Beware Of Malicious Chrome Installer From Chinese Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious Chrome installer, ChromeSetup.msi, distributed via drive-by download, delivers a novel Gh0st RAT variant, dubbed Gh0stGambit, that evasively retrieves and executes encrypted payloads.  The RAT is a modified open-source version targeting Chinese-speaking users with data theft and evasion capabilities, …

Threat Actors Exploiting Selenium Grid Services For Cryptomining

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors often exploit the cloud services for cryptomining, as doing so allows them to abuse the huge computational resources available.  This enables them to significantly maximize their mining efficiency without bearing any cost. Cybersecurity analysts at Wiz recently identified …

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 26, 2024 0 Comments Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow …

ServiceNow Flaw Let Remote Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ServiceNow recently disclosed three critical vulnerabilities (CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178) affecting multiple Now Platform versions, allowing unauthenticated remote code execution and unauthorized file access.  The vulnerabilities, with CVSS scores ranging from 6.9 to 9.3, pose significant risks of data theft, …

ConfusedFunction Vulnerability in Google Cloud Platform Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered vulnerability in Google Cloud Platform (GCP) has raised significant security concerns among users and experts alike. The vulnerability, dubbed “ConfusedFunction,” involves GCP’s Cloud Functions and Cloud Build services, potentially allowing attackers to escalate privileges and gain unauthorized …

PKfail Vulnerability Allows Hackers to Install UEFI Malware on Over 200 Device Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The PKfail vulnerability is a significant security issue affecting over 200 device models of Secure Boot. PKfail is a critical firmware supply-chain issue that undermines the Secure Boot process in the UEFI ecosystem. Secure Boot ensures that only trusted software …

OpenStack Nova Vulnerability Allows Hackers Gain Unauthorized Access to Cloud Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability in OpenStack’s Nova component has been identified, potentially allowing hackers to gain unauthorized access to cloud servers. This vulnerability, tracked as CVE-2024-40767, affects multiple versions of Nova and poses a serious risk to cloud infrastructure worldwide. CVE-2024-40767– OpenStack …

North Korean Charged in Cyberattacks on US Hospitals, NASA & Military Bases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korean military intelligence operative has been indicted for orchestrating a series of cyberattacks targeting U.S. hospitals, NASA, and military bases, federal prosecutors announced on Thursday. Rim Jong Hyok, a member of the Andariel Unit within North Korea’s Reconnaissance …

RA Ransomware Group Aggressively Attacking Manufacturing Sector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

RA World, an emerging ransomware group, has been increasingly active since March 2024, using a multi-extortion tactic to steal data and threaten to leak it if the ransom is not paid.  Their leak site shows a recent shift in targets …

Vigorish Viper, nn Advanced Suite for Cybercrime Supply Chain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers make use of the cybercrime supply chain for a multitude of illicit purposes like acquiring and distributing malicious tools, services, and stolen data. This collaboration leads them to execute more sophisticated and widespread attacks by enabling them to specialize …