Beware of New Cryptomining Malware Delivered Using TeamViewer Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In May 2023, Huntress ThreatOps Center analysts detected a cryptocurrency miner (XMRig) on an endpoint, identified the miner’s associated site and wallet address by locating the config file, and validated the infection. The analyst observed activity on numerous infected endpoints, …

Chrome 114 Released With Fix for 16 Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

For Windows, Mac, and Linux, Google has released Chrome 114 to the stable channel. The next few days/weeks will see the implementation of this. According to the official statement, it fixes 16 security flaws. There are eight security issues with a …

DogeRAT Android Malware Mimic Popular Apps to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DogeRAT (Remote Access Trojan) is an open-source Android malware that targets a sizable customer base from various businesses, particularly banking, and entertainment.  CloudSEK’s TRIAD team detected it. Although this campaign primarily targeted consumers in India, it aims to be accessible …

Kali Linux 2023.2 Released – What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Offensive Security launched Kali Linux 2023.2, an updated Penetration testing distro with new features, hacking tools, and various updates. The Offensive Security team consistently releases new versions of Kali Linux each year, a Linux-based penetration testing and hacking distro. Kali …

Lazarus Hacking Group Attack IIS Web Servers to Install Web Shell

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The AhnLab Security Emergency Response Center (ASEC) confirmed recent attacks on Windows IIS web servers by the nationally supported Lazarus group. Typically, threat actors exploit vulnerable web server versions to install web shells or execute malicious commands during their scans. …

Discord Admins Hacked by Malicious Bookmarks

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

May 30, 2023 0 Comments A number of Discord communities focused on cryptocurrency have been hacked this past month after their administrators were tricked into running malicious Javascript code disguised as a Web browser bookmark. This attack involves malicious Javascript …

New Wi-Fi MITM Attack That Can Evade WPA3 Security Mechanisms

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The recent discovery of a critical vulnerability in the NPU chipset by Tsinghua University and George Mason University researchers allows attackers to eavesdrop on data transmitted over 89% of real-world Wi-Fi networks by exploiting it. Hardware acceleration, such as using …

Over 421,000,000 Times Installed Android Apps from Google Play Contain Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A spyware-enabled Android app module that can gather details about files kept on devices and send them to attackers. Additionally, clipboard contents can be replaced and uploaded to a remote server. “This malicious SDK collects information on files stored on …

PyPI Mandates 2FA for all Developers Account

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Python Package Index (PyPI) has been used by several developers worldwide for creating a project or installing any other dependencies for their project. One of the important features of PyPI is that only the people who are linked with the …

Why Do You Need a Cloud-native Web Application Firewall (WAF)? 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With your on-premise security solution comprising hardware, software, signatures, rules, and even machine learning, you may think your applications are fully protected. How do you know for sure that your apps are secured? And what if you’ve cloud-native apps? Can …