Kroll Experiences Data Breach After Employee Is Hacked Via SIM Swap Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-profile cyber attack targeted a prominent company, Kroll. This attack utilized a sophisticated technique known as “SIM swapping,” which allowed the threat actor to gain unauthorized access to sensitive personal information. On Saturday, August 19, 2023, Kroll was informed about …

Cisco FXOS SNMP Service Flaw Let Attacker Trigger DoS Condition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Denial-of-Service (DoS) vulnerability has been discovered in the Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects that could allow an authenticated, remote attacker to cause a denial-of-service condition on any affected device. Due …

Smoke Loader Malware Locates Infected System Wi-Fi Access Points

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recent reports reveal that Smoke loader botnets are used by malicious actors to infiltrate compromised systems and deploy Wi-Fi scanning executables. This Wi-Fi scanning tool seems custom-written and is used for gathering information about a system’s geolocation through Google Geolocation …

Threat and Vulnerability Roundup for the week of August 20th to 26th

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Welcome to the Threat and Vulnerability Roundup, a weekly publication from Cyber Writes that provides the most recent news on cybersecurity. Use our wide coverage to stay up to date. Critical flaws, exploits, and recent techniques for attacking have all …

Kroll Employee SIM-Swapped for Crypto Investor Data

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Security consulting giant Kroll disclosed today that a SIM-swapping attack against one of its employees led to the theft of user information for multiple cryptocurrency platforms that are relying on Kroll services in their ongoing bankruptcy proceedings. And there are …

Lazarus Group Exploiting ManageEngine Flaw to Deploy MagicRAT Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to Cisco Talos, the Lazarus Group, backed by North Korea, is actively attacking the backbone infrastructure of the internet and entities in the healthcare sector across Europe and the US. This event clearly shows how they are active and …

Raccoon Malware Resurfaces in Dark Web with New Stealing Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has recently come to light that the individuals responsible for the development and distribution of the infamous Raccoon Stealer malware have returned to online hacker forums. This news follows a period of six months where the perpetrators had ceased …

Flax Typhoon Group Abusing Built-in Operating System Tools to Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With the rapid evolution of technology, the threat actors, along with their attacks, are also getting more sophisticated and evolving at an increasing pace, posing a growing threat to vital infrastructure and sensitive data. The organizations that are based in …

XWorm Malware Attacks Windows To Take RDP Control and Drop Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered XWorm malware variant poses a significant risk to Windows operating systems. This malicious software possesses many capabilities, including remote desktop control, information theft, and the ability to conduct ransomware attacks. Consequently, Windows users must take the necessary …

Hackers Use Weaponized LNK Files to Exploit Microsoft Connection Manager Profile

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have shifted from using malicious macros to malicious LNK files for initial access. This is due to Microsoft’s announcement in 2022 to disable macros by default for Office documents downloaded from unknown sources or the internet. The current …