Hackers Hijacking Popular YouTube Channels To Deliver Infostealer Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers always end up targeting famous YouTube channels because of their large audience base, and their aim is to exploit the same for different reasons.  Hacking such a platform becomes one of the most lucrative activities in terms of money …

Fortinet Vulnerability Exploited To Deploy RMM tools And PowerShell Backdoors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have been discovered exploiting a Fortinet Forticlient EMS vulnerability to install unauthorized RMM tools and PowerShell backdoors on the targeted systems. The vulnerability exploited by the threat actors was CVE-2023-48788. Moreover, an external inbound network connection was found …

CISA Released Advisories to Mitigate Living Off the Land Attack Techniques

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In collaboration with international partners, the Cybersecurity and Infrastructure Security Agency (CISA) has released comprehensive advisories to mitigate Living Off the Land (LOTL) attack techniques. These techniques, which exploit legitimate tools and processes on systems to conduct malicious activities discreetly, …

Google Sues Two Chinese Developers Over Crypto Investment App Scams

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent lawsuit was filed by Google against two app developers, Yunfeng Sun (also known as Alphonse Sun) and Hongnam Cheung (also known as Zhang Hongnim and Stanford Fischer), for their alleged involvement in an international online investment fraud scheme. …

Google Adds V8 Sandbox in Chrome To Stop Hackers From Gaining Read/Write Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move to bolster the security of its widely-used V8 JavaScript engine, Google has unveiled the V8 Sandbox, a cutting-edge mechanism to prevent memory corruption attacks. The V8 Sandbox represents a proactive approach to cybersecurity, operating under the …

Notepad++ Seeking your Help to Take Down the Parasite Website

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The developers of Notepad++, a widely used text and source code editor, have recently issued a call to action to their user base. The plea is an urgent one, and it is aimed at addressing a critical issue that requires …

Hackers Weaponize Suspended Domains To Deliver Malware Payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent phishing campaign targeting Latin America utilized emails with ZIP attachments containing an HTML file disguised as an invoice using free, temporary email addresses with the domain “temporary.link” and spoofing the User-Agent field in the header to indicate use …

Practical Guide to Simplify Your Malware Sandboxes Configuration

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware sandboxes are integral to security applications like intrusion detection, forensics, and threat intelligence, but using them correctly is challenging due to choices in implementations, monitoring techniques, and configurations.  Improper use can negatively impact applications through false positives, inconclusive analyses, …

New Cyber Attack Targeting Hospital IT Helpdesks with Voice Calls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hospitals across the nation are on high alert as sophisticated cybercriminals use advanced social engineering tactics to target IT help desks. The Health Sector Cybersecurity Coordination Center (HC3) has issued a Sector Alert detailing the latest threat to the healthcare …

Massive boAt Data Breach: 7.5 Million Customers Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Personal data belonging to over 7.5 million customers of boAt, a leading Indian consumer electronics brand, has been compromised and is now circulating on the dark web. This breach has exposed many personally identifiable information (PII), posing significant risks to …