Fat Patch Tuesday, February 2024 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft Corp. today pushed software updates to plug more than 70 security holes in its Windows operating systems and related products, including two zero-day vulnerabilities that are already being exploited in active attacks. Top of the heap on this Fat …

10 Best Secure Network As a Service for MSP Providers – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Secure Network as a Service (SNaaS) for Managed Service Providers (MSPs) delivers networking and security services to clients via the cloud, integrating networking advantages with complete protection. This strategy allows MSPs to provide clients with scalable, adaptable, and secure networking …

ANY.RUN Threat Intelligence Lookup Tool – A Repository of Millions of Malware IOCs 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware sandbox leader ANY.RUN introduced the Threat Intelligence Lookup platform that helps security researchers find the relevant threat data from the sandbox tasks of ANY.RUN. The platform aids in identifying and studying various types of malware by improving the incident …

Canada to Ban Flipper Zero Device Over Car Hacking Fears

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Canadian government has banned Flipper Zero, a compact and customizable hacking tool, citing concerns over its potential use in automotive theft. At a recent summit, François-Philippe Champagne, Canada’s Minister of Innovation, Science and Industry, announced a ban on criminals …

CISA Warns Of Active Attacks on Roundcube Webmail XSS Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CISA, the Cybersecurity and Infrastructure Security Agency, has issued a warning regarding a Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail that is currently being targeted by attackers in the wild. Threat actors are currently taking advantage of a security flaw …

10 Best Network Security Providers for Education Sectors – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Network security providers for education safeguard schools, colleges, and educational institutions against cyberattacks. These providers protect student, research, and administrative data, comply with legal and regulatory requirements, and provide a secure learning environment. In education, digital learning tools, online courses, …

Hackers Exploiting Ivanti SSRF Flaw to Inject DSLog Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ivanti Connect Secure was previously discovered with another SSRF vulnerability that could allow unauthenticated threat actors to access unrestricted resources due to a flaw in the SAML module. The vulnerability was assigned with CVE-2024-21893, and the severity was 8.2 (High).  …

Coyote Malware Leverage NodeJS to Attack Users of 60+ Bank Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In banking attacks, threat actors actively exploit the NodeJS to steal the online banking credentials of the targeted users. Threat actors use JavaScript web injections to alter the login page of a bank’s website.  This stealthy alteration enables the threat …

Beware of Stealthy Raspberry Robin That Delivered as a Windows Component

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Raspberry Robin is a malicious worm that spreads through USB drives, and it’s been actively used by the threat actors to download and install hidden malware on Windows systems.  Besides this, the threat actors exploit it for various reasons like …

New Malware Mimic as Visual Studio Update to Attack macOS users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new backdoor written in Rust has been discovered to target macOS users with several interesting features. Moreover, there have been 3 variants of backdoor found masquerading under the name of Visual Studio Update. The backdoor is distributed as FAT …