update to the popular network protocol analyzer.
Trend Micro
This report describes how Waterbear and Deuterbear — two of the tools in Earth Hundun's arsenal — operate, based on a campaign from 2024.
The Hacker News
Ebury malware botnet has compromised an estimated 400,000 servers since 2009. Learn how to protect your systems from this advanced threat.
Bleeping Computer
The D-Link EXO AX4800 (DIR-X4860) router is vulnerable to remote unauthenticated command execution that could lead to complete device takeovers by attackers with access to the HNAP port.
The Cyber Express
This May, the heartbeat of the cybersecurity industry will resonate through Dubai, where The Cyber Express is set to host
Cyber Security News
Two new vulnerabilities have been discovered in Next.js which were related to response queue poisoning and SSRF on certain Next.js versions.
The Record
CISA Director Jen Easterly said the voluntary pledge by software companies is important because of widespread nation-state hacking campaigns, including the Volt Typhoon operation attributed to China.
.webp)
Cyber Security News
Security Risk Advisors (SRA) announces the launch of their OT/XIoT Detection Selection Workshop, a complimentary offering designed to assist organizations in selecting the most suitable operational technology (OT) and Extended Internet of Things (XIoT) security tools for their unique environments. Led by seasoned OT/XIoT security consultants, the workshop provides participants with an invaluable opportunity to […]
HACKRead
Philadelphia, Pennsylvania, May 8th, 2024, CyberNewsWire
Security Affairs
Threat actors are exploiting a high-severity vulnerability in the LiteSpeed Cache plugin for WordPress to take over web sites
Cyber Security News
WordPress plugins make WordPress more useful, but most of these have flaws that hackers may try to take advantage of to get unauthorized
Bleeping Computer
Nearly 52,000 internet-exposed Tinyproxy instances are vulnerable to CVE-2023-49606, a recently disclosed critical remote code execution (RCE) flaw.
The Cyber Express
Cyber Defense Magazine (CDM), marking its 12th anniversary as the leading electronic information security magazine, announced the winners of the
Krebs on Security
The United States joined the United Kingdom and Australia today in sanctioning 31-year-old Russian national Dmitry Yuryevich Khoroshev as the alleged leader of the infamous ransomware group LockBit. The U.S. Department of Justice also indicted Khoroshev as the gang's leader…
The Hacker News
Critical unpatched flaw (CVE-2023-49606) in Tinyproxy could lead to remote code execution. Over 50% of 90K+ exposed hosts are vulnerable.
Security Affairs
Resecurity found a massive leak involving the exposure of personally identifiable information (PII) of over 5M citizens of El Salvador.
The Cyber Express
San Francisco, May 6, 2024 — Cyble, the leading provider of AI-driven cybersecurity solutions, is excited to announce its participation
Krebs on Security
Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via an untrusted network, because attackers…
Bleeping Computer
Cloning disks preserves vital information and makes transferring between devices an easier task. This lifetime license for EaseUS Disk Copy puts the tools you need on your desktop for $29.99, $30 off the $60 MSRP.
Ars Technica
ZTDNS brings the best of both worlds to DNS: encryption and fine-grained control.
Bleeping Computer
A Mullvad VPN user has discovered that Android devices leak DNS queries when switching VPN servers even though the "Always-on VPN" feature was enabled with the "Block connections without VPN" option.
Bleeping Computer
A Mullvad VPN user has discovered that Android devices leak DNS queries when switching VPN servers even though the "Always-on VPN" feature was enabled with the "Block connections without VPN" option.
Bleeping Computer
Off-site backups are important for everyone, from small businesses to freelancers. Get 500GB of cloud storage from Amaryllo for a one-time payment of $119.99, $130 off the $249 MSRP.
DarkReading
A recent campaign targeting Middle Eastern government organizations plays standard detection tools like a fiddle. Cyber defenders must keep pace.
The Hacker News
Researchers have uncovered a new Android malware called Wpeeper that uses compromised WordPress sites to hide its true command-and-control servers.
SecurityWeek
Chinese cybersecurity firm QAX XLab uncovered an Android trojan that hides its command-and-control server behind compromised WordPress sites.
Infosecurity News
Central YMCA was fined £7,500 for a data breach exposing HIV information of support program participants, prompting the ICO to call for stronger privacy protections for people with HIV
Cyber Security News
Reviewing the “getJspFromRequest” method details we can see that it pulls the HTTP parameter “jsp” from the web request.
.webp)
Cyber Security News
This sophisticated backdoor Trojan to infiltrate Android systems & execute a malicious commands, posing a threat to unsuspecting users.
The DFIR Report
Key Takeaways In August 2023, we observed an intrusion that started with a phishing campaign using PrometheusTDS to distribute IcedID. IcedID dropped and executed a Cobalt Strike beacon, which was … Read More
Cyber Security News
Welcome to this week's edition of the Cyber Security News Weekly Round-Up. This issue covers the latest vulnerabilities, cyber attacks, and emerging threats that have been making headlines. Stay informed and stay secure!
Security Affairs
A hacking campaign targeted Ukraine exploiting a seven-year-old vulnerability in Microsoft Office to deliver Cobalt Strike.
HACKRead
A recent attack exploited vulnerabilities in systems running outdates Microsoft Office to deliver Cobalt Strike malware. Learn how to protect yourself!
HACKRead
It is essential to be knowledgeable about security fundamentals and stay up-to-date with emerging technologies and methodologies.
Security Affairs
As cryptocurrencies have grown in popularity, there has also been growing concern about cybercrime involvement in this sector
Cyber Security News
The Cactus ransomware gang has been exploiting vulnerable Qlik sense servers ever since November 2023 using multiple vulnerabilities such as
Security Affairs
Over 1,400 CrushFTP internet-facing servers are vulnerable to attacks exploiting recently disclosed CVE-2024-4040 vulnerability.
Security Affairs
CISA adds Cisco ASA and FTD and CrushFTP VFS vulnerabilities to its Known Exploited Vulnerabilities catalog.
Security Affairs
The U.S. Department of Justice (DoJ) announced the arrest of two co-founders of a cryptocurrency mixer Samourai.
SecurityWeek
The Brocade SANnav management application is affected by multiple vulnerabilities, including a publicly available root password.
SC Magazine
Security pros say given the complexity of SAN management tools, it’s understandable the patches took so long.
Ars Technica
Perimeter devices ought to prevent network hacks. Why are so many devices allowing attacks?
Bleeping Computer
Make your monthly budget last by getting more of your shopping done under one roof. For a limited time, you can get a One-Year Sam's Club Membership for $14.
SecurityWeek
A North Korea-linked threat actor hijacked the update mechanism of eScan antivirus to deploy backdoors and cryptocurrency miners.
Security Affairs
A malware campaign has been exploiting the updating mechanism of the eScan antivirus to distribute backdoors and cryptocurrency miners.
Bleeping Computer
Or put nine devices out of reach of snoops with an AdGuard Family Plan lifetime subscription for $24.97, $54 off the $79 MSRP, now through 11:59pm PST on April 30th.
CyberSecurity Dive
CrushFTP CEO Ben Spink said the company isn’t aware of any data theft thus far, but researchers see echoes of MOVEit exploits and other high-profile file-transfer vulnerabilities.
Cyber Security News
Researchers identified a cyberattack by the Sandworm group targeting critical infrastructure in Ukraine in March 2024, which aimed to disrupt
CyberNews
In a move that could unlock new career opportunities for more than 30 million Americans, the Federal Trade Commission (FTC) has voted 3-2 to ban non-compete clauses.
The Hacker News
A sophisticated malware called GuptiMiner has been leveraging a flaw in eScan antivirus updates to spread backdoors and crypto miners across corporate
Ars Technica
eScan AV updates were delivered over HTTP for five years.
Bleeping Computer
North Korean hackers have been exploiting the updating mechanism of the eScan antivirus to plant backdoors on big corporate networks and deliver cryptocurrency miners through GuptiMiner malware.
Security Affairs
A cyber attack has been disrupting operations at Synlab Italy, a leading provider of medical diagnosis services, since April 18.
Bleeping Computer
BleepingComputer recently reported how a GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with Microsoft repositories, making the files appear trustworthy. It turns out, GitLab is also affected by this issue and could be abused in a similar fashion.
Bleeping Computer
Russian hacker group Sandworm aimed to disrupt operations at around 20 critical infrastructure facilities in Ukraine, according to a report from the Ukrainian Computer Emergency Response Team (CERT-UA).
Security Affairs
Threat actors exploited a critical zero-day vulnerability in the CrushFTP enterprise in targeted attacks, Crowdstrike experts warn.
Bleeping Computer
A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with a Microsoft repository, making the files appear trustworthy.
The Hacker News
China-linked hacking group Earth Hundun is targeting Asia-Pacific tech, research, and government sectors with advanced malware, including "Waterbear"
Bleeping Computer
American telecom provider Frontier Communications is restoring systems after a cybercrime group breached some of its IT systems in a recent cyberattack.
Bleeping Computer
A legitimate-looking Google Search advertisement for the crypto trading platform 'Whales Market' redirects visitors to a wallet-draining phishing site that steals all of your assets.
Cyber Security News
Redline Stealer is a powerful information-stealing malware and hackers often exploit this stealthy stealer to gain unauthorized access to a
Cyber Security News
Oracle has released its Critical Patch Update (CPU) for April 2024, addressing 372 vulnerabilities across multiple products.
Bleeping Computer
There are things that you can do to make your web apps more resistant to social engineering. Learn more from Outpost24 on securing your web applications.
DarkReading
The scam is spreading across the US and impersonates the specific toll-collection services of each state in malicious SMS messages
Security Affairs
Amidst rising tensions with China in the SCS, Resecurity observed a spike in malicious cyber activity targeting the Philippines in Q1 2024.
The Record
Prosecutor General Adam Bodnar says an investigation into Pegasus use by current and former government officials has expanded to hundreds more people than initially reported.
Security Affairs
The Ukrainian hacking group Blackjack used a destructive ICS malware dubbed Fuxnet in attacks against Russian infrastructure.
Infosecurity News
The Feds have received thousands of complaints about phishing texts from fake road toll collection services
Cyber Security News
Hackers always keep evolving their tools to stay ahead of defense systems and exploit new vulnerabilities.
Security Affairs
A threat actor claimed the hack of the Canadian retail chain Giant Tiger and leaked 2.8 million records on a hacker forum.
Bleeping Computer
Keeping data organized and easy to share can be a difficult task without the right tools. This lifetime subscription to 1TB of Koofr cloud storage makes it easy for $127.99, $682 off the $810 MSRP with code ENJOY20 at checkout, now through 11:59 pm PST on April 16th.
Trend Micro
Our blog entry provides an in-depth analysis of Earth Hundun's Waterbear and Deuterbear malware.
Krebs on Security
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online services in a single dashboard.…
HACKRead
Dubai, UAE, April 10th, 2024, CyberNewsWire
.webp)
Cyber Security News
“The world of AI is changing quickly, with new threats arising all the time and new regulations arriving frequently.
HACKRead
Tel Aviv, Israel, April 10th, 2024, CyberNewsWire
Ars Technica
LG patches four vulnerabilities that allow malicious hackers to commandeer TVs.
Security Affairs
Researchers found multiple vulnerabilities in LG webOS running on smart TV that could allow attackers to gain root access to the devices.
Cyber Security News
The developers of Notepad++, a widely used text and source code editor, have recently issued a call to action to their user base. The plea is an urgent one, and it is aimed at addressing a critical issue that requires the community's immediate attention.
Ars Technica
D-Link won't be patching vulnerable NAS devices because they're no longer supported.
The Hacker News
Latin America targeted in new phishing attack. Emails contain malicious HTML files disguised as invoices.
Bleeping Computer
Microsoft is now using a Windows driver to prevent users from changing the Windows 10 and Windows 11 default browser manually or through software.
Cyber Security News
The Leading Company for Securing Access Between Workloads Recognized for the Aembit Workload IAM Platform Aembit, the Workload Identity and Access Management (IAM) Company, has been named one of the Top 10 Finalists for the RSA Conference™ 2024 Innovation Sandbox contest for its platform that manages and secures access between critical software resources, like applications […]
Security Affairs
Resecurity researchers warn that a new Version of JsOutProx is targeting financial institutions in APAC and MENA via Gitlab abuse.
Infosecurity News
The findings from Netskope also show a shift in the retail sector’s use of cloud applications
HACKRead
Silver Spring, United States / Maryland, April 3rd, 2024, CyberNewsWire
Trend Micro
Our new article provides key highlights and takeaways from Operation Cronos' disruption of LockBit's operations, as well as telemetry details on how LockBit actors operated post-disruption.
Cyber Security News
Authentic8, provider of the leading OSINT research platform Silo for Research, today launched its Silo Shield Program to enhance online security for high-risk communities.
Cyber Security News
Google Ads is a big platform with a wide user base which makes it attractive for threat actors who want to reach many targets at once.
The Hacker News
Traditional defense tactics don't always apply to cyber warfare. With EventSentry, bolster your network's defense with prevention, detection, and ongo
%20--%20Supply%20Chain%20Backdoor%20(1).webp)
Cyber Security News
Fedora Linux 40 beta users have been urged to take immediate action after an Upstream supply chain attack that has compromised SSH protocol.
Cyber Security News
The DNS Tunnel Keylogger tool has been released on GitHub, which utilizes DNS tunneling to transmit keystrokes through firewalls.
Ars Technica
Malicious updates made to a ubiquitous tool were a few weeks away from going mainstream.
The DFIR Report
Key Takeaways We provide a range of services, one of which is our Threat Feed, specializing in monitoring Command and Control frameworks like Cobalt Strike, Metasploit, Sliver, Viper, Mythic, Havoc, … Read More
Bleeping Computer
Google's Threat Analysis Group (TAG) and Google subsidiary Mandiant said they've observed a significant increase in the number of zero-day vulnerabilities exploited in attacks in 2023, many of them linked to spyware vendors and their clients.
Bleeping Computer
Project management is about discipline, on the individual and team level. These five project management training and exam prep courses help you marshal that discipline for $39.99, $155 off the $195 MSRP.
The Cyber Express
Introducing Krzysztof Olejniczak, the Chief Information Security Officer (CISO) at STX Next, in an exclusive interview with The Cyber Express.
Krebs on Security
Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple's password reset feature. In this scenario, a target's Apple devices are forced to display dozens of system-level prompts that…
Loading more articles....