Students Uncover Security Bug That Could Let Millions Do Their Laundry For Free

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two UC Santa Cruz students found a major security flaw in CSC ServiceWorks laundry machines. Over a million internet-connected laundry machines in homes, hotels, and colleges worldwide are affected by the bug, which allows people to run them for free. …

Beware! Android Banking Trojan Mimics As Google Play Updates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Android banking Trojan, Antidot, emerged in May 2024, which steals credentials through overlay attacks and has various functionalities for complete device control. Antidot uses VNC, keylogging, screen recording, and call forwarding to capture sensitive information.  It can also …

LATRODECTUS Loader Getting Popular Among Cybercriminals, Is It Replacing ICEDID!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use loaders to bypass security measures and run harmful code in a genuine process’s memory themselves.  This makes it possible for malware payloads to be quietly loaded into the system without being discovered by any of the many file …

30+ Tesla Cars Hacked Using Third-Party Software

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher identified a vulnerability in TeslaLogger, a third-party software used to collect data from Tesla vehicles, that leveraged insecure default settings that could be exploited to gain unauthorized access to TeslaLogger instances.  Reported the issue to the TeslaLogger …

How to Use Threat Intelligence Feeds for SOC/DFIR Teams

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat intelligence feeds provide real-time updates on indicators of compromise (IOCs), such as malicious IPs and URLs. Security researchers and organizations share IOCs with feed vendors, who then analyze and validate them before distributing the information to subscribers.  Security systems …

SugarGh0st RAT Attacking Organizations & Individuals in AI Research

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity company Proofpoint has found a new operation using the SugarGh0st Remote Access Trojan (RAT) that is going after AI research organizations in the United States. The operation, linked to a threat cluster known as UNK_SweetSpecter, went after businesses, …

New Cyber Attack Targeting Facebook Business Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The email campaign impersonates the Facebook Ads Team to trick users into clicking a malicious link, as the email leverages social engineering tactics like sender name spoofing and urgency to appear legitimate.  Grammatical errors and a suspicious link embedded in …

CISA Reveals Guidance For Implementation of Encrypted DNS Protocols

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

“Encrypted DNS Implementation Guidance,” a detailed document from the Cybersecurity and Infrastructure Security Agency (CISA), tells government agencies how to improve their cybersecurity by using encrypted Domain Name System (DNS) protocols. This advice is in line with Memorandum M-22-09 from …

Two Brothers Arrested for Attacking Blockchain & Stealing $25M

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Jason Peraire-Bueno, 28, of New York, and Anton Peraire-Bueno, 24, of Boston have been charged with wire fraud, plot to commit wire fraud, and conspiracy to commit money laundering. The charges are related to a complicated plan to take advantage …