Google Adds V8 Sandbox in Chrome To Stop Hackers From Gaining Read/Write Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move to bolster the security of its widely-used V8 JavaScript engine, Google has unveiled the V8 Sandbox, a cutting-edge mechanism to prevent memory corruption attacks. The V8 Sandbox represents a proactive approach to cybersecurity, operating under the …

Notepad++ Seeking your Help to Take Down the Parasite Website

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The developers of Notepad++, a widely used text and source code editor, have recently issued a call to action to their user base. The plea is an urgent one, and it is aimed at addressing a critical issue that requires …

Hackers Weaponize Suspended Domains To Deliver Malware Payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent phishing campaign targeting Latin America utilized emails with ZIP attachments containing an HTML file disguised as an invoice using free, temporary email addresses with the domain “temporary.link” and spoofing the User-Agent field in the header to indicate use …

Practical Guide to Simplify Your Malware Sandboxes Configuration

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware sandboxes are integral to security applications like intrusion detection, forensics, and threat intelligence, but using them correctly is challenging due to choices in implementations, monitoring techniques, and configurations.  Improper use can negatively impact applications through false positives, inconclusive analyses, …

New Cyber Attack Targeting Hospital IT Helpdesks with Voice Calls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hospitals across the nation are on high alert as sophisticated cybercriminals use advanced social engineering tactics to target IT help desks. The Health Sector Cybersecurity Coordination Center (HC3) has issued a Sector Alert detailing the latest threat to the healthcare …

Massive boAt Data Breach: 7.5 Million Customers Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Personal data belonging to over 7.5 million customers of boAt, a leading Indian consumer electronics brand, has been compromised and is now circulating on the dark web. This breach has exposed many personally identifiable information (PII), posing significant risks to …

Cisco Nexus Dashboard Vulnerability Let Attackers Read Arbitrary Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Nexus Dashboard Fabric Controller is a network management platform for all NX-OS-enabled devices. It enables data center operation teams to perform deep-dive troubleshooting and maintenance operations.  A new vulnerability has been discovered in the Cisco Nexus Dashboard Fabric Controller, …

Meet The New Qakbot DLL That Abuses Windows Process For persistence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Law enforcement dismantled the Qakbot botnet’s servers in 2023’s Operation Duck Hunt, but researchers identified its reemergence with a modified DLL, which utilizes the srtasks.exe process for persistence, ensuring its survival on restarted machines.  Qakbot continues to spread via phishing …

Splunk vs Cribl Lawsuit of Terms Violating Enterprise License

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Splunk-Cribl lawsuit is poised to go to trial. Both companies are suing over alleged violations of enterprise license terms. The case, brewing since October 2022, has now escalated to the point where the intricacies of software licensing and intellectual …

JsOutProx Malware Abusing GitLab To Attack Financial Institutions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab is a prominent web-based Git repository manager that is exploited by hackers to gain unauthorized access to confidential source code, steal intellectual property or insert malicious code into projects that are hosted on GitLab.  Gitlab’s software vulnerabilities or misconfigurations …