OPNsense Firewall Flaws Let Attackers Employ XSS to Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OPNsense is a firewall and routing platform that is based on FreeBSD. It is open-source, making it freely available for use. Additionally, OPNsense is designed to be user-friendly, with a straightforward interface and simple installation process. Furthermore, it offers the …

HiddenGh0st Malware Attacking MS-SQL & MySQL Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A remote control malware called Gh0st RAT, which is popular with Chinese threat actors and has publicly available source code was created by China’s C. Rufus Security Team. ASEC (AhnLab Security Emergency Response Center) finds the Gh0st RAT variant using …

ZenRAT Malware Delivered Through Fake Bitwarden Installation Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to the recent findings by Proofpoint, a new malware called ZenRAT has been discovered. This malware is being spread via fraudulent download packages disguised as Bitwarden installations. This malware primarily targets Windows users and redirects non-Windows users to benign …

BlackTech APT Hackers Attacking Network Routers to Breach Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers called BlackTech APT have been doing bad things since 2010. They attack places like the government, factories, technology, media, electronics, phones, and the military. The group behind the attack employs custom-made malicious software, tools that can be used for …

Google Given Max Severity Score for lipwebp Zero-day Exploited in Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google released a security fix for a critical vulnerability that affected Google Chrome for Windows, macOS, and Linux. The vulnerability was given the CVE ID as CVE-2023-4863 and has been given a severity of 8.8 (High). On analyzing the vulnerability, …

‘Snatch’ Ransom Group Exposes Visitor IP Addresses

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The victim shaming site operated by the Snatch ransomware group is leaking data about its true online location and internal operations, as well as the Internet addresses of its visitors, KrebsOnSecurity has found. The leaked data suggest that Snatch is …

Exela Stealer Attacking Discord Users to Steal Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Open-source data stealers are rapidly gaining popularity due to their versatility, giving threat actors useful reconnaissance tools for malicious objectives. Open-source data stealers can be stealthy if designed and configured effectively, making them difficult to detect.  It can be difficult …

ShadowSyndicate: A New Raas Provider Launching Multiple Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new Ransomware-as-a-service (RaaS) provider has been discovered by researchers, which notably uses multiple ransomware families and is found to have links with several ransomware attacks since July 2022. This new threat actor has been given the name “ShadowSyndicate,” which …

Hacker Stole $200 Million in Cryptocurrency from Mixin Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On September 23, 2023, early in the morning, the Hong Kong Times reported that hackers targeted Mixin Network’s cloud service provider, resulting in mainnet losses. Mixin Network was launched in 2017 and offers lightning-fast peer-to-peer digital asset transactions, securing over …

Xenomorph Android Banking Malware Attacks 30+ US Banks with New Stealing Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Xenomorph has been discovered with a new malware campaign targeting several United States and Spain institutions. This new campaign shows thousands of downloads of Xenomorph malware by victims. Xenomorph is an Android malware that was discovered in February 2022 by …