Over 50K Cisco IOS XE Devices Hacked Exploiting Zero-day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco IOS XE devices were widely used in networking and telecommunications due to their advanced features and reliability.  They provided a scalable and modular operating system that supported various routing and switching functionalities.  IOS XE’s software design enabled the smooth …

Hackers Stole Access Tokens from Okta’s Support Unit

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 20, 2023 0 Comments Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says …

Authorities Seized RagnarLocker Ransomware Dark Web Site

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A coordinated international law enforcement action has seized the dark web site used by the notorious RagnarLocker ransomware group.  This operation involving law enforcement agencies from several countries is a major setback for cyber criminals and a significant achievement in …

Iranian Crambus Actors Modify Windows Firewall Rules To Enable Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Crambus espionage group, formally known as OilRig or APT34, has a lengthy history and a great deal of experience conducting prolonged attacks against Iranian targets. The Iranian-linked attackers targeted a Middle Eastern government between February and September 2023, compromising several …

SolarWinds Access Rights Manager Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IT and security administrators can utilize SolarWinds Access Rights Manager (ARM) to efficiently manage and audit user access rights to data, systems, and files.  The software provides an easy-to-use interface for provisioning, de-provisioning, and overseeing access, which helps safeguard organizations …

TinyMCE Text Editor Flaw Let Attackers Execute XSS payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Tiny Technologies, the company behind the popular text editor TinyMCE, announced the release of version 5.10.8 on October 19, 2023.  This new version aims to improve the security of the editor and includes important security patches. One of the major …

New BlackCat Hacker Tool Spreads Ransomware to Remote Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The BlackCat ransomware operators have demonstrated ongoing adaptation and innovation in their malicious activities, making mitigating their threats challenging for security experts. BlackCat operators, like Munchkin, revealed updates for propagating their payload across victim networks. They’ve been consistently evolving their …

U.S. Government Releases Popular Phishing Technique Used by Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing is a cyberattack that uses deception to trick people into giving away sensitive information or taking actions that compromise security.  Phishing is often the first stage of a larger attack that can lead to data breaches, ransomware infections, identity …

React Developer Tools Flaw Let Attackers Launch a DDoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

React Developer Tools is an essential tool for developers as it allows them to effectively inspect React components, modify the properties and state of these components, and pinpoint any performance issues.  With this tool, developers can easily optimize the performance …

GhostLocker – A New Generation of Raas from Hacktivist Groups

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The increasing number of ransomware is on the rise primarily due to its lucrative nature and the inherent obscurity it provides to malicious actors in the cyber realm. Threat actors exploit ransomware because it allows them to extort significant sums …