7 Chinese Govt Hackers Charged for 14-year hack campaign

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The US Department of Justice (DOJ) has unsealed an indictment charging seven Chinese nationals with computer hacking and wire fraud conspiracies.  These individuals are accused of being part of a hacking group known as APT31, which the DOJ alleges is …

Recent ‘MFA Bombing’ Attacks Targeting Apple Users

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

March 26, 2024 0 Comments Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple’s password reset feature. In this scenario, a target’s Apple devices are forced to display …

macOS Flaw Let Attackers Escalate Privilege & Gain Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw impacting macOS has been uncovered that gives unauthorized users, including those with guest access, the capacity to escalate privileges and take complete root control of the system. According to the security researcher Yann Gascuel of Alter Solutions, the …

Adobe ColdFusion Flaw Let Attackers Gain Access to Sensitive Files – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has addressed a critical vulnerability in its ColdFusion software, which could have allowed attackers to read files arbitrarily from the system. The flaw, identified as CVE-2024-20767, has been patched, but the details surrounding the vulnerability shed light on the …

CISA & FBI : Hackers Exploiting SQL Injection Flaws To Hack Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA and the FBI released the Secure by Design Alert to address SQL injection vulnerabilities in software that affect thousands of organizations. A persistent class of defects in commercial software solutions is SQL injection, or SQLi, vulnerabilities. Even though SQL …

New Zealand Parliamentary Network Hacked by Chinese Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New Zealand has joined the United Kingdom in strongly condemning the People’s Republic of China (PRC) for its state-backed cyber activities, which have recently targeted democratic institutions, including the UK’s Electoral Commission and Members of Parliament. This stance against cyber-enabled …

Metasploit Framework 6.4 Released: What’s New

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The latest release from Metasploit, Framework 6.4, is a testament to this ongoing battle. It brings a host of new features and improvements to the forefront of cybersecurity. It has been a little over a year since Metasploit released version …

Rank Math SEO Plugin Flaw Exposes 2M+ Websites to Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A significant vulnerability has been identified in the Rank Math SEO plugin for WordPress. This flaw, cataloged under CVE-2023-32600, exposes over two million websites to potential cyber-attacks, posing a severe security risk to online businesses and content creators reliant on …

Linux Admins Beware! Fake PuTTY Client That Rhadamanthys Stealer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

PuTTY is among the most popular targets of hackers due to several reasons. Firstly, it is used for remote access to servers and systems at large, hence a great ground for infiltration. Exploiting vulnerabilities or misconfigurations in PuTTY can expose …

TA450 Hackers Uses Embedded Links in PDF Attachments to Attack Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development in cyber warfare, the Iran-aligned threat actor known as TA450, also recognized by aliases such as MuddyWater, Mango Sandstorm, and Static Kitten, has been reported to employ a new strategy in its phishing campaigns. Proofpoint researchers …