New Leak Shows Business Side of China’s APT Menace

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

February 22, 2024 2 Comments A new data leak that appears to have come from one of China’s top private cybersecurity firms provides a rare glimpse into the commercial side of China’s many state-sponsored hacking groups. Experts say the leak …

Apple Adds PQ3 post-quantum Encryption for iMessage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has released its new PQ3 (post-quantum) cryptographic protocol, claimed to be the first-ever messaging protocol to reach Level 3 security. Apple announced its cryptographic protocol change in 2019 when it shifted from RSA to Elliptic Curve Cryptography (ECC), and …

Hackers launched 250,000+ Attacks to Exploit Ivanti VPN 0-Day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ivanti Connect Secure vulnerabilities were disclosed in January 2024 as a potential gateway for threat actors to penetrate corporate networks. The two vulnerabilities, CVE-2023-46805 and CVE-2024-21887 were associated with authentication bypass and arbitrary command execution. Combining these two could result …

Hackers Heavily Abusing Google Cloud Run to Deliver Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Large-scale malware distribution campaigns are abusing Google Cloud Run to transmit banking trojans, including Astaroth (also known as Guildma), Mekotio, and Ousaban, to European and Latin American targets. With Cloud Run, you can promptly execute your code on top of …

VoltSchemer – Wireless Charger Attack Boils Phone and Injects Voice Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors target wireless chargers for multiple malicious activities, such as implanting malware or conducting power-related attacks. The rising popularity of wireless charging brings convenience. Still, recent research by Zihao Zhan, Yirui Yang, Haoqi Shan, Hanqiu Wang, Yier Jin, and …

Wyze webcam Flaw let strangers see into some users’ homes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Five months after a similar issue, Wyze cameras are back in the headlines for a privacy nightmare.  The Verge reports that dozens of users could see images from strangers’ homes, raising serious concerns about the security of these popular devices. …

NSA Announces Retirement of Cybersecurity Director Rob Joyce

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant announcement from the National Security Agency (NSA), Rob Joyce, the esteemed Director of Cybersecurity, is set to retire on March 31, 2024, after a distinguished 34-year career with the agency. Joyce’s tenure at the NSA has been …

Signal Introduces Username to keep Your Phone Number More private

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Signal, the privacy-focused messaging app, has introduced a significant update allowing users to keep their phone numbers private using usernames. This move is a part of Signal’s ongoing efforts to bolster privacy and security for its users. html Document Live …

Google Chrome 122 Released With Fix For Critical Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has announced the release of Chrome 122, marking a pivotal moment for the popular web browser.  This latest version, now available for Windows, Mac, and Linux, introduces a series of critical security fixes alongside new features to enhance user …

ScreenConnect Security Flaw Let Attackers Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a critical security advisory, ConnectWise has alerted users of its ScreenConnect remote access software to patch their systems immediately due to two severe vulnerabilities discovered in versions 23.9.7 and earlier. These vulnerabilities, identified as CWE-288 and CWE–22, allow for …