Recruiters Beware! Hackers Deliver Malware Posing as Job Applicant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have been targeting recruiters disguised as job applicants to deliver their malware. Though this method is not unique, the technique and attack vectors have been noted to have changed from their previous methods. TA4557 is a highly skilled, …

Lazarus Group’s Operation Blacksmith Attacking Organizations Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Lazarus Group is a notorious North Korean state-sponsored hacking organization known for:- Cyber espionage Financial Theft Destructive attacks They have been implicated in high-profile incidents, including the 2014 Sony Pictures hack and the 2017 WannaCry ransomware outbreak. Cybersecurity researchers …

Microsoft Patch Tuesday, December 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known “zero-day” threats …

Hackers Planting Credit Card Skimmers Inside Google Tag Manager Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, it has been reported that Magecart Veteran ATMZOW has found 40 new domains of Google Tag Manager. As a result, thousands of websites have been affected by this security breach. Hackers enjoy Google Tag Manager because millions of websites …

New Editbot Stealer in Action; Stealing Browser Passwords & Cookies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malicious campaign, Editbot Stealer, was discovered in which threat actors use WinRAR archive files with minimal detection to perform a multi-stage attack. Threat actors have been utilizing the theme of “defective product to be sent back” to lure …

Apple Urgently Patches Zero-day Flaw Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has released an emergency security update for patching two actively exploited zero-day vulnerabilities on iOS. The vulnerabilities were discovered earlier this month and are tracked as CVE-2023-42916, and CVE-2023-42917 affected many Apple products. The security advisory from Apple has …

Apache ActiveMQ Vulnerability Exploited by Kinsing to Attack Linux Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors actively targeted the Apache ActiveMQ vulnerability to get unauthorized access to messaging systems, leading to potential data breaches and system compromise. Meanwhile, the Apache ActiveMQ vulnerability, which was tracked as “CVE-2023-46604,” can be exploited to disrupt communication, cause …

Researchers Bypassed Android Lock Screen using Driving mode Assistant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recent reports indicate that researchers have discovered a new method to bypass the Android Lock Screen and extract sensitive information like photos, contacts, browsing history, shared location, and much more. This issue existed on the most recent versions of Android, …

New 5Ghoul Attack Impacts 5G Devices From Popular Brands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

5G is the 5th generation mobile network, and this technology has significantly revolutionized communication by offering:- Faster internet speeds Reduced latency Increased connectivity  Besides this, 5G offers low-latency benefits in the following critical and essential domains:- IoT VR Medical Automation …

Hackers Hijacked Water Facility that Interrupted the Supply

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, there was a cyberattack on an Irish water utility that resulted in hackers gaining control of the system and disrupting the water supply. Last week, a private group water system in the Erris area was targeted by cybercriminals in …