Ex-Uber CSO Avoids Prison Time for Concealing Data Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On Wednesday, an ex-Uber CSO was found guilty of federal charges related to payments he secretly approved to hackers who broke into the ride-hailing company in 2016. For concealing the breach from the Federal Trade Commission, which was looking into …

Over 2 Million WordPress Websites Exposed to XSS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Patchstack security researchers recently warned that ‘Advanced Custom Fields’ and ‘Advanced Custom Fields Pro’ WordPress plugins are at risk of cross-site scripting attacks (XSS).  These WP plugins, installed on millions of websites, may be vulnerable to security breaches. The ‘Advanced …

New Android Malware on Google Play Installed Over 620,000 Times

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recently discovered Android subscription malware called ‘Fleckpe’ has surfaced on Google Play Store. This insidious malware disguises itself as an authentic application and has already been downloaded by more than 620,000 users into downloading it. According to Kaspersky, Fleckpe …

Facebook Take Down ChatGP-themed Malware Attacks That Stole FB Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NodeStealer, a newly discovered malware on Meta, was identified by Facebook as stealing browser cookies. Due to this vulnerability, threat actors can obtain illicit entry into various accounts on the platform, including Gmail and Outlook. Threat actors are increasingly adopting …

VirusTotal New “Crowdsourced YARA Hub” Let Security Researchers Filter Yara Rules

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VirusTotal has introduced a Crowdsourced YARA Hub to overcome this hurdle, letting users find and filter existing rules, track a new rule, and export rules to LiveHunt or Retrohunt with a Single Click. YARA (Yet Another Ridiculous Acronym) rules are …

$10M Is Yours If You Can Get This Guy to Leave Russia

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The U.S. government this week put a $10 million bounty on the head of a Russian man who for the past 18 years operated Try2Check, one of the cybercrime underground’s most trusted services for checking the validity of stolen credit …

Hacker Groups Adding New Double DLL Sideloading Technique to Evade Detection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity security researchers at Sophos recently detected the “Dragon Breath” APT group (aka Golden Eye Dog, APT-Q-27) using complex DLL sideloading variations to avoid detection. The APT group deploys a new attack vector that utilizes clean applications like Telegram …

Web Security Gateway: Best Security Practices to Protect Enterprise Users?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Protecting employees from harmful content was a far more straightforward task once upon a time. COVID-19 changed all of that in an instant. The new hybrid work model has forced IT professionals to rethink their security strategy game plans. As …

Apple & Google Working Together to Combat Airtag Stalking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Airtag, Smart tags are devices used to find the location of lost items like Luggage, keys, purses, or mobile phones. These location trackers are very handy for people who often lose their valuable items on travel.  Though this technology has …

Over 250 Dark Web Vendors Arrested Worldwide In ‘SpecTor’ Operation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Police confiscated the illicit “Monopoly Market” dark web marketplace and arrested 288 people buying or selling drugs on the dark web as part of an operation coordinated by Europol involving nine countries. “More than EUR 50.8 million (USD 53.4 million) …