Multiple Videolan VLC Player Flaws Leads to Memory Corruption: Update Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, two significant vulnerabilities related to memory corruption have been uncovered in the popular VLC media player. These vulnerabilities were found in the Microsoft Media Server (MMS), which has two implementations in VLC: MMS over TCP (MMST) and MMS over …

Script Tracer Tool – Threat Researchers to Trace & Deobfuscate the Malware Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyber forensic tools play a crucial role in cyber investigations by helping investigators collect, analyze, and preserve digital evidence.  These tools can extract data from various sources, such as:- Hard drives Mobile devices Network traffic They also allow for identifying …

ChatGPT-Powered Malware Attacking Cloud Platforms to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors can potentially exploit ChatGPT to generate convincing phishing emails or deceptive content encouraging users to download malware.  They may also use the model to obfuscate malicious code or to assist in social engineering attacks, making it more challenging …

Top 6 Cyber Incident Response Plans – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It is getting better and better that modern security tools can protect companies’ networks and endpoints from hackers. But sometimes, bad people still find a way in. Security teams need to be able to stop risks and get things back …

Google Calendar RAT Abusing Calendar Events to Create Red Teaming Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Calendar RAT (GCR) is a proof of concept for Command & Control (C2) via Google Calendar Events. It’s useful when setting up a full red team infrastructure is challenging. GCR needs a Gmail account, using event descriptions in Google …

What is Crowdsourced Threat Intelligence?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat intelligence is essential for cybersecurity, as it provides organizations with a clear view of the current threat landscape and enables them to adapt their defenses accordingly. While there are many ways to gather threat intelligence, crowdsourcing stands as one …

NODLINK – First-ever Online System for APT Attack Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers point out that APTs (Advanced Persistent Threats) cause financial harm to organizations. For APT modeling, provenance graphs may be used to cut down on these losses and make detection better. This shows how important real-time systems are. Current online systems …

4 Zero-Day Bug in Microsoft Exchange Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Four new zero-day vulnerabilities have been identified in Microsoft Exchange, which was associated with server-side request forgery and Remote Code Execution. These vulnerabilities haven’t been assigned CVEs and have severities ranging between 7.1 (High) and 7.5 (High). Microsoft developed Microsoft …

RedLine Malware Steals Sensitive Data and Installs More Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Infostealers and the hackers who use them evolve to stay ahead of security measures. They adapt quickly to exploit new vulnerabilities and techniques, making it challenging for defenders to keep up.  Today(7 Nov 2023), researchers from Any Run saw again …

New Millenium RAT Sold on GitHub Attacking Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Millenium-RAT, a sophisticated Remote Access Tool (RAT) for Windows systems, is now available for purchase on GitHub, which exclusively attacking windows systems. The Millenium-RAT, particularly version 2.4; is a Win32 executable built on the.NET framework. It is intended to covertly …