JumpCloud Hacked – Hackers Breached The Systems Via Spear-Phishing Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated nation-state adversary with advanced capabilities attacked Jumpcloud with a spear phishing attack. JumpCloud is a US-based zero-trust directory platform that customers use to authenticate, authorize, and manage users, devices, and applications.  On July 12, JumpCloud disclosed that its …

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

[This is Part III in a series on research conducted for a recent Hulu documentary on the 2015 hack of marital infidelity website AshleyMadison.com.] In 2019, a Canadian company called Defiant Tech Inc. pleaded guilty to running LeakedSource[.]com, a service …

IT Security Analyst Jailed for Impersonating as a Hacker in Own Company

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A 28 years old Former IT security analyst of an Oxford-based company has been sentenced to three years for deceiving the company to extort money. On 27 February 2018, the man impersonated a ransomware group that targeted the company at …

Massive Exploit Against WooCommerce Payments Underway Bug on 600,000 Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers actively target vulnerable WordPress websites in an effort to take advantage of a widespread WooCommerce Payments plugin vulnerability and gain admin rights. The WooCommerce Payments plugin, with more than 600,000 active installations, facilitates credit and debit card payments in …

PentestGPT – A ChatGPT Empowered Automated Penetration Testing Tool

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyber Security News has found a new ” PentestGPT ” tool that helps penetration testers automate their pentesting processes, and ChatGPT powers it. A Ph.D. student at Nanyang Technological University, operating under “GreyDGL” on GitHub, recently released a new ChatGPT-powered …

ChatGPT For Penetration Testing – An Effective Reconnaissance Phase of Pentest

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ChatGPT enhances information security by providing valuable insights for efficient reconnaissance in penetration testing and serving as an additional source of security information. Generative pre-trained transformer language models are growing rapidly with unseen and shocking capabilities.  Recently GBHackers on Security …

Top 10 Best Cyber Attack Simulation Tools – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyberattack is not at all a distant threat. Any organization can be its target. This type of cyber attack simulation is a method of computer security testing. These identify the vulnerabilities and attack the technique that the malicious actors use. …

Microsoft Struggling to Find How Hackers Steal the Azure AD Signing Key

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

China’s Storm-0558 hacked 25 organizations, including government agencies, using fake tokens for email access, aiming at espionage since May 15, 2023. However, Storm-0558’s campaign was blocked by Microsoft without affecting other environments. Not only that even, Microsoft also acted promptly …

Securing Endpoints: 6 Best Practices to Eliminate Blind Spots

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In today’s age of widespread device collaboration, the number of endpoints within an organization is often enormous. On top of this, Endpoints are now among the most preferred targets for an attacker trying to gain initial access to a corporate …

Hackers Actively Exploiting Zero-day Flaw in Zimbra Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zimbra is a widely used email client used by many organizations worldwide. The Zimbra Collaboration Suite provides a much more comprehensive package of document storage, Editing, instant messaging, mini calendar, and other ease of access administrative controls. Recent reports indicate …