Hackers Mimic Road Toll Collection Services to Steal Your Money

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI’s Internet Crime Complaint Center (IC3) has warned about a sophisticated smishing scam targeting drivers across multiple states. Since early March 2024, over 2,000 complaints have been filed with the IC3, detailing fraudulent text messages that masquerade as road …

Citrix UberAgent Vulnerability Allows Attackers To Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix’s uberAgent, a sophisticated monitoring tool used to enhance performance and security across Citrix platforms, has been identified as having a critical vulnerability. The flaw, tracked under CVE-2024-3902, could allow attackers to escalate their privileges within the system, posing a …

Most Important Python Security Tools for Ethical Hackers & Penetration Testers 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There are a variety of Python security tools are using in the cybersecurity industries and python is one of the widely used programming languages to develop penetration testing tools. For anyone who is involved in vulnerability research, reverse engineering or …

MITRE Hacked – Attackers Compromised R&D Networks Using Ivanti Zero-days

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The MITRE Corporation, a non-profit organization that runs federally funded research and development centers, has disclosed that a sophisticated cyber attack recently compromised one of its internal research and development networks. MITRE detected the attack on one of its internal …

PoC Exploit Released for Cisco IMC Flaw – Urgent Update Advised

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Proof of Concept (PoC) exploit has been released for a critical vulnerability in Cisco’s Integrated Management Controller (IMC). This flaw, identified as CVE-2024-20356, allows for command injection and could enable attackers to gain root access to affected systems. Overview of …

Hackers Posing as LastPass Employee to Steal Master Password & Hijack Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a sophisticated cyber attack, hackers have been discovered impersonating LastPass employees in an elaborate phishing campaign designed to steal users’ master passwords and hijack their accounts. This alarming development was recently highlighted by LastPass on their official blog, shedding …

New Redline Stealer Variant Leverages Lua Bytecode For Stealthiness

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Redline Stealer is a powerful information-stealing malware, and hackers often exploit this stealthy stealer to gain unauthorized access to a victim’s sensitive data. Threat actors can steal many sensitive and valuable data by exploiting the Redline Stealer. Threat actors can …

Cisco IMC Command Injection Vulnerability Under Active Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An attacker with read-only or higher privileges on a Cisco Integrated Management Controller (IMC) can exploit a command injection vulnerability (CVE-2024-20295) to gain full control (root access) of the underlying operating system.  The vulnerability exists due to insufficient validation of …

Cerber Linux Ransomware Exploits Atlassian Servers To Take Full Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often use Linux ransomware due to its prevalence in server environments. This type of ransomware offers higher potential payouts from organizations with critical data. Cybersecurity analysts at Cado Security Labs recently analyzed the Linux variant of the Cerber ransomware, …

“Cybercrime Index” Ranks: Russia, Ukraine, and China at the Top

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new “Cybercrime Index” has been introduced, ranking countries based on the threat level posed by cybercriminals. The Index reveals that many countries, led by Russia, Ukraine, and China, are the primary hubs for cybercriminal activities globally. Key Findings from …