New Moonstone Sleet North Korean Actor Deploying Malicious Open Source Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In December 2023, we reported on how North Korean threat actors, particularly Jade Sleet, have been compromising supply chains through the open-source ecosystem. One of their key tactics is the exploitation of the public npm registry to distribute malicious packages. …

Life360 Breach: Hackers Accessed the Tile Customer Support Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Life360, a company known for its family safety services, recently fell victim to a criminal extortion attempt. The company received emails from an unknown actor claiming to possess Tile customer information. Upon receiving these emails, Life360 promptly investigated and detected …

Microsoft Delays Release of Controversial Windows AI Recall Tool Amid Privacy Concerns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced that it will delay the broad release of its AI-powered Recall feature for Windows Copilot+ PCs, following heavy criticism from users and privacy advocates. The feature, which was originally slated for wide availability on June 18, will …

SmokeLoader – A Modular Malware With Range Of Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers misuse malware for diverse illicit intentions, including data theft, disrupting systems, espionage, or distortion for unethical monetary benefits. Besides this malware is also helpful in conducting cyber warfare or receptive intelligence by the nation-state actors of a certain country …

Hackers Abuse Windows Search Functionality To Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use Windows Search’s vulnerability to penetrate different layers and rooms in the client’s systems and execute unauthorized code by using bugs in the search functionality itself.  This enables them to increase their privileges, disseminate viruses and malware, and steal …

Github Paid $4,000,000 In Rewards For Bug Bounty Program

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitHub, the world’s leading software development platform, is celebrating a milestone: the 10th anniversary of its Security Bug Bounty program. Over the past decade, the program has not only enhanced the security of GitHub’s services but also rewarded security researchers …

Kulicke & Soffa Data Breach – 12 Million Files Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kulicke and Soffa Industries, Inc. (K&S), a leading semiconductor packaging and electronic assembly solutions provider, has disclosed a data breach that has compromised approximately 12 million files. Initially detected on May 12, 2024, the breach raised concerns about the security …

Threat Actor Claiming of Israel’s Government API Database

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A threat actor has claimed responsibility for breaching Israel’s government API database. The announcement was made via a post on social media X by the darkwebinformer. The post, which has since garnered significant attention, alleges that sensitive data from the …

FortiOS Vulnerability Let Attackers to Execute Unauthorized Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet has disclosed multiple stack-based buffer overflow vulnerabilities (CVE-2024-23110) in FortiOS’s command line interpreter. These vulnerabilities could allow authenticated attackers to execute unauthorized code or commands. Gwendal Guégniaud of the Fortinet Product Security team discovered and reported these vulnerabilities. Affected …

Authorities Arrest Encryption Specialist Behind Conti & LockBit Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ukrainian cyber police have arrested a 28-year-old man from Kyiv, identified as a key figure in the development of cryptors used by the notorious Conti and LockBit ransomware groups. Authorities Arrested The arrest is part of an international law enforcement …