Netwalker Ransomware Hacker Sentenced To 20 Years in Prison

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There has been a conviction in the U.S. of a former affiliate of the Netwalker ransomware, Sebastien Vachon-Desjardins. A Tampa company and a number of other entities were attacked by him.  This led to Sebastien, a 34-year-old Canadian being sentenced …

PHP Supply Chain Attack – Critical Vulnerability in PHP Central Component

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Packagist has been subjected to a serious vulnerability that impacts its functionality, as reported by the code security company, SonarSource. A supply chain attack targeting the PHP community might have been possible using this vulnerability if it had been …

Glut of Fake LinkedIn Profiles Pits HR Against the Bots

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A recent proliferation of phony executive profiles on LinkedIn is creating something of an identity crisis for the business networking site, and for companies that rely on it to hire and screen prospective employees. The fabricated LinkedIn identities — which …

Russian Hacker Arrested in India for Breaking into Exam Platform and Helping JEE Students

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

India’s Central Bureau of Investigation (CBI) arrested a Russian national for allegedly helping students cheat in JEE-Main Exam. Reports say the accused, manipulated software of JEE Main examination. The Joint Engineering Exam or JEE Main, is a computer-based exam conducted …

OnionPoison – Hackers Distribute Malicious Tor Browser Installer Via Famous YouTube Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity experts at Kaspersky Lab have detected an encrypted version of the Windows installer for the Tor Web Browser has been distributed via a famous Chinese YouTube channel. This malicious campaign has been dubbed “OnionPoison” by the security experts …

Cheerscrypt Linux-based Ransomware Encrypt Both Linux & Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent investigation, the Sygnia security firm found Linux-based ransomware, Cheerscrypt. This ransomware was found using the TTPs of Night Sky ransomware. There is a common threat group called Emperor Dragonfly (A.K.A. DEV-0401/BRONZE STARLIGHT) that is behind both Cheerscrypt …

Lazarus Hackers Installing Windows Rootkit Using Dell Driver Bug

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An attack utilizing the BYOVD (Bring Your Own Vulnerable Driver) method was observed recently by the experts at ESET. In this attack, the North Korean hacking group, Lazarus installed a Windows rootkit that exploited a Dell hardware driver. An aerospace …

2 New MS Exchange Server 0-Day Bugs Are Exploited By Hackers in Wild – Microsoft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have exploited two 0-day Exchange Server vulnerabilities in real-life attacks as a result of unpatched Exchange Server zero-day vulnerabilities that have not been patched, as confirmed by Microsoft. Back in August 2022, the Vietnamese security company GTSC was the …

Parrot OS 5.1 Released With Major Upgrade for Popular Hacking & Anonymity Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Parrot Security announced the official release of Parrot OS 5.1, a new version that includes updated tools and new features. “We’re proud to say that the new version of Parrot OS 5.1 is available for download; this new version includes …

Microsoft: Two New 0-Day Flaws in Exchange Server

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches to plug the security …