LiteSpeed Cache Plugin XSS Flaw Exposes 4M+ Million Sites to Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been discovered in the LiteSpeed Cache plugin, a popular WordPress plugin installed on over 4 million websites. This flaw, identified as a stored Cross-Site Scripting (XSS) vulnerability, poses a significant risk to millions of websites, potentially …

Ransomware Attack on Lurie Children’s Hospital: $3.4M Ransom Demanded

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Ann & Robert H. Lurie Children’s Hospital of Chicago was recently hit by a highly advanced ransomware attack, underlining the persistent risk of cybercrime that looms over the healthcare industry. Lurie Children’s, a leading pediatric hospital in the US …

Hackers Selling DCRat Subscriptions for $5 on Telegram Groups

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, the cybersecurity researchers at ANY.RUN identified that hackers are selling DCRat subscriptions for $5 on the Telegram groups. Hackers sell Remote Access Trojan (RAT) subscriptions to other malicious actors to generate revenue. These subscriptions provide buyers with unauthorized access …

Hackers Attacking Online Ticket Booking Users Using Weaponized PDF Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors use weaponized PDF files to exploit software vulnerabilities, enabling them to execute malicious code on a target system.  PDFs provide a common and trusted format that makes them effective vehicles for delivering malware or launching phishing attacks.  Moreover, …

CyberSec Firm i-Soon Leak Exposes The Tools Used By Chinese Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybersecurity company data breach could be extremely damaging as it not only compromises sensitive client information but also corrupts the trust in the company’s ability to safeguard data.  The incident may also lead to financial losses, legal consequences, and …

Five Eyes Agencies Exposes Russian APT29 Cloud Attack Tactis

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a groundbreaking advisory, cybersecurity agencies from the Five Eyes intelligence alliance have detailed the sophisticated tactics, techniques, and procedures (TTPs) employed by APT29, a notorious cyber espionage group linked to Russia’s SVR intelligence services. Known by various monikers such …

SubdoMailing – Hackers Abuse 13,000 Subdomains of Popular Brands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a seemingly impossible act, nearly 8000 domains were discovered to be compromised by threat actors for malicious scam campaigns sending millions of emails every day. All of these domains belonged to the most reputable brands and institutions, such as …

NIST Cybersecurity Framework 2.0 Published : First Major Update Since Created

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The newly updated Cybersecurity Framework (CSF 2.0) offers simplified cybersecurity guidance designed for everyone, from small nonprofits to large corporations. The Cybersecurity Framework (CSF) underwent a significant overhaul, marking its first major update since its launch in 2014. CSF 2.0 …

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The current large surge in cyber threats has left many organizations grappling for security, so ThreatHunter.ai is taking decisive action. Recognizing the critical juncture at which the digital world stands, ThreatHunter.ai is now offering their cutting-edge cybersecurity services free of …

LockBit Making A Comeback After The Massive Takedown

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious ransomware group LockBit has re-emerged on the dark web, signaling a swift comeback less than a week after a significant disruption by international law enforcement agencies. This resurgence underscores the persistent and adaptable nature of cybercriminal organizations in …