Malware Dissection with Gemini 1.5 Flash model in 12.72 seconds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The ability to swiftly and accurately analyze malware is paramount. Traditional reverse engineering and code analysis methods are often too slow to keep pace with the sheer volume of new threats. Enter Gemini 1.5 Flash, Google’s latest lightweight and cost-effective …

CISA Warns of GeoServer RCE Vulnerability Under Active Exploitation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding a critical Remote Code Execution (RCE) vulnerability in GeoServer, identified as CVE-2024-36401. This vulnerability is currently under active exploitation by malicious actors, posing significant risks to systems …

Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 15, 2024 0 Comments At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up …

Juniper Junos Flaw Let Attackers Gain Full ‘Root’ Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers focus on Juniper Junos because it is extensively used in business networking and, consequently, a huge target for hacking valuable systems. Since it is prominent in big organizations, any successful breach can result in significant data loss or operational …

Pinterest Data Leak: Hackers Claiming Access to 60 Million Rows of Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Pinterest, the popular image-sharing platform with over 518 million monthly active users, faces a potential data leak that could affect millions of users. A hacker known as “Tchao1337” has allegedly leaked a database containing 60 million rows of Pinterest user …

Threat Actors Claims Breach of 1.1TB of Disney’s Internal Slack Chats

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have claimed responsibility for a massive data breach involving 1.1TB of Disney’s internal Slack chats. The breach, first reported on July 12 by a hacktivist named NullBulge on a dark web forum, has sent ripples through the cybersecurity …

Google to Acquire Cybersecurity Firm Wiz for $23 Billion

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google is reportedly in advanced discussions to acquire the cloud security firm Wiz for a staggering $23 billion. The Wall Street Journal broke the news on Sunday, citing sources familiar with the matter. If finalized, this acquisition would mark Google’s …

BianLian Ransomware Leveraging RDP Credentials To Gain Initial Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BianLian emerged in 2022, and after its emergence rapidly, it became one of the three most active ransomware groups.  They started their operations by exploiting RDP, ProxyShell, and SonicWall VPN vulnerabilities.  The cybersecurity researchers at Juniper affirmed that the operators …

CRYSTALRAY Hackers Exploiting Popular pentesting Tools To Evade Detections

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The threat actor Crystalray, previously observed using SSH-Snake, has significantly expanded operations, targeting over 1,500 victims.  Employing mass scanning, exploiting multiple vulnerabilities, and utilizing tools like zmap, asn, httpx, nuclei, platypus, and SSH-Snake, CRYSTALRAY aims to steal and sell credentials, …

Hackers Starting To Exploit The Vulnerabilities Within 22 Minutes Of PoC Release

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The growing tension and global elections in the past year have presented major challenges to internet security, raising the volume of malicious traffic. Cloudflare cybersecurity researchers presented their Q1 2024 Application Security Report, which illustrated how Cloudflare’s mitigated traffic has …