Researchers Uncover SnakeKeylogger Attacks, Techniques & Tactics

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors use keyloggers to capture sensitive information by recording keystrokes on infected devices, as covert techniques and tactics allow them to steal valuable information without the victim’s knowledge. Governments or threat actors can deploy Keyloggers as espionage tools to …

Hackers Use TMChecker Remote Access Tool to Attack Popular VPN & Mail Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new tool has surfaced on the Dark Web, signaling a shift in cybercriminals’ methods for gaining unauthorized remote access to corporate networks. TMChecker tool TMChecker, a tool recently identified by ReSecurity, is designed to attack remote-access services and popular …

Empower Your Security and IT with Microsoft Copilot: The Ultimate AI Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Security Copilot, a generative AI solution for security professionals, will be generally available in April 2024. It uses threat intelligence and large language models to analyze vast amounts of data (78 trillion daily signals) and provide security teams with …

Beware of Malicious Notepad++ Websites that Attack Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors target Notepad++ as it is a widely used text editor among developers and users, offering a large potential victim pool.  Exploiting vulnerabilities in Notepad++ can provide access to sensitive data or even systems as well.  Besides this targeting …

Nissan Hack: 10K+ Users Data Stolen by Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nissan Motor Corporation and its financial services in Australia and New Zealand, collectively known as Nissan Oceania, have been the victims of a malicious cyberattack, compromising the personal information of over 10,000 individuals. This incident, which came to light on …

OpenCTI With ANY.RUN: OSINT Platform to SOC & MDR Teams for Malware Analysis

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ANY.RUN integrates with OpenCTI to streamline threat analysis, which allows enriching OpenCTI observations with data directly from ANY.RUN analysis. OpenCTI is a central hub that collects threat data from various sources, like ANY.RUN, through connectors, stores this data as “observations,” …

Google’s Gemini AI Vulnerability let Hackers Gain Control Over Users’ Queries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers discovered multiple vulnerabilities in Google’s Gemini Large Language Model (LLM) family, including Gemini Pro and Ultra, that allow attackers to manipulate the model’s response through prompt injection. This could potentially lead to the generation of misleading information, unauthorized access …

Lockbit Affiliate Sentenced to Four Years in Prison

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mikhail Vasiliev, a dual Russian-Canadian national, has been sentenced to nearly four years in prison. The conviction comes after Vasiliev pleaded guilty to a series of charges, including cyber extortion, mischief, and weapons offenses. His lawyer, Louis Strezos, acknowledged that Vasiliev had accepted responsibility for his actions, which was reflected in the sentence handed down …

Chrome Use After Free Flaw Let Attackers Crash The Browser

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As part of a Chrome security update, Google upgraded the Stable channels to 122.0.6261.128/.129 for Windows and Mac and 122.0.6261.128 for Linux.  The Extended Stable channel has been updated to 122.0.6261.129 for Mac and Windows. Over the coming days and …

Multiple Adobe Enterprise products Vulnerable To Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple Adobe Enterprise products such as Adobe Experience, Premier Pro, ColdFusion, Bridge, Lightroom, and Animate have been discovered with critical code execution vulnerabilities that were associated with Untrusted search path, Cross-site scripting, Out-of-bounds write, Use After free, Heap-based buffer overflow …