SolarWinds Access Rights Manager Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IT and security administrators can utilize SolarWinds Access Rights Manager (ARM) to efficiently manage and audit user access rights to data, systems, and files.  The software provides an easy-to-use interface for provisioning, de-provisioning, and overseeing access, which helps safeguard organizations …

TinyMCE Text Editor Flaw Let Attackers Execute XSS payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Tiny Technologies, the company behind the popular text editor TinyMCE, announced the release of version 5.10.8 on October 19, 2023.  This new version aims to improve the security of the editor and includes important security patches. One of the major …

New BlackCat Hacker Tool Spreads Ransomware to Remote Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The BlackCat ransomware operators have demonstrated ongoing adaptation and innovation in their malicious activities, making mitigating their threats challenging for security experts. BlackCat operators, like Munchkin, revealed updates for propagating their payload across victim networks. They’ve been consistently evolving their …

U.S. Government Releases Popular Phishing Technique Used by Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing is a cyberattack that uses deception to trick people into giving away sensitive information or taking actions that compromise security.  Phishing is often the first stage of a larger attack that can lead to data breaches, ransomware infections, identity …

React Developer Tools Flaw Let Attackers Launch a DDoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

React Developer Tools is an essential tool for developers as it allows them to effectively inspect React components, modify the properties and state of these components, and pinpoint any performance issues.  With this tool, developers can easily optimize the performance …

GhostLocker – A New Generation of Raas from Hacktivist Groups

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The increasing number of ransomware is on the rise primarily due to its lucrative nature and the inherent obscurity it provides to malicious actors in the cyber realm. Threat actors exploit ransomware because it allows them to extort significant sums …

Hackers Shifting Towards Non-Executable .txt & .log Files to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, researchers have found an increasing number of malware samples that employ code from non-executable files (such as .txt, .log, etc.), a strategy created particularly to get beyond standard detection procedures.  These files are often deceptively simple, with only a line …

Hackers Use Discord for C&C to Exploit Jupyter Notebooks & SSH

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers Use Discord for C&C to Exploit Jupyter Notebooks & SSH By Guru – October 19, 2023 Jupyter Notebooks exposed to the internet are being targeted by a new crypto jacking campaign called Qubit Strike, which Cado Security Labs discovered.  …

Former Navy IT Manager Sentenced for Selling People’s Sensitive Information on Dark web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Marquis Hooper, a former IT Manager in the Navy, was sentenced to five years in prison for unlawfully accessing and tampering with a computer database that contained highly sensitive and confidential information. Over 9,000 individuals’ identities were stolen by Hooper, …

Citrix NetScaler Zero-Day Exploited to Compromise Government Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical security vulnerabilities, namely CVE-2023-4966 and CVE-2023-4967, have been discovered in NetScaler ADC and NetScaler Gateway. These vulnerabilities impact several versions of the products, and users are strongly advised to take swift action to secure their systems. The following …