Hackers Launch a Chain of Exploits Via Malicious iMessage Attachments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In June, a new campaign targeting iPhone and iPad devices was named “TriangleDB.” This malware infection chain consists of a malicious iMessage attachment, which launches a chain of exploits on the affected devices. Moreover, several modules were found in this …

QNAP Eliminates Server Responsible for Extensive Brute-force Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

QNAP, a Networking hardware company, has effectively taken down a malicious server that was utilized in extensive brute-force attacks targeting Internet-exposed NAS devices. On October 14, 2023, the company discovered a big wave of weak password attacks. Within 7 hours, the QNAP Product …

1Password Hacked – Internal Systems Compromised to Access HAR File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, 1Password detected suspicious activity on their Okta instance on September 29, but no user data or sensitive systems were compromised. 1Password is widely used as a popular password manager and security tool, trusted by individuals and businesses.  Users opt …

New ExelaStealer Attack Windows PCs and Steals Private Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new InfoStealer called ExelaStealer emerged in 2023, joining the ranks of other well-known malware like RedLine, Raccoon, and Vidar.  FortiGuard Labs, a leading cybersecurity research and analysis firm, has revealed some insights into this new threat. ExelaStealer is an …

NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 23, 2023 0 Comments A 22-year-old New Jersey man has been sentenced to more than 13 years in prison for participating in a firebombing and a shooting at homes in Pennsylvania last year. Patrick McGovern-Allen was the subject of …

Hackers Using Money-Making Scripts to Deliver Multiple Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI warned about attacks on government and non-profit organizations in April, which involved deploying multiple malware strains on victim devices.  Besides this, the attackers aim to achieve the following things:-  Mine resources Steal data Establish backdoor access to systems …

Over 50K Cisco IOS XE Devices Hacked Exploiting Zero-day

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco IOS XE devices were widely used in networking and telecommunications due to their advanced features and reliability.  They provided a scalable and modular operating system that supported various routing and switching functionalities.  IOS XE’s software design enabled the smooth …

Hackers Stole Access Tokens from Okta’s Support Unit

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 20, 2023 0 Comments Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says …

Authorities Seized RagnarLocker Ransomware Dark Web Site

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A coordinated international law enforcement action has seized the dark web site used by the notorious RagnarLocker ransomware group.  This operation involving law enforcement agencies from several countries is a major setback for cyber criminals and a significant achievement in …

Iranian Crambus Actors Modify Windows Firewall Rules To Enable Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Crambus espionage group, formally known as OilRig or APT34, has a lengthy history and a great deal of experience conducting prolonged attacks against Iranian targets. The Iranian-linked attackers targeted a Middle Eastern government between February and September 2023, compromising several …