PoC Exploit Released for Critical CryptoAPI Spoofing Vulnerability in Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Akamai researchers have made available a demonstration exploit code for a significant vulnerability in Windows CryptoAPI that was identified by the National Security Agency (NSA) and the United Kingdom’s National Cyber Security Centre (NCSC). The exploit allows for the forging …

GoTo Says Hackers Stole Customer Data and Encryption Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoTo, formerly LogMeIn Inc., has acknowledged that a threat actor stole an encryption key that gave access to a portion of the backup files that were encrypted. Information about certain customers was stolen from a third-party cloud storage service that LastPass …

FBI: Lazarus Group Is Responsible For $100 Million Harmony Crypto Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been officially confirmed by the Federal Bureau of Investigation (FBI) that the cyber-attacks on the cryptocurrency exchange, Harmony Horizon, which resulted in the theft of $100 million worth of Ethereum, were orchestrated by state-sponsored hacking groups, Lazarus and …

Experian Glitch Exposing Credit Files Lasted 47 Days

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer’s full credit report — armed with nothing more than a person’s name, address, …

Warning! Apple Fixes Actively Exploited iOS Zero-Day on iPhones & iPads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an effort to ensure the safety and security of its customers, Apple has taken the necessary steps to address a potentially dangerous vulnerability that has been marked as “Zero-Day” by releasing updates for older iPhone and iPad models. The …

Hackers Use Shapeshifting Tactics to Steal Information Stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Cyble Research and Intelligence Labs (CRIL) discovered Aurora Stealer malware imitating popular applications on phishing sites to infect as many users as possible. To target a variety of well-known applications, the threat actors behind this attack are actively changing and …

Twitter Engineers Can Tweet as any Account Using ‘GodMode’ Claims Whistleblower

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to The Washington Post, a new Twitter whistleblower has come forward, confirming the alarming evidence from last year regarding the dismal status of the company’s privacy protections and stating that the company continues to break the law under new owner …

NSA Published IPv6 Security Guidance – Cybersecurity Information Sheet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

To assist the Department of Defense (DoD) and other system administrators in identifying and minimising security risks related to the transition to Internet Protocol version 6 (IPv6), the National Security Agency (NSA) has released IPv6 Security Guidance. The most recent …

Administrator of RSOCKS Proxy Botnet Pleads Guilty

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Denis Emelyantsev, a 36-year-old Russian man accused of running a massive botnet called RSOCKS that stitched malware into millions of devices worldwide, pleaded guilty to two counts of computer crime violations in a California courtroom this week. The plea comes …

Chinsese Hackers Using Golang Source Code Interpreter To Bypass Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncovered a new uncommon technique employed by Chinese threat actors in which Golang Source Code Interpreter used to evade detection in the Dragonspark malware campaign. DragonSpark is the first malicious campaign that utilizes SparkRAT, an open-source tool, and targets …