Europol Starts Hunting For Emotet Malware Developer And Mastermind

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Europol-led Operation Endgame focuses on the individual threat actors operating behind the botnets. Cyberlaw enforcement is very dedicated to locating who created the once-powerful Emotet malware as a service; this creator is known only by the codename “Odd.” Operation …

Telerik Report Server Flaw Let Remote Attackers Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress-owned Telerik Report Server addressed two vulnerabilities in its system, which were associated with Authentication bypass and Insecure Deserialization. To add a note, the insecure deserialization was marked as 9.9 (Critical) instead of 8.8 (High), which was the original severity …

Hackers Employ JavaScript Framework To Trick Users Copy, Paste And Command Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use JavaScript frameworks since they offer a wide range of functionalities and tools that could be used to bypass detection, hide code, and carry out harmful acts. In addition, they take advantage of the people’s trust in such popular …

PoC Exploit Released for Linux Kernel Privilege Escalation Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Proof-of-Concept (PoC) exploit has been released for a critical privilege escalation vulnerability in the Linux kernel. The vulnerability tracked as CVE-2023-3390 has raised alarms due to its potential to allow attackers to gain elevated privileges on affected systems. This …

Hackers Exploited TikTok Zero-Day Vulnerability to Hijack High-Profile Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TikTok has confirmed that hackers exploited a zero-day vulnerability in its direct messaging (DM) feature to hijack several high-profile accounts. The affected accounts include those of celebrities like Paris Hilton and major media organizations such as CNN and Sony. The …

ANY RUN Sandbox Added New Features to Analyse Sophisticated Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ANY.RUN revamped their user interface for a more streamlined workflow, as the sandbox homepage now features shortcut buttons for launching new analysis sessions, eliminating the need to navigate through the outdated map interface.  A dedicated demo page within the Threat …

Hackers Weaponize Authentication Tools To Deliver NiceRAT Malware via Botnet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Botnets, traditionally used for DDoS attacks with malware like Nitol, are now being built with malware capable of data exfiltration and installing additional malware, confirmed by the discovery of NiceRAT malware being installed through a popular botnet active since 2019.  …

Confluence Data Center & Server Flaw Allows Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Atlassian disclosed a high-severity vulnerability that exists in multiple versions of their Confluence Data Center and Server. The CVE for this vulnerability was assigned with CVE-2024-21683 and the severity was given as 8.3 (High). Confluence has addressed this vulnerability in …

10 Best Cloud Security Companies In 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the digital age, cloud security is crucial as businesses increasingly depend on cloud services and top cloud security companies provide advanced solutions to protect data, applications, and infrastructure from cyber threats. These firms specialize in cloud service and application …

Hackers Actively Exploiting Checkpoint 0-Day Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts have identified a critical zero-day vulnerability in Checkpoint’s security software that hackers are actively exploiting. The flaw assigned to the identifier CVE-2024-24919 poses a significant threat to organizations relying on Checkpoint’s solutions for their cybersecurity needs. Details of …