New WordPress Malware as Cache Plugin Creates Rogue Admin Account

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A novel kind of malware that acts as a sophisticated backdoor that can carry out several operations while impersonating a legitimate plugin has been identified. The malware has several features, including the ability to modify files, create an admin account, …

Large-scale Akira Ransomware Attacking Unsecured Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In order to disrupt human-operated ransomware attacks and prevent attackers from advancing their objectives through lateral movement, it is crucial to swiftly contain any compromised user accounts. Taking this step is essential to limit the attackers’ ability to spread their …

Google Initiates the End of Passwords, Making Passkeys the Default for Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google, a well-known tech giant, has introduced a new feature called “passwordless by default”. This feature aims to simplify the login process for users by eliminating the need for traditional passwords and instead relying on passkeys for authentication purposes. In …

Heap-based Buffer Overflow Flaw in cURL Library Using SOCKS5 Proxy

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Previously, the maintainers of the popular curl command line tool posted a pre-announcement regarding two vulnerabilities that affected both the curl tool and the libcurl library. However, the details of these vulnerabilities were not disclosed and were mentioned to be …

How LLM-like Models like ChatGPT patch the Security Gaps in SoC Functions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The emergence of Large Language Models (LLMs) is transforming NLP, enhancing performance across NLG, NLU, and information retrieval tasks. They are primarily excellent in text-related tasks like generation, summarization, translation, and reasoning, demonstrating remarkable mastership. A group of cybersecurity analysts …

Nation-state Hackers Exploiting Confluence Zero-day Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has detected the nation-state threat actor Storm-0062, also known as DarkShadow or Oro0lxy, exploiting CVE-2023-22515 in the wild since September 14, 2023.  The vulnerability was publicly disclosed on October 4, 2023, and this CVE-2023-22515 is a Confluence zero-day vulnerability. …

Top 10 Best SaaS Security Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security management across multiple Software-as-a-Service (SaaS) clouds can present challenges, primarily stemming from the heightened prevalence of malware and ransomware attacks. In the present landscape, organizations encounter many challenges with Software-as-a-Service (SaaS). One of the main challenges businesses face is …

SAP Patches for XSS, Log Injection & Other Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released the security patches for the Patch Day of October 2023, in which they release new Security Notes and 2 updates to the previously released Security Notes.  There were 7 security vulnerabilities, including Cross-site scripting (XSS), Missing XML …

HTTP/2 Rapid Reset Zero-day Flaw Exploited to Launch Massive DDoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cloudflare was unexpectedly hit by an enormous HTTP attack that peaked at over 201 million requests per second. Starting on August 25, 2023, this onslaught posed a significant challenge, especially considering that it was initiated by a relatively modest botnet …

Patch Tuesday, October 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day …