Juice jacking : Hijacking mobile phones using public charging ports

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Reserve Bank of India (RBI) has warned against the dangers of “juice jacking,” a cyberattack targeting mobile users who charge their devices at public USB ports. This advisory underscores the growing threat cybercriminals pose in public spaces such as airports, …

New Bifrost Malware Attacking Linux Servers Evades Security Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Linux variant of Bifrost, dubbed Bifrose, was observed exhibiting a creative way to avoid detection, such as using a deceptive domain that imitates the official VMware domain. Bifrost is a remote access Trojan (RAT) that was first discovered in 2004. It is …

GTPDOOR Linux Malware Exploiting GPRS Protocol For Stealthy C2 Communication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors exploit Linux malware due to the widespread use of Linux servers in critical infrastructure and web hosting.  Linux’s prevalence makes it an attractive target for cybercriminals seeking to compromise systems, steal data, or launch distributed denial-of-service (DDoS) attacks. …

Lazarus Hackers Exploited Windows kernel 0-day In The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Lazarus threat group has been exploiting a Microsoft vulnerability associated with Windows Kernel Privilege Escalation to establish a kernel-level read/write primitive. This vulnerability was previously unknown which exists in the appid.sys AppLocker driver. This vulnerability has been assigned with …

Millions Of GitHub Repos Found Infected With Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent report by security firm Apiiro has revealed that a “repo confusion” attack has compromised more than 100,000 repositories on GitHub. This type of attack involves exploiting a flaw in the way that Git, the version control system used …

Internet-connected Doorbell Cameras Flaw Let Attackers Hijack Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The severe security flaws in popular video doorbell cameras could allow attackers to hijack these devices. The investigation revealed that doorbells sold under various brand names but manufactured by the same company, Eken Group Ltd., are vulnerable to hacking, posing …

CWE Version 4.14 Released : What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Common Weakness Enumeration (CWE) project, a community-developed list of common software and hardware weakness types, has announced the release of version 4.14. This latest version introduces significant updates and improvements, including new entries and a new view that enhances …

HackerGPT 2.0 – A ChatGPT-Powered AI Tool for Ethical Hackers & Cyber Community

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HackerGPT is an advanced AI tool created specifically for the cybersecurity industry, handy for individuals engaged in ethical hacking and cyber security research like bug bounty hunters. This sophisticated assistant is at the forefront of cyber intelligence, providing an extensive …

Fulton County, Security Experts Call LockBit’s Bluff

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

February 29, 2024 0 Comments The ransomware group LockBit told officials with Fulton County, Ga. they could expect to see their internal documents published online this morning unless the county paid a ransom demand. LockBit removed Fulton County’s listing from …

The Power of Threat Intelligence Platforms for Faster Threat Investigations Checklist

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In cybersecurity, information is what ultimately makes it possible to respond to threats effectively and proactively. One of the most efficient ways to collect it is by using threat intelligence platforms. By providing threat context and enrichment, they enable analysts …