8220 Hacker Group Added Hadooken & K4Spreader Tools To Their Arsenal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The 8220 hacker group is known for targeting both Windows and Linux web servers by deploying “crypto-jacking” malware to exploit vulnerabilities. This group reportedly has access to the source code of these OSs, which enhances their ability to carry out …

Beware Of Fake Google Chrome Update That Delivers Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An ongoing fake Google Chrome update effort targeting France has been noticed, which spreads WarmCookie malware via compromised websites. WarmCookie is a Windows malware that is used to obtain system access through phishing operations. It is a two-stage backdoor intended …

What is Autonomous System? Types, Roles & ASN Definition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Internet, a vast and intricate network of networks, relies on numerous underlying technologies and protocols to function seamlessly. The concept of an autonomous system (AS) is one critical component that enables the Internet to operate efficiently. In networking, an …

Vesta Admin Panel Vulnerability Allows Complete Linux Server Takeover

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability in the Vesta Control Panel has been discovered that allows attackers to take over entire Linux servers. This alarming exploit leverages weaknesses in the password reset mechanism, posing a severe risk to users relying on Vesta for server …

Hackers Exploiting Critical SolarWinds Serv-U Vulnerability In The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SolarWinds is a prominent software company specializing in IT management and monitoring solutions for networks and infrastructure. The company gained fame following a significant supply chain attack in 2020, where hackers inserted malicious code into Orion updates, compromising the networks …

Microsoft Defender Adds protection to Detect unsecured Wi-Fi connections Automatically

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced a significant update to its Defender software, aiming to improve online safety by automatically detecting unsecured Wi-Fi connections. This new feature is part of Microsoft’s ongoing efforts to provide comprehensive privacy protection for users across various platforms. …

Google Workspace Implements New Password Policies to Enhance Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has announced significant changes to its password policies for Google Workspace, aimed at improving user security and protecting against unauthorized access. The tech giant is phasing out support for Less Secure Apps (LSAs), which require users to share their …

U.K. Citizen Charged for Hacking into Computer Systems of U.S. Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Securities and Exchange Commission (SEC) announced charges against Robert B. Westbrook, a U.K. citizen, for allegedly hacking into the computer systems of five U.S. public companies. The SEC claims that Westbrook used this unauthorized access to obtain material nonpublic …

New Sophisticated Linux Malware Exploiting Apache2 Web Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Exploiting Apache2 web servers often involves targeting vulnerabilities such as remote code execution (RCE) and path traversal flaws. Since Apache is used widely, these exploits pose a significant risk to many organizations that fail to implement timely updates and security …

Western Digital My Cloud Devices Flaw Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Western Digital’s My Cloud devices has been identified. An unchecked buffer in the Dynamic DNS client allows attackers to execute arbitrary code. This vulnerability, designated as CVE-2024-22170, carries a CVSS score of 9.2, indicating a high-severity …