Microsoft Security Update Patches 6 Actively Exploited Zero-day Including 62 New Bugs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft released a security update under the November Patch Tuesday with the fixes of 68 security vulnerabilities including 6 actively exploited zero-days that affect several Microsoft products. In this list of Vulnerabilities, 12 Vulnerabilities were marked as “Critical”, 2 were …

U.S. Uncovered Hacker Who Stole 50,000 Bitcoins From The Silk Road Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Silk Road was robbed by James Zhong, 32, of Gainesville and Athens, Georgia a decade ago of more than $3.36 billion in bitcoin (51,351.89785803 bitcoins), which was recovered recently by federal prosecutors. James Zhong is a dreadful hacker and as …

Patch Tuesday, November 2022 Election Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Let’s face it: Having “2022 election” in the headline above is probably the only reason anyone might read this story today. Still, while most of us here in the United States are anxiously awaiting the results of how well we’ve …

29 Weaponized Python PyPI Packages Aimed to Infect Developers With Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Python Package Index (PyPI) has been found to contain 29 potentially malicious packages. In most of these cases, you will find that the obfuscated code drops an info-stealer called “W4SP” on infected machines. Others take advantage of malware that …

Path To Pentest Guide : 10 Best Penetration Testing Phases, Lifecycle, Methods – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Penetration Testing Phases involves a various Methods, phases, lifecycle and scope to prepare a best checklist to perform the quality penetration operations. Here we have created a complete Penetration Testing Guide with detailed step by step methods. Let’s take a …

New ChromeLoader Malware Hijack Chrome Browser to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There is a malicious Chrome browser extension known as ChromeLoader that classified as a pervasive browser hijacker caught that modifies the browser settings to redirect users’ traffic to a malicious websites and stealing credentials.. After first surfacing in January of …

Microsoft Defence Report – Hackers Highly Target Publicly-Disclosed Zero-Day Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft issues a warning about a rise in the use of publicly revealed zero-day exploits by threat actors in their attacks. The researchers noted a shortening of the period between the disclosure of a vulnerability and its commoditization and noted …

Black Basta Ransomware Ties With FIN7 Hackers To Deploy Custom Hacking & Evasion Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There is evidence found pointing to the connection between FIN7 (aka Carbanak), a financially motivated hacking group, and the Black Basta ransomware gang.  The cybersecurity researchers at Sentinel Lab conducted an analysis in which they found this illicit connection between …

LinkedIn Adds Verified Emails, Profile Creation Dates

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Responding to a recent surge in AI-generated bot accounts, LinkedIn is rolling out new features that it hopes will help users make more informed decisions about with whom they choose to connect. Many LinkedIn profiles now display a creation date, …

Android Apps With Millions of Installation Redirect Users to Weaponized Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It seems that the Google app store has still not been able to catch malicious applications, as they are still being listed there. In the Google Play store, there are currently four malicious apps that are available. The 4 malicious …