Hackers Hijacked Notepad++ Plugin To Inject Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have manipulated a popular Notepad++ plugin, injecting malicious code that compromises users’ systems upon execution. The AhnLab Security Intelligence Center (ASEC) researchers have revealed that the “mimeTools.dll” plugin, which is widely used, was modified to carry out the attack. …

Hackers Use Weaponized PDF Files to Deliver Byakugan Malware on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Due to their high level of trust and popularity, hackers frequently use weaponized PDF files as attack vectors. Even PDFs can contain harmful codes or exploits that abuse the flaws in PDF readers. Once this malicious PDF is opened by …

Multiple Chinese Hacking Groups Exploiting Ivanti Connect Secure VPN Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity firm Mandiant has uncovered a series of sophisticated cyberattacks targeting Ivanti Connect Secure VPN appliances. These attacks, attributed to multiple Chinese nexus espionage groups, exploit critical vulnerabilities to facilitate lateral movement and compromise Active Directory systems. This article delves …

Magento Vulnerability Let Attackers Inject Backdoor On E-commerce Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated vulnerability within the Magento ecommerce platform has been unveiled, posing a significant threat to online merchants and shoppers alike.  The vulnerability, identified as CVE-2024-20720, allows attackers to inject a persistent backdoor into Magento servers, compromising the security of …

Hackers Claiming XpressBees Data Leak: 95K User Personal Data Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The logistics and supply chain company XpressBees has become the latest victim of a data breach. A user by the alias “IntelBroker” on the notorious BreachForums community has claimed responsibility for the leak, which purportedly exposes the personal information of …

Apache HTTP Server Flaw Let Attackers Inject Malicious Headers Amd HTTP/2 DoS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache released updates to address several vulnerabilities impacting the Apache HTTP server that let attackers launch HTTP/2 DoS attacks and insert malicious headers. Server operations are being adversely affected by these vulnerabilities, which are proving to be a serious danger. A …

Cyber Attack Hits World’s Second Largest Lens-maker

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HOYA CORPORATION, the world’s second-largest lens manufacturer, has reported an IT system incident that has disrupted its operations. The Tokyo-based company, known for its advanced optics technology and a broad range of healthcare and imaging products, confirmed the cyber attack …

New Fake E-Shopping Attack Hijacking Users Banking Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fake e-shop scam campaign has been targeting Southeast Asia since 2021, as CRIL observed a surge in activity in September 2022, with the campaign expanding from Malaysia to Vietnam and Myanmar.  The attackers use phishing websites to distribute a …

Google Pixel Phone Zero-days Exploited by Forensic Firms in the Wild : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Pixel Update Bulletin details security vulnerabilities and functional improvements for supported devices. Updating to the April 2024 security patch level (2024-04-05 or later) addresses all these issues and those included in the April 2024 Android Security Bulletin.  The device’s …

Rhadamanthys Stealer Using Weaponized PDF Files To Attack Oil And Gas Sector

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use weaponized PDF files as they have the ability to incorporate malicious codes or scripts within a well-known and trusted form of PDF which is often not detected by security measures. If the person opens one such malicious document, …