OracleIV: Dockerized Botnet Launches DDoS Attack Against Docker Engine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A DDoS (Distributed Denial of Service) attack floods a target system with massive traffic. Hackers use networks of compromised computers (botnets) to generate massive traffic, disrupting the target’s normal functioning by overloading its resources. The goal is to make a …

Best Web Security Scanners For Vulnerability Scanning – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Web Security Scanners: The world is moving towards digitalization; from small to large, every business has a website running to showcase its services, and simultaneously, the need for Web Application Security Scanners is increasing. In addition to providing services, they …

8-Point Security Checklist For Your Storage & Backups – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On September 27th, Johnson Controls International announced a massive ransomware attack, that encrypted many of the company devices, including VMware ESXi servers. This impacted the company’s and its subsidiaries’ operations. The company serves clients in the government, healthcare, and naval sectors, …

FBI Dismantled Notorious IPStorm Botnet Infrastructure 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI has achieved a remarkable feat in the fight against cybercrime, dismantling the infamous IPStorm botnet network that infected tens of thousands of devices across various platforms worldwide.  The brains behind this criminal operation, Sergei Makinin, a dual citizen …

WP Fastest Cache Plugin Exposes Over 600K+ WordPress Sites to SQL Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent development, the WPScan team has unearthed a significant security flaw within the widely-used WP Fastest Cache plugin.  This vulnerability, categorized as an unauthenticated SQL injection, could potentially grant unauthorized access to sensitive data in the WordPress database. …

Hackers Deliver Weaponized LNK Files Through Legitimate Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LNK files are shortcut files in Windows that link to a program or file. Hackers may exploit LNK files to deliver malicious payloads by disguising them as legitimate shortcuts, taking advantage of users who unknowingly click on them, and allowing …

Microsoft Patch Tuesday, November 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three “zero day” vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft …

8 New Metasploit Exploit Modules Released Targeting Critical Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Metasploit is an open-source penetration testing framework created by Rapid7 that enables security professionals to simulate attacks against computer systems, networks, and applications. It includes several tools and modules that can be used to test the target system’s security, detect vulnerabilities, …

Ransomedvc to Shutdown Operations, Selling Out Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomed[.]vc, a notorious ransomware and data extortion group, has recently announced the end of its operations and the auction of its entire cybercrime infrastructure.  On October 30, 2023, the Telegram channel of the organization was made public. One of the …

McLaren Health Care Hacked: Attackers Claim 6 TB of Patient Data Stolen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In August of this year, McLaren Health Care suffered a cyber attack that resulted in the compromise of 2.2 million individual data records. The attackers claimed to have accessed approximately 6 terabytes of sensitive patient information, which is a significant …