Malicious npm and PyPi Packages Exfiltrate SSH Keys From Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

JavaScript and Python both have their own package repositories called npm (Node Package Manager) and PyPi (Python Package Index), respectively. They act as key centers for publishing and exchanging reusable code libraries and packages by developers. Sonatype Security Research tracks …

$20M Offered By Russian Zero-Day Seller To Hack Android And iPhone Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Russian company Operation Zero is currently offering researchers $20 million in exchange for hacking tools that would enable its customers to take control of Android and iPhone devices. “By increasing the premium and providing competitive plans and bonuses for …

New Ransomware Trend – Threat Actors Deploy Two Ransomware on Victims’ Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI alerts on rising ransomware trends and urges organizations to follow mitigation recommendations for minimizing ransomware risks and consequences. In July 2023, the FBI observed two ransomware trends, and here we have mentioned them:- Multiple attacks on the same …

A Closer Look at the Snatch Data Ransom Group

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. Today, we’ll take a closer look at the history of Snatch, its alleged founder, …

What is Origin Server? How To Protect them? A Detailed Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The origin server stores a website’s or application’s content and data. As the starting point for all requests made to a website, the origin server’s main responsibility is to access the requested resource from the server’s file system and send …

Microsoft SharePoint Server Vulnerabilities Chained to Achieve Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft SharePoint Server was reported with two vulnerabilities, CVE-2023-29357 and CVE-2023-24955, which threat actors can use for achieving remote code execution (RCE) against Microsoft SharePoint Server. These vulnerabilities were discovered as part of the Zero Day Initiative’s Pwn2Own contest conducted …

Chinese Hackers Breached Microsoft’s Email Platform to Steal 60,000+ US Govt Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant cybersecurity breach, Chinese hackers successfully infiltrated Microsoft’s email platform earlier this year, leading to the theft of tens of thousands of emails from the U.S. State Department accounts, according to information shared by a Senate staffer who …

Google Fixes Actively Exploited Zero-day Vulnerability : Patch Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Chrome version 117.0.5938.132 for Windows, Mac, and Linux has been set to release with multiple bug fixes and features. As per Google, this new version will be rolled out in a few weeks or days. Previously, Google has fixed …

New GPU Side Channel Vulnerability Impacts GPUs from Intel, AMD, Apple & Nvidia

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new research paper has been published that mentions a side-channel attack that threat actors can exploit to leak sensitive visual data from modern GPU cards when visiting a malicious website. This method was published under the name “GPU.zip” by …

Firefox 118 Released with the fix for 6 High-Severity Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mozilla has recently launched Firefox 118, which addresses a total of nine security vulnerabilities. Notably, this release effectively resolves six high-severity vulnerabilities that were previously identified. The majority of vulnerabilities identified are associated with memory-related concerns, which have the potential …