Total Fitness Exposes 500k Images of Members & Staff

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researcher Jeremiah Fowler discovered a non-password-protected database containing 474,651 images belonging to Total Fitness, a health club chain with 15 locations across North England and Wales. The database, which was 47.7 GB in size, included personal screenshots, profile pictures …

Arid Viper Weaponizing Android Apps To Exfiltrate Login Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Arid Viper APT Group has targeted Android users in the Middle East with five campaigns since 2022. These campaigns used trojanized apps impersonating legitimate ones, such as messaging apps and a civil registry app, which were downloaded from fake websites …

Zadig & Voltaire Breach: 587K Unique Email Address Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The renowned French fashion brand Zadig & Voltaire has suffered a data breach, exposing 587,000 unique email addresses. The popular data breach notification service Have I Been Pwned confirmed the breach via a tweet on its official account. The incident …

Windows Wi-Fi Code Execution Flaw Let Attacker Hijack Your Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft patched several vulnerabilities as part of June 2024’s Patch Tuesday, one of which was associated with remote code execution in Wi-Fi Driver. This vulnerability was assigned with CVE-2024-30078, and the severity was 8.8 (High).  However, based on Microsoft’s description …

BadSpace Malware Attacking Users By Leveraging High-Ranking Infected Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers abuse high-ranking infected websites to leverage their established credibility and large user base to spread malware, launch phishing attacks, or redirect traffic to malicious sites. While exploiting such trusted infected platforms they can now reach out to larger audiences, …

Critical ASUS Router Flaw Attacker Executes Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been discovered in several models of ASUS routers. It allows unauthenticated remote attackers to execute arbitrary system commands on the affected devices. The flaw, identified as CVE-2024-3912, has been assigned a CVSS score of 9.8, indicating …

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. …

Bondnet Using High-Performance Bots For C2 Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors abuse high-performance bots to carry out large-scale automated attacks efficiently. These bots can work quickly, flood systems, steal information, and conduct and orchestrate sophisticated cyber operations largely autonomously. Cybersecurity researchers at ASEC recently discovered that Bondnet has used …

Discord-Based Malware Attacking Orgs Linux Systems In India

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Linux systems are deployed mostly in servers, in the cloud, and in environments that are considered vital; consequently, they are often compromised by attacks from threat actors. This wide use and deployment of Linux makes it a lucrative target for …

New Moonstone Sleet North Korean Actor Deploying Malicious Open Source Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In December 2023, we reported on how North Korean threat actors, particularly Jade Sleet, have been compromising supply chains through the open-source ecosystem. One of their key tactics is the exploitation of the public npm registry to distribute malicious packages. …