Experian, You Have Some Explaining to Do

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Twice in the past month KrebsOnSecurity has heard from readers who had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn’t theirs. In both cases the readers used password managers to select …

Why is Cybersecurity Critical for Education & Healthcare Sectors?

Blog WriterCybersecurity News - Original News Source is cm-alliance.com

Why is Cybersecurity Critical for Education & Healthcare Sectors? Date: 7 July 2022 While technological disruptions and digitisation are a boon to society, the scale and sophistication of cyberattacks is rising and will only continue to surge over the coming …

The rise of Ransomware-As-A-Service in 2022

Blog WriterCybersecurity News - Original News Source is cm-alliance.com

The rise of Ransomware-As-A-Service in 2022 Date: 6 July 2022 Ransomware-As-A-Service is a business model in which malware is developed by criminals for use by criminals. It is very similar to traditional software-as-a-service models. The big difference is that, in …

The Link Between AWM Proxy & the Glupteba Botnet

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On December 7, 2021, Google announced it was suing two Russian men allegedly responsible for operating the Glupteba botnet, a global malware menace that has infected millions of computers over the past decade. That same day, AWM Proxy — a …

Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A suspected ransomware intrusion against an unnamed target leveraged a Mitel VoIP appliance as an entry point to achieve remote code execution and gain initial access to the environment. The findings come from cybersecurity firm CrowdStrike, which traced …

Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices. Additionally, necessary changes have been implemented …

Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly exposed endpoint. The list of packages includes loglib-modules, pyg-modules, pygrata, …

State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A China-based advanced persistent threat (APT) group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns. The activity cluster, attributed to a hacking group dubbed Bronze Starlight by …

New ‘Quantum’ Builder Lets Attackers Easily Create Malicious Windows Shortcuts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A new malware tool that enables cybercriminal actors to build malicious Windows shortcut (.LNK) files has been spotted for sale on cybercrime forums. Dubbed Quantum Lnk Builder, the software makes it possible to spoof any extension and choose …

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Wednesday said it’s in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code execution. “A vulnerability has been reported to affect PHP versions …