New DDoS Botnet Malware Infecting Windows, Linux, and IoT Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cross-platform botnet, ‘MCCrash’ that starts out from malicious software downloads on Windows devices and spreads to a range of Linux-based devices was recently examined by the Microsoft Defender for IoT research team. The botnet spreads by obtaining the default …

Top 12 Best Open Source Intelligence Tools (OSINT Tools) for Penetration Testing 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

We all know very well that getting or gathering any information by using various tools becomes really easy. In this article, we have discussed various OSINT tools, as if we search over the internet, then there will be many different …

FBI’s Info Sharing Network ‘InfraGard’ Hacked – Database Exposed On Cybercrime Forum

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

This week, a database of contact information for more than 80,000 members of InfraGard, a project established by the U.S. Federal Bureau of Investigation (FBI) to establish partnerships with the private sector for the exchange of information about cyber and …

Critical SPNEGO Extended Negotiation Vulnerability Let Attacker Execute Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An information disclosure vulnerability was patched by Microsoft in September 2022 which has been found in SPNEGO NEGOEX and this flaw was tracked as CVE-2022-37958. While this vulnerability was reclassified as a “Critical” vulnerability by Microsoft on December 13th. The …

GoTrim Actively Brute Forces WordPress Websites to Gain Admin Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoTrim, a new botnet malware that is based on the Go language has been spotted searching the internet for self-hosted WordPress (WP) sites in an attempt to brute force the admin’s password and take over the website. Depending on the …

Windows SmartScreen & DirectX Graphics Zero-day Flaw Let Attacker Gain Admin Privilege

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft releases a few patches in December normally, and this year is no exception. Microsoft Patch for December 2022, a total of 52 vulnerabilities in Microsoft Windows and Windows Components, Azure, Office and Office Components, SysInternals, Microsoft Edge (Chromium-based), SharePoint Server, …

Hackers Exploit Citrix ADC and Citrix Gateway Zero-day Vulnerability to Gain Access to Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Citrix Gateway and Citrix ADC both contain vulnerabilities that have been discovered recently. In short, there is a critical zero-day vulnerability identified as “CVE-2022-27518” by Citrix in both of its products that we have mentioned above, which should be …

Six Charged in Mass Takedown of DDoS-for-Hire Sites

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The U.S. Department of Justice (DOJ) today seized four-dozen domains that sold “booter” or “stresser” services — businesses that make it easy and cheap for even non-technical users to launch powerful Distributed Denial of Service (DDoS) attacks designed knock targets …

Hackers Using Microsoft-signed Malicious Windows Drivers in Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Following a series of cyberattacks, including ransomware attacks, Microsoft recently revoked several Microsoft hardware developer accounts. In a coordinated disclosure, the news came from the following entities:- Microsoft Mandiant Sophos SentinelOne Authenticode signatures from Microsoft’s Windows Hardware Developer Program have …

Microsoft Patch Tuesday, December 2022 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day in a Windows feature that …