Over 33% of Employees are Clicking Malicious Links – Phishing Report

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several data breaches were reported this year that were typically due to ransomware attacks, phishing campaigns, and other social engineering techniques, resulting in millions of dollars losing organizations worldwide. The key takeaway of these data breaches is that most of …

High-Severity BIND DNS Flaw Let Attackers Exploit Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security fixes have been issued that address three high-severity vulnerabilities in several versions of the Internet Systems Consortium (ISC’s) Berkeley Internet Name Domain (BIND DNS Flaw) 9. An attacker might exploit these flaws remotely to result in denial-of-service conditions possibly. …

Hackers Use Weaponized OpenSSH Tool to Hijack Linux Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers at Microsoft recently found an attack targeting Linux-based systems and IoT devices. It has been identified that the exploit employs custom and open-source tools to gain control of the impacted devices and install cryptomining malware on them by …

New PoC Exploit Published for Cisco AnyConnect Flaw Granting System Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Many organizations worldwide have used Cisco AnyConnect VPNs due to their security and other great features. Cisco has many products for VPN depending upon the platforms with various versions of Software. Cisco has released a new security advisory that patches …

Hackers compromised the Roundcube Email Servers of Ukrainian organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

APT28 (aka BlueDelta, Fancy Bear, Sednit, and Sofacy), a threat group connected to Russia’s GRU, hacked the Roundcube email servers of over 40 Ukrainian organizations, including government bodies. The cyber-espionage group used news about the Russia-Ukraine conflict to trick people …

UPS Hacked – Attackers Using Smishing Technique To Harvest Customer Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As reports suggest, UPS shipping and logistics recently faced a security incident after finding an unauthorized access issue on their internal audit. There was a package-lookup tool used by UPS for tracking details about any package. This tool can be …

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send highly targeted SMS phishing (a.k.a. “smishing”) messages that spoofed UPS and other top brands. The …

Kimsuky APT Hackers Dropping Malware Via Weaponized CHM (MS Compiled HTML) Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AhnLab Security Emergency Response Center (ASEC) researchers discovered the Kimsuky APT group’s recent strikes, in which attackers have been using CHM files to distribute malware to the targeted machines, downloading additional scripts or malware to harvest user information. Kimsuky is a …

First Directory of Virtual CISO Providers Launched by Cynomi

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

 The industry’s first-ever directory of virtual Chief Information Security Officer service providers has gone live today at www.thevcisodirectory.com. This extensive list of virtual CISO (vCISO) providers, collated by Cynomi, means that small- and medium-sized businesses (SMBs) can easily tap the …

RedEyes APT Group Attacking Individuals to Exfiltrate Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A group of hackers from North Korea, known as RedEyes (aka APT37, ScarCruft, and Reaper), has recently been identified by the researchers at AhnLab Security using a new info-stealer that is dubbed “FadeStealer.” FadeStealer comes with an exceptional feature that …