Kimsuky APT Hackers Dropping Malware Via Weaponized CHM (MS Compiled HTML) Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

AhnLab Security Emergency Response Center (ASEC) researchers discovered the Kimsuky APT group’s recent strikes, in which attackers have been using CHM files to distribute malware to the targeted machines, downloading additional scripts or malware to harvest user information. Kimsuky is a …

First Directory of Virtual CISO Providers Launched by Cynomi

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

 The industry’s first-ever directory of virtual Chief Information Security Officer service providers has gone live today at www.thevcisodirectory.com. This extensive list of virtual CISO (vCISO) providers, collated by Cynomi, means that small- and medium-sized businesses (SMBs) can easily tap the …

RedEyes APT Group Attacking Individuals to Exfiltrate Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A group of hackers from North Korea, known as RedEyes (aka APT37, ScarCruft, and Reaper), has recently been identified by the researchers at AhnLab Security using a new info-stealer that is dubbed “FadeStealer.” FadeStealer comes with an exceptional feature that …

What is Metasploit: Tools, Uses, History, Benefits & Limitations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Metasploit provides a complete framework for building, testing, and carrying out attacks against sensitive systems, making it a must-have tool for any organization. Rapid7’s Metasploit is a valuable penetration testing tool that is being used for detecting and exploiting vulnerabilities …

New Custom Malware Attacking Remote Desktop Protocol Clients to Steal Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

New Custom Malware Attacking Remote Desktop Protocol Clients to Steal Data. Recently, the ‘RedClouds’ cyberespionage campaign steals data from shared drives via RD connections using the ‘RDStealer’ malware. Bitdefender Labs discovered this malicious cyberespionage campaign and it has been identified …

50 World’s Best Penetration Testing Companies – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Penetration testing, sometimes known as pen testing, simulates a cyber assault on a computer system or network to detect vulnerabilities and potential security issues. Penetration testing companies aim to evaluate the effectiveness of an organization’s security measures and to identify …

Why Malware Crypting Services Deserve More Scrutiny

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

If you operate a cybercrime business that relies on disseminating malicious software, you probably also spend a good deal of time trying to disguise or “crypt” your malware so that it appears benign to antivirus and security products. In fact, …

Oreo Cookie Maker Hacked – Over 50K-plus Employees’ Personal Info Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mondelez Global LLC, the parent company of Oreo cookies and other major food products have released a notice stating that Oreo cookie maker Hacked, they have faced a data breach that involves several personal information. Bryan Cave, which acts as …

Hackers Use Weaponized PDF Files to Attack Manufacturing, Commercial, and Healthcare Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, eSentire TRU (Threat Response Unit) reported that since November 2022, it had observed the resurrection of a malicious campaign that Hackers Attack on targets explicitly the following organizations:- Manufacturing Commercial Healthcare While cybersecurity researchers acknowledge that the campaign is …

ASUS Critical Router Vulnerabilities Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ASUS has recently released a security advisory in which several ASUS critical router vulnerabilities have been fixed. The vulnerabilities were found to affect multiple ASUS routers with CVEs. The company has recommended its users upgrade to the latest version of …