New Rilide Malware Attacking Enterprise Employees to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As per reports, a new version of the Rilide stealer is known to be stealing credentials from enterprise employees and crypto wallets. This new version is capable of bypassing the new Chromium browser manifest v3. Rilide is a malicious browser …

Threat and Vulnerability Roundup for the week of July 30th to August 5th

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Threat and Vulnerability Roundup for this week is out! With great pride, Cyber Writes presents a weekly overview of the most recent cybersecurity news. We highlight notable vulnerabilities and exploits, new attack tactics, and critical software patches. Both individuals …

Teach a Man to Phish and He’s Set for Life

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

August 4, 2023 0 Comments One frustrating aspect of email phishing is the frequency with which scammers fall back on tried-and-true methods that really have no business working these days. Like attaching a phishing email to a traditional, clean email …

New AD CTS Attack Vector Enables Lateral Movement Between Microsoft tenant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to reports, the threat group known as “Nobelium” who were responsible for the SolarWinds attacks is now discovered to be targeting Microsoft tenants through the new Cross-Tenant Synchronisation (CTS) feature introduced by Microsoft. CTS is a feature that enables …

Hackers Using Fake Certificates to Infiltrate Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Using fake certificates, attackers gain unauthorized access to corporate network resources.  Attackers use such certificates to trick the Key Distribution Center (KDC) to get into the target company’s network. Shadow Credentials are an example of such an attack. This technique …

BlueCharlie Hacker Group Builds a 94-Domain Password Stealing Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are evolving their techniques and tools at a rapid pace that is completely changing the current threat scenario. BlueCharlie is a Russia-linked threat group that has been active since 2017 and associated with several other names like:- Callisto …

Hackers Leverages Teams Chat to Steal Credentials from a Targeted Organization

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft Threat intelligence identifies Midnight Blizzard (previously tracked as NOBELIUM) as a highly targeted social engineering attack. The attacker uses compromised Microsoft 365 tenants owned by small businesses to create new domains that appear as technical support entities.  Using new …

Chrome Security Update: 15 Critical Vulnerabilities Fixed, Over $60,000 Rewarded

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has published a security update for Chrome, updating the Stable channel for Mac and Linux to 115.0.5790.170 and 115.0.5790.170/.171 for Windows.  The release of this upgrade will take place over the coming days/weeks. This update offers 17 security fixes, including …

How Malicious Android Apps Slip Into Disguise

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

August 3, 2023 0 Comments Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into benign mobile apps and evade security scanning tools. Google says it has updated …

Hackers Exploit Salesforce Email Zero-day Flaw in Facebook Targeted Phishing Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers exploited a 0-day vulnerability in Salesforce’s email services and SMTP servers. Malicious email traffic is often concealed within email gateway services that are considered legitimate and trustworthy. Gateways are very important as they act as gatekeepers, making sure that …