Microsoft Defender XDR Expanded to Malicious OAuth Apps With the Power of AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an update to its security operations suite, Microsoft has announced the expansion of its Defender Extended Detection and Response (XDR) capabilities to include advanced AI-powered detection and mitigation of threats posed by malicious OAuth applications. This enhancement is part …

Beware! 150+ SSH Accounts With Root Access Advertised On Hacker Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development for cybersecurity, over 150 SSH accounts with root access are currently being advertised for sale on various hacker forums. These accounts reportedly provide unrestricted administrative access to Virtual Private Servers (VPS), posing a significant threat to …

New CraxsRAT Version Claims Capability To Bypass Google Play Antivirus

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development in the cybersecurity landscape, the latest version of CraxsRAT, known as v7.4, has been released with claims of enhanced capabilities, including the ability to bypass Google Play Protect, Google’s built-in antivirus system for Android devices. This …

SandStorm Hackers Added New Kapeka Tool to it’s Arsenal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kapeka, also known as KnuckleTouch, is a sophisticated backdoor malware that has been making waves in the cybersecurity world.  Initially appearing in mid-2022, it wasn’t until 2024 that Kapeka was formally tracked due to its involvement in limited-scope attacks, particularly …

Why Your VPN May Not Be As Secure As It Claims

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

May 6, 2024 0 Comments Virtual private networking (VPN) companies market their services as a way to prevent anyone from snooping on your Internet usage. But new research suggests this is a dangerous assumption when connecting to a VPN via …

New Cuckoo Malware Attacking macOS Users to Steal Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers have uncovered a new malware strain dubbed “Cuckoo.” This malicious software exhibits characteristics of both spyware and an infostealer, targeting both Intel and ARM-based Macs with sophisticated tactics to extract sensitive information. Discovery and Analysis The malware, named …

Finland Warns Of New Android Malware Stealing Banking Logins

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Watch out for harmful Finnish SMS, which tricks Android device users into loading banking malware by dialing a spoofed service number. It is directed at online banking systems to steal money, whereas iPhones are unaffected.  Delete such messages, avoid downloading …

MedStar Health Breach: Hackers Accessed Emails & Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MedStar Health, a primary healthcare provider in the United States, has reported a significant data breach involving unauthorized access to three employees’ email accounts. This breach has potentially compromised the personal information of approximately 183,000 patients. Details of the Breach …

Multiple Xiaomi Android Devices Vulnerability Let Attackers Hijack Phones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several security experts have recently discovered that Xiaomi Android devices are suffering from a range of security vulnerabilities that affect several apps and system components. These vulnerabilities pose a severe threat to users’ data privacy and device security. Xiaomi’s users …

Internal Communication Gaps Exposes Organizations to Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The alignment between security teams and executive management is crucial. However, a significant communication gap within organizations is increasingly becoming vulnerable, exposing them to sophisticated cyber threats. This issue is highlighted in the 2024 Global CISO Report by Dynatrace, which …