Loda Malware Attack Windows To Control RDP, Spread Malware, And Log User Inputs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have been actively employing Loda, a remote access trojan (RAT) developed in AutoIT, an accessible language for automating Windows computer scripting. The malware may deliver various harmful payloads in addition to keylogging, taking pictures, and stealing passwords and …

Chrome Security Update: Patches Widely Exploited Zero-Day Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has upgraded the Stable and Extended stable channels to 116.0.5845.187 for Mac and Linux and 116.0.5845.187/.188 for Windows as part of a security update for Chrome.  This release comes with one “Critical” security patch. The upgrade will roll out over …

Cyber Attack at MGM Systems Forces IT Systems Shutdown

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent development, MGM Resorts, a prominent hotel and casino giant, has confirmed the presence of a cybersecurity issue responsible for an ongoing system outage that has affected its properties in Las Vegas. In a statement on social media, …

Detecting Malicious HTTP Traffic that Hides Under the Real Traffic

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The malware generates malicious network behavior, often hiding it in HTTP traffic to avoid detection. So, in cyber security, detecting malicious traffic is one of the critical issues caused by malware. However, besides this, all the current methods primarily rely …

Weaponized Telegram App Infected Over 60K Android Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Telegram Messenger offers global, cloud-based instant messaging with several features:- Optional end-to-end-encryption Video calling VoIP File sharing Cybersecurity researchers at Securlist recently found several Telegram mods on Google Play in various languages (traditional Chinese, simplified Chinese, and Uighur), claiming to …

Proton Mail Vulnerabilities Would Allow Attackers to Steal Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A group of Researchers unearthed critical code Proton Mail vulnerabilities that could have jeopardized the security of Proton Mail, a renowned privacy-focused webmail service.  These vulnerabilities posed a significant risk to the privacy and confidentiality of Proton Mail users, highlighting …

Akira Ransomware Attacks Exploit Zero-Day Cisco ASA Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Akira Ransomware Attacks Exploit Zero-Day Cisco ASA Vulnerability By Guru – September 11, 2023 In recent developments, reports have surfaced regarding the Akira ransomware threat actors targeting Cisco VPNs lacking multi-factor authentication (MFA).  This vulnerability, tracked as CVE-2023-20269, can potentially …

HPE OneView Vulnerability Let Attacker Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the Hewlett Packard Enterprise OneView Software, three security flaws have been identified, which might be remotely exploited to allow authentication bypass, disclosure of sensitive information, and denial of service. HPE OneView is an integrated IT infrastructure management software that automates …

WiKI-Eve – Stealing Wi-Fi Passwords by Eavesdropping on Keystrokes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mobile devices and apps play a growing role in user identification, but password theft, resembling identity theft, invites diverse eavesdropping attacks, including stealthy indirect ones using side-channels. Indirect attacks, like those using side channels (acoustic, electromagnetic, etc.), pose higher risks …

Multiple APT Hackers Exploiting Fortinet & ManageEngine Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

FortiOS SSL-VPN safeguards against data breaches, while ManageEngine ServiceDesk Plus offers an integrated help desk and asset management for IT resources. At an Aeronautical Sector organization, in early January 2023, the following security entities discovered the presence of IOCs (indicators …