Telegram Users Beware! SpyMax RAT Attacking to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers at K7 Labs have uncovered a new threat targeting Telegram users. The malicious software, SpyMax, is a Remote Administration Tool (RAT) designed to steal sensitive data from Android devices. Unlike many other threats, SpyMax does not require the …

Apple AirPods Bluetooth Vulnerability Lets Attackers Gain Access to Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has recently released critical firmware updates for its AirPods and Beats headphones to address a significant Bluetooth vulnerability. The updates, identified as AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8, were rolled out on …

WordPress Releases Urgent Security Update to Patch XSS and Path Traversal Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

WordPress has released an urgent security update, version 6.5.5, addressing critical vulnerabilities that could potentially compromise the security of millions of websites. This minor release, which also includes three bug fixes in the core, is highly recommended for immediate installation …

User ID Verification Service for TikTok, Uber, X Exposes Admin Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AU10TIX, an Israel-based identity verification company that works with major tech platforms like TikTok, Uber, and X (formerly Twitter), inadvertently exposed a set of administrative credentials online for more than a year. There was a security loophole that may have …

Hackers Leveraging CHM Files To Attack Users With Password-Protected Zip Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

⁤Hackers abuse CHM files because they can embed malicious scripts or code within them. Windows systems often trust and execute these files without many security checks. ⁤ When the CHM file is opened, it enables threat actors to deliver malware, …

Hackers Using k4spreader Tool To Install DDoS Botnet And Miners

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ELF malware tool named k4spreader, written in Cgo by the Chinese “8220” (Water Sigbin) mining gang, was discovered in June 2024. Packed with a modified UPX packer, k4spreader installs other malware, including the Tsunami DDoS botnet and PwnRig …

Polyfill JS Library Injected Malware Into 100K+ Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Polyfill.js is a JavaScript library that gives modern functionality on older browsers without native support for some web features. Polyfills ensure compatibility across a wide range of browsers, enabling developers to use modern JavaScript and web APIs by implementing what …

Researchers Released PoC For Windows Bluetooth Service RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft addressed a Remote code execution vulnerability on their Bluetooth service on March 2023 Patch Tuesday. This vulnerability could allow an unauthorized threat actor to run a certain function on the Windows Bluetooth driver, which could lead to executing arbitrary …

FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

FireTail announces a free version of its enterprise-level API security tools, making them accessible to developers and organizations of all sizes. FireTail’s unique combination of open-source code libraries, inline API call evaluation, security posture management, and centralized audit trails helps …

HC3 Unveils Qilin Ransomware Attacking Global Healthcare Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Health Sector Cybersecurity Coordination Center (HC3) has issued a critical alert regarding a new ransomware strain, Qilin, which is targeting healthcare organizations worldwide. This revelation underscores the escalating cyber threats facing the healthcare sector, which is already grappling with …