Cisco DNA Center Vulnerability Let Attacker Modify Internal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security flaw has been identified in the Cisco DNA Center, which can potentially enable unauthorized access by a remote attacker. This vulnerability could allow the attacker to view and manipulate data within a repository associated with an internal service …

Threat Actors Use Abnormal Certificates to Deliver Info-stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malicious certificates can be highly dangerous as they can be used to deceive users into trusting malicious websites or software. This can lead to various security threats, including:- Data breaches Malware infections Phishing attacks Compromise user privacy Compromise system integrity …

‘Ransomed.Vc’ Group Attacking Japanese Giants in New operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the ever-evolving cyber threat landscape, Ransomed.vc, a ransomware syndicate with a rapidly growing reputation on the Dark Web, has once again made headlines. This time, their target is Japan’s telecommunications giant, NTT Docomo.  This development comes hot on the heels …

OPNsense Firewall Flaws Let Attackers Employ XSS to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OPNsense is a firewall and routing platform that is based on FreeBSD. It is open-source, making it freely available for use. Additionally, OPNsense is designed to be user-friendly, with a straightforward interface and simple installation process. Furthermore, it offers the …

HiddenGh0st Malware Attacking MS-SQL & MySQL Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A remote control malware called Gh0st RAT, which is popular with Chinese threat actors and has publicly available source code was created by China’s C. Rufus Security Team. ASEC (AhnLab Security Emergency Response Center) finds the Gh0st RAT variant using …

ZenRAT Malware Delivered Through Fake Bitwarden Installation Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to the recent findings by Proofpoint, a new malware called ZenRAT has been discovered. This malware is being spread via fraudulent download packages disguised as Bitwarden installations. This malware primarily targets Windows users and redirects non-Windows users to benign …

BlackTech APT Hackers Attacking Network Routers to Breach Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers called BlackTech APT have been doing bad things since 2010. They attack places like the government, factories, technology, media, electronics, phones, and the military. The group behind the attack employs custom-made malicious software, tools that can be used for …

Google Given Max Severity Score for lipwebp Zero-day Exploited in Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a security fix for a critical vulnerability that affected Google Chrome for Windows, macOS, and Linux. The vulnerability was given the CVE ID as CVE-2023-4863 and has been given a severity of 8.8 (High). On analyzing the vulnerability, …

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is …

Exela Stealer Attacking Discord Users to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Open-source data stealers are rapidly gaining popularity due to their versatility, giving threat actors useful reconnaissance tools for malicious objectives. Open-source data stealers can be stealthy if designed and configured effectively, making them difficult to detect.  It can be difficult …