Patch Tuesday, October 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day …

New APT Group Using Custom Malware to Attack Manufacturing & IT Industries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An unidentified APT group deployed custom malware and public tools to target organizations in Taiwan’s following sectors:- Manufacturing IT Biomedical This campaign also targeted a government agency in the Pacific Islands, along with organizations in the following two countries:- Vietnam …

Hackers Exploiting Citrix NetScaler Vulnerability to Steal User Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors were attacking unpatched NetScaler Gateways using the vulnerability classified as CVE-2023-3519 to inject malicious script into the HTML of the authentication web page and steal user credentials. With a CVSS score of 9.8, CVE-2023-3519 is a critical vulnerability that affects …

U.S. Army Sergeant Arrested for Spying Secrets to China: DoJ

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a shocking turn of events, a former U.S. Army Sergeant, Joseph Daniel Schmidt, has been arrested and indicted on charges of attempting to deliver national defense information and retaining such information.  Schmidt, whose last military assignment was at Joint …

ChatGPT, FraudGPT, and WormGPT Plays A Vital Role in Social Engineering Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChatGPT, FraudGPT, and WormGPT Plays A Vital Role in Social Engineering Attacks By Tushar Subhra Dutta – October 10, 2023 Generative AI models like ChatGPT, FraudGPT, and WormGPT bring innovation and new challenges in cybersecurity’s evolution. These generative AI models …

HackerGPT: A ChatGPT Empowered Penetration Testing Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HackerGPT is a ChatGPT-enabled penetrating testing tool that can help with network hacking, mobile hacking, different hacking tactics, and other specific tasks. The main foundation of HackerGPT is the training data that has been offered. It does not use a …

Phishers Spoof USPS, 12 Other Natl’ Postal Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The fake USPS phishing page. Recent weeks have seen a sizable uptick in the number of phishing scams targeting U.S. Postal Service (USPS) customers. Here’s a look at an extensive SMS phishing operation that tries to steal personal and financial …

ConnectedIO’s 3G/4G Routers Vulnerability Let Hackers Execute Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical issues in ConnectedIO’s ER2000 edge routers have been discovered, and an attacker can leverage them to compromise the cloud infrastructure completely, remotely execute malicious code, and expose all user and device data. A 3G/4G router serves as a gateway …

Snake Keylogger Steals victim Logins, Keystrokes, & Capture Screen

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Emails are extremely common in today’s digital communication landscape, with billions sent daily for personal, professional, and promotional purposes.  While most emails are harmless, there is a risk associated with phishing attacks, malware distribution, and spam, making it essential to …

Webwyrm Malware Affects More Than 100,000 Users in 50 Countries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are evolving their Tactics, Techniques, and Procedures (TTPs) at an alarming rate.  With technological advancements and increased awareness of cybersecurity measures, they continually adapt to exploit vulnerabilities and enhance their attack success rates. Webwyrm, a worldwide scam mimicking …