Hackers Hide Information-Stealing Malware in PNG Files Using Steganography

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Experts at Avast, who built on the discoveries of ESET, the first to notice and report on the threat group known as “Worok”, conceals malware within PNG images to silently infect victims’ computers with information-stealing malware. Reports say it targets …

4 Common Threats A Web Application Firewall Can Prevent From Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Web Application Firewall (WAF) is a tool that filters the incoming and outgoing traffic at the application layer. Based on the pre-set rules by a business and WAF provider, it either blocks the traffic it deems malicious or allows …

$70,000 Bug Let Hackers Bypass Google Pixel Lock Screen Pattern & Password

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

David Schütz, a security researcher, has identified a critical bug in the Google Pixel phones that allow hackers to bypass the passcode and pattern lock with the consent of having physical access to the vulnerable device. A critical Lock screen …

Nuclear Engineer and his Wife Sentenced for Trying to Sell Nuclear Warship Design Secrets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Jonathan Toebbe, aged 43, an employee of the Department of the Navy who served as a nuclear engineer was arrested after trying to sell military secrets, related to the design of U.S. nuclear warships, to a foreign government.  Diana Toebbe, …

Microsoft Security Update Patches 6 Actively Exploited Zero-day Including 62 New Bugs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft released a security update under the November Patch Tuesday with the fixes of 68 security vulnerabilities including 6 actively exploited zero-days that affect several Microsoft products. In this list of Vulnerabilities, 12 Vulnerabilities were marked as “Critical”, 2 were …

U.S. Uncovered Hacker Who Stole 50,000 Bitcoins From The Silk Road Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Silk Road was robbed by James Zhong, 32, of Gainesville and Athens, Georgia a decade ago of more than $3.36 billion in bitcoin (51,351.89785803 bitcoins), which was recovered recently by federal prosecutors. James Zhong is a dreadful hacker and as …

29 Weaponized Python PyPI Packages Aimed to Infect Developers With Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Python Package Index (PyPI) has been found to contain 29 potentially malicious packages. In most of these cases, you will find that the obfuscated code drops an info-stealer called “W4SP” on infected machines. Others take advantage of malware that …

Path To Pentest Guide : 10 Best Penetration Testing Phases, Lifecycle, Methods – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Penetration Testing Phases involves a various Methods, phases, lifecycle and scope to prepare a best checklist to perform the quality penetration operations. Here we have created a complete Penetration Testing Guide with detailed step by step methods. Let’s take a …

New ChromeLoader Malware Hijack Chrome Browser to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There is a malicious Chrome browser extension known as ChromeLoader that classified as a pervasive browser hijacker caught that modifies the browser settings to redirect users’ traffic to a malicious websites and stealing credentials.. After first surfacing in January of …

Microsoft Defence Report – Hackers Highly Target Publicly-Disclosed Zero-Day Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft issues a warning about a rise in the use of publicly revealed zero-day exploits by threat actors in their attacks. The researchers noted a shortening of the period between the disclosure of a vulnerability and its commoditization and noted …