Researchers Unveil The Attackers Behind The Agent Tesla Campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Check Point Research has exposed a recent wave of cyberattacks utilizing the infamous Agent Tesla malware. This campaign targeted organizations in the United States and Australia. First appearing in 2014, Agent Tesla masquerades as legitimate software but acts as a silent …

300,000 Chinese Devices in US : 40% Increase Despite Official Bans

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chinese devices are suspected of administering cyber espionage due to concerns over potential backdoors, supply chain vulnerabilities, and the risk of tampering.  State-sponsored cyber threats, such as viral memes, are becoming more frequent. Chinese devices have raised concerns about spying …

Hackers Hijacking YouTube Channels to Steal Your Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals are increasingly exploiting YouTube, a platform beloved by millions, to produce sophisticated malware attacks. These threat actors, leveraging the impression of free software and video game enhancements, target unsuspecting users, particularly the younger demographic, to steal sensitive personal information. …

Hackers Claiming of Working Windows 0-Day LPE Exploit

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new claim has surfaced on the internet regarding a zero-day exploit that targets the Windows operating system. This exploit, which enables local privilege escalation (LPE), could allow attackers to gain elevated access to a user’s system. A tweet from …

WordPress Plugin SQl Injection Exposes 1,000,000 Sites to Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over a million WordPress websites have been at risk due to a critical SQL Injection vulnerability discovered in the popular LayerSlider plugin. The flaw, CVE-2024-2879, could allow unauthenticated attackers to extract sensitive data, including password hashes, from websites’ databases. CVE-2024-2879: …

Feds Stepping to Patch Years-old SS7 Vulnerability in Phone Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FCC (Federal Communications Commission) seeks public input regarding measures by communications providers to address vulnerabilities in SS7 and Diameter protocols that enable tracking consumers’ mobile device locations without consent. The protocols Diameter and SS7 are important for the telecoms …

Aembit Selected as Finalist for RSA Conference 2024 Innovation Sandbox Contest

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Leading Company for Securing Access Between Workloads Recognized for the Aembit Workload IAM Platform Aembit, the Workload Identity and Access Management (IAM) Company, has been named one of the Top 10 Finalists for the RSA Conference™ 2024 Innovation Sandbox …

‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “The Manipulaters,” a sprawling web hosting network of phishing and spam delivery platforms. In January 2024, The Manipulaters pleaded with this author to unpublish previous stories about their work, …

WP-Members Plugin Expose WordPress Sites To Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security researcher reported a critical vulnerability in the WP-Members Membership Plugin that allows attackers to inject malicious scripts and potentially take over websites.  Administrators could take advantage of the unauthenticated stored XSS flaw that was present in the X-Forwarded …

StrelaStealer Attacking Users to Steal Logins from Outlook & Thunderbird

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated variant of StrelaStealer malware has been identified, targeting Spanish-speaking users with the primary aim of pilfering email account credentials from popular email clients Outlook and Thunderbird. This updated strain of StrelaStealer, first spotted in the wild in early …