Confusion Attacks in Apache HTTP Server Let Attackers Gain Root Access Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent research presentation at Black Hat USA 2024 revealed architectural vulnerabilities within the Apache HTTP Server, a widely used web server software. The research highlights several technical debts within Httpd, including three types of Confusion Attacks, nine new vulnerabilities, …

PoC Released for 0-click RCE Flaw Impacting Windows Server – MadLicense

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

PoC exploit released for critical 0-click remote code execution (RCE) vulnerability affecting Windows Server. This flaw impacts Windows Server versions from 2000 to the latest 2025 preview. This vulnerability, identified as CVE-2024-38077, resides in the Windows Remote Desktop Licensing Service …

5 Malware Analysis Challenges Solved by an Interactive Sandbox

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware analysis can be challenging, as it often requires in-depth theoretical knowledge and advanced skills. Tools like an interactive sandbox help simplify it, making sophisticated malware behavior easy to expose and understand even for junior security professionals. Here are some …

Analyse Android Malware Using Innovative Smali Gadget Injection Technique

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers from JPCERT uncovered a new technique known as “Smali Gadget Injection,” which is set to revolutionize the dynamic analysis of Android malware. This method offers a more flexible approach compared to existing tools like Frida, which, while useful, provide …

Researchers Detailed the Evolution of Cybercriminal Underworld

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity Researchers have unveiled the complicated evolution of the cybercriminal underworld. This transformation, spanning decades, has seen hackers evolve from isolated individuals seeking notoriety to organized syndicates driven by profit. The findings provide crucial insights into the operational dynamics of …

AI Model Achieve 98% Accuracy in Collecting Threat Intelligence From Dark Web Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent study, researchers from the Université de Montréal and Flare Systems have demonstrated that large language models (LLMs) can accurately extract critical cyber threat intelligence (CTI) from cybercrime forums with an impressive 98% accuracy. The findings, published in …

STAC6451 Hackers Attacking Microsoft SQL Servers to Compromise Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly identified hacker group, designated as STAC6451, has been actively targeting Microsoft SQL (MSSQL) servers to compromise organizations, primarily in India. This group leverages exposed MSSQL servers to deploy ransomware and other malicious activities, posing a significant threat to …

New Cmoon Worm Attacking Users Via Compromised Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts have uncovered a new worm named CMoon targeting users through compromised websites. This sophisticated malware can steal confidential and payment data, download additional malware, and launch Distributed Denial-of-Service (DDoS) attacks. The worm was initially detected in July 2024, …

Tor Browser 13.5.2 Released: What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Tor Project has announced the release of Tor Browser 13.5.2, which includes significant security updates and improvements, mainly focusing on integrating the latest Firefox security patches. Tor Browser anonymizes web traffic using the Tor network, making it easy to …

Beware Of New Botnet Attacking ASUS Routers & Opens Port 63256

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Botnets attack routers to gain control over these devices, turning them into “zombies” that can be used to carry out malicious activities. While they execute all their illicit activities without getting detected, and they do activities like DDoS attacks, spreading …