APT36 Using Customized Malware to Attack Indian Government Linux and Windows Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

APT36 is a highly sophisticated APT (Advanced Persistent Threat) group that is known for conducting targeted espionage in South Asia and is strongly linked to Pakistan. While this APT group is known for targeting the following Indian sectors:- Government Defense …

FBI Hacker Dropped Stolen Airbus Data on 9/11

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle “USDoD” had infiltrated the FBI‘s vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard …

Adobe PDF Creator Zero-day Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has published a security update for Adobe Acrobat PDF and Reader for Windows and macOS as part of its regular Patch Tuesday updates. This patch fixes a ‘Critical’ vulnerability, which might allow an attacker to run malicious code on unprotected …

Interactive Malware Sandbox – Free File Analysis, Live Malware Hunting & Threat Intelligence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The versatility of malware sandboxes extends beyond behavioral analysis, making them a valuable assets in many contexts. The list of use cases grows even larger when you add a layer of interactivity provided by tools like the ANY.RUN service.  However, …

Windows Update Addressed 2 Zero-Days and 52 Other Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released its Patch Tuesday update, which includes 59 vulnerabilities along with two Zero-Days. The severity for these vulnerabilities ranges from 4.3 (Medium) to 8.8 (High).  Categories of the vulnerabilities patched include Information Disclosure (9), Elevation of Privilege (18), …

OriginBotnet Attack Windows Machine Using Weaponized Word Document

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent cyberattack effort was discovered that used a malicious Word document delivered via phishing emails, causing victims to download a loader that launched a succession of malware payloads.  OriginBotnet, RedLine Clipper, and Agent Tesla were among the payloads used. …

SAP Security Vulnerabilities Let Attackers Perform Code Injection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released its September security patches in which 13 vulnerabilities were related to Information Disclosure, Code Injection, Memory Corruption, and much more. The severity for these vulnerabilities ranges between 2.7 (Low) and 10.0 (Critical). These vulnerabilities existed in multiple …

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google Chrome and Apple iOS users may have their …

Airbus Cyber Attack: Over 3,200 Vendor Data Accessed by Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to recent reports, a threat actor has compromised the confidential information of 3,200 Airbus vendors. The exposed data includes sensitive details such as names, phone numbers, and email addresses. In addition, the perpetrator behind the recent attack announced their …

Massive Ransomware Attack on SriLanka Wipes Out Months of Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Information and Communication Technology Agency (ICTA) has officially confirmed a severe data loss incident that has had a far-reaching impact on all government offices using the “gov.lk” email domain. The Information and Communication Technology Agency is the lead agency …