4000+ Domains Used By FIN7 Actors Mimic Popular Brands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Russian-linked FIN7 (aka Sangria Tempest, ATK32, Carbon Spider, Coreid, ELBRUS, G0008, G0046, and GOLD NIAGARA) is a financial cybercrime group that has been around since 2013 and it specifically targets the US industries. To achieve this goal, it uses spearphishing, …

CISA Warns of Hackers Exploiting OS Command Injection Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have raised alarms about hackers exploiting OS command injection vulnerabilities. These vulnerabilities, a constant issue in software products, pose essential risks to users and organizations. The …

VMware Aria Automation Flaw Let Hackers Perform SQL Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware has released security updates to address a critical SQL injection vulnerability in its Aria Automation product. The vulnerability tracked as CVE-2024-22280, could allow authenticated attackers to perform unauthorized database operations The vulnerability affects VMware Aria Automation version 8.x and …

Critical PHP Vulnerability CVE-2024-4577 Actively Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in PHP, tracked as CVE-2024-4577, is being actively exploited by threat actors in wild just days after its public disclosure in June 2024. The flaw affects PHP installations running in CGI mode, primarily on Windows systems using …

Threat Actor Claims to have Unauthorized Fortinet VPN Access to 50+ Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor has claimed to possess unauthorized access to Fortinet VPNs of over 50 organizations in the United States. The alarming announcement was made via a post on the dark web, where the cybercriminal offers this illicit access for …

Lulu Hypermarket Data Breach: 196,000 Users’ Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Lulu Hypermarket, one of the largest retail chains in the Middle East, has been the victim of a significant data breach. The breach has exposed the personal data of approximately 196,000 users, raising serious concerns about data security and privacy. …

Wireshark 4.2.6 Released – What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent announcement, the Wireshark development team has released version Wireshark 4.2.6 of their popular network protocol analyzer. This latest update, part of the 4.2.x series, brings crucial security patches and resolves several bugs, enhancing the software’s overall stability …

The Stark Truth Behind the Resurgence of Russia’s Fin7

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The Russia-based cybercrime group dubbed “Fin7,” known for phishing and malware attacks that have cost victim organizations an estimated $3 billion in losses since 2013, was declared dead last year by U.S. authorities. But experts say Fin7 has roared back …

Hackers Weaponizing Shortcut Files With Zero-day Tricks To Attack Windows Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers weaponize shortcut files because they are an inconspicuous way to execute malicious code on a target system.  These files can be disguised as harmless icons but actually contain commands that, when clicked, launch harmful scripts or programs.  This technique …

Hackers Claiming 8 Million Angel One Customers Data Exposed, Company Denies 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have claimed that the personal data of 8 million customers of Angel One, a prominent broking house, has been exposed. The news report has sent shockwaves through the financial community. According to a cybersecurity consultant quoted in the report, …