ICICI Bank Data Leak – Millions of Records with Sensitive Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Millions of records containing sensitive information, including financial data and client personal documents, were disclosed by ICICI Bank. During the most recent inquiry, the Cybernews research team learned that the bank’s systems were misconfigured, which allowed the bank to release …

3CX Breach Was a Double Supply Chain Compromise

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. The lengthy, complex intrusion has all the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on …

Pakistani APT-36 Hackers Using a Linux Malware To Attack Indian Government

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Transparent Tribe (aka APT36), an APT group based in Pakistan, has recently been found employing a stealthy tactic to distribute a new Linux Malware called Poseidon. The cybersecurity researchers at Uptycs have discovered Poseidon, a new Linux malware.  The group …

APT28 Hackers Deploy Malware on Cisco Routers Via Unpatched Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, the following agencies have published a joint advisory to warn of APT28, a Russian state-sponsored group that is found actively deploying the ‘Jaguar Tooth,’ a custom malware on Cisco IOS routers:- The UK National Cyber Security Centre (NCSC) The …

Second Google Chrome Zero-Day Bug Actively Exploited in Wild – Update Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Google released an emergency security update to fix another Chrome zero-day vulnerability actively exploited in the wild. This zero-day flaw has been tracked as CVE-2023-2136 and is the second zero-day vulnerability found this year. In this case, the most …

What is DNS Filtering? How Does It Works? A Detailed Overview

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

What is DNS Filtering? How Does It Works? A Detailed Overview By Febi Sharon – April 19, 2023 DNS security is critical in today’s world to protect against the growing threat of DNS attacks. The risk of financial loss, data …

Hackers Using YouTube as a Malware Distribution Platform Via Hacked YT Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers Using YouTube as a Malware Distribution Platform Via Hacked YT Channel By Balaji N – April 19, 2023 Morphisec Threat Labs researchers have recently exposed a sneaky loader called “in2al5d p3in4er” (Invalid Printer) that delivers Aurora information stealer malware …

Hackers Using Old Nokia 3310 Phone to Steal Cars

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The car thieves are employing the out-of-date Nokia 3310 phone to access cars through hacking. This new approach is among the significant and distinctive incidents recorded globally regarding car theft. An analyst at Motherboard’s Vice recently found a video in …

QBot Malware Hijack Business Emails To Drop Malware Via Weaponized PDF Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Beware of the latest phishing campaigns that distribute the QBot malware via PDFs and Windows Script Files (WSF) to infiltrate your Windows devices. Qbot (aka QakBot, QuackBot, and Pinkslipbot) is a sneaky cyber threat once a banking trojan. Still, it …

Critical Flaw in Hikvision Video Storage Let Attacker Gain Admin Rights

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Chinese-based Video surveillance equipment manufacturer has disclosed a critical flaw in their storage products, allowing threat actors to obtain admin permissions. This flaw can be exploited by sending specially crafted messages to the affected devices. CVE-2023-28808: Improper Access Control …