U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating “Trickbot,” a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016. …

Multiple Document Management XSS Flaw Let Attackers Access Sensitive Documents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rapid7 uncovered a number of vulnerabilities with on-premises installations of open-source and freemium Document Management System (DMS) services from four different vendors: LogicalDOC, Mayan, ONLYOFFICE, and OpenKM. The eight vulnerabilities, according to Rapid7, provide a mechanism by which an attacker …

Android 14 – What’s New in Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android 14 Developer Preview is released. The most widely used mobile operating system in the world which includes improvements to security and privacy has been available. With Android 14, apps will have to explicitly state how they want to use …

Hackers Increasingly Use Microsoft OneNote to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OneNote documents are increasingly being used by threat actors to send malware to unsuspecting end users via email, according to Proofpoint researchers. It infects victims with remote access malware that can be used to install additional malware, steal passwords, or even …

Hackers Backdoor Windows Device Using Cobalt Strike Alternative ‘Sliver’

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Using Sunlogin flaws, a new hacking campaign has been detected by security analysts at AhnLab Security Emergency Response Center (ASEC) that takes advantage of Windows BYOVD attacks to disable security software and deploy the post-exploitation toolkit Sliver. The Silver toolkit …

KrebsOnSecurity in Upcoming Hulu Series on Ashley Madison Breach

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

KrebsOnSecurity will likely have a decent amount of screen time in an upcoming Hulu documentary series about the 2015 megabreach at marital infidelity site Ashley Madison. While I can’t predict what the producers will do with the video interviews we …

Google to Announce Chat-GPT Rival On February 8 Event

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There seems to be a lot of consternation on Google’s part at the prospect of a showdown with ChatGPT on the February 8 event. The search giant has been making moves that suggest it is preparing to enter the market …

EV Charge Points Hijack – Multiple Vulnerabilities Uncovered

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, two new security weaknesses have been discovered in several electric vehicle (EV) charging systems. These weaknesses have raised concerns as they could be exploited by malicious actors to remotely shut down charging stations.  Furthermore, the weaknesses could expose the …

10 Best Firewall as a Service Providers (FWaaS) – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Firewall as a Service Providers (FWaaS) are pillars of enterprise network security. Security for networks is provided by a firewall. It keeps an eye on both incoming and outgoing network traffic, allowing or blocking data packets in accordance with its …

PixPirate Android Malware Stealing Banking Passwords From Browsers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With the introduction of Pix, an instant payment platform developed and managed by the monetary authority of Brazil, the Central Bank of Brazil (BCB), which enables the quick execution of payments and transfers. It currently counts over 100 million registered accounts; the …