Six Charged in Mass Takedown of DDoS-for-Hire Sites

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The U.S. Department of Justice (DOJ) today seized four-dozen domains that sold “booter” or “stresser” services — businesses that make it easy and cheap for even non-technical users to launch powerful Distributed Denial of Service (DDoS) attacks designed knock targets …

Hackers Using Microsoft-signed Malicious Windows Drivers in Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Following a series of cyberattacks, including ransomware attacks, Microsoft recently revoked several Microsoft hardware developer accounts. In a coordinated disclosure, the news came from the following entities:- Microsoft Mandiant Sophos SentinelOne Authenticode signatures from Microsoft’s Windows Hardware Developer Program have …

Microsoft Patch Tuesday, December 2022 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft has released its final monthly batch of security updates for 2022, fixing more than four dozen security holes in its various Windows operating systems and related software. The most pressing patches include a zero-day in a Windows feature that …

Apple New Webkit Zero-day Flaw Used Actively Used in Attacks Against iPhones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has patched its tenth zero-day vulnerability since the beginning of the year, with the most recent one being actively utilized in attacks against iPhones. Furthermore, Apple said that the bug “may have been actively exploited” against older versions in security bulletins …

FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

December 13, 2022 0 Comments InfraGard, a program run by the U.S. Federal Bureau of Investigation (FBI) to build cyber and physical threat information sharing partnerships with the private sector, this week saw its database of contact information on more …

StormWall’s New Point of Presence in Singapore Brings DDoS Protection to APAC

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

StormWall, a cybersecurity service that specializes in providing DDoS protection for IT infrastructures of all sizes and complexity, including websites, networks, and online services, today announced the opening of its sixth point of presence in Singapore, in partnership with IDCloudHost. …

Uber Hacked Again? – Data from Uber and Uber Eats Published on Hacking Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Uber has been the subject of a new cyberattack. Early on Saturday morning, a threat actor going by the name of “UberLeaks” began publishing information on a hacking forum known for revealing data breaches. Employee email addresses, company reports, and …

Red Team and Blue Team Operations : How Does it Works?

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security is a multifaceted field with multiple roles for carrying out diverse operations. In this article, we demystify the concept of the red team and the blue team in security. First things first: why do we need to bifurcate security …

New MuddyWater Campaign Uses Legitimate Remote Administration Tools to Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Deep Instinct identified a new MuddyWater threat campaign active since at least 2017, and frequently conducts campaigns against high-value targets in American, European, and Asian countries. MuddyWater, also known as MERCURY or Static Kitten, is an APT group recently attributed …

New Dark Web Website Allows Hackers to Embed Malware to Legitimate Android Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ThreatFabric’s researchers found ‘Zombinder’, a third-party darknet service that was used to bind malware payloads to legitimate Android applications.  In order to deceive users into installing a malicious payload, it is used to bind a malicious payload to a legitimate application. …