MOVEit Hack: Over 400 Organizations’ Hacked by CL0P Ransomware Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Russian ransomware group ‘Clop’ exploits a flaw in Progress Software’s MOVEit product suite in late May to steal data from unprotected networks. According to German cybersecurity research firm KonBriefing, as of now, the MOVEit hack has affected 421 organizations and …

New Reptile Rootkit Malware Attacking Linux Systems Using Port Knocking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new kernel module rootkit malware was released recently on GitHub, dubbed Reptile. It’s an open-source rootkit that has the ability to hide itself, other malicious codes, files, directories, and network traffic. While, unlike other rootkit malware, Reptile stands out …

Virustotal Apologizes for the Recent Customer Data Leak

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Virustotal platform has issued an apology and provided an update regarding a recent incident of accidental data exposure. VirusTotal was established in 2004 as a complimentary service that examines files and URLs for viruses, worms, trojans, and other malevolent …

Over 15000+ Citrix Servers Vulnerable to Code Injection Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Due to an unauthenticated critical RCE bug, formerly exploited as a zero-day in the wild by the threat actors, thousands of Citrix Netscaler ADC and Gateway servers were exposed. Threat actors exploited this zero-day vulnerability in June 2023 to drop …

First-ever Open-Source Software Supply Chain Attacks Targeting Banking Sector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recent reports indicate that the banking sector has become the focus of threat actors utilizing an emerging supply chain attack. Two distinct incidents have been identified, with each involving unique tactics and threat actors. Organizations implement vulnerability scanning only during …

Google Detailed Dangerous Red Team Attacks to Hack AI Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Detailed Dangerous Red Team Attacks to Hack AI Systems. Pursuing innovation demands clear security standards in the public and private sectors for responsibly deploying AI technology, ensuring secure AI models. With the rapid rise of AI (Artificial Intelligence), there …

Weekly Vulnerability Roundup: A Compiled List of Vulnerabilities and Exploits

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Each week, Cyberwrites publishes a summary of cybersecurity news that compiles important vulnerabilities and exploits that may have gone unnoticed. Our weekly vulnerability roundup will provide coverage of newly discovered vulnerabilities, as well as those exploited to compromise organizations. Weekly …

GitHub Warns that Lazarus Hacker Group Targeting Developers User Account

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korea based threat actor targeting personal accounts of technology firms through low-profile social engineering attempts. This campaign utilizes a combination of repository invitations and a malicious npm package to target the victim’s accounts associated with blockchain, cryptocurrency, or …

What is Dynamic Application Security Testing (DAST) ?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Businesses and developers are focusing more on the security of applications in their digital environment as cyber threats and data breaches continue escalating. The average data breach cost – due to notification, legal and regulatory costs, investigation and remediation, and …

ChatGPT for Digital Forensic – AI-Powered Cybercrime Investigation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI’s ChatGPT (GPT-3.5, GPT-4) and other LLMs like BERT, Bard, etc. have sparked widespread debate due to their disruptive applications across various fields.  These LLM modules generate answers and solutions promptly based on comprehensive text-based training data and rapidly growing …