Apache OpenMeeting Flaw Allows Server Hijacks and Command Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenMeetings is an application that can be used for video calls, collaborative work, and presentations. It can also be added as a plugin to Jira, Confluence or Drupal applications. Recent reports shared by SonarSource, indicate that a newly discovered vulnerability …

What is Cloud-native Web Application Firewall (Cloud-native WAF)? 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

With your on-premise security solution comprising hardware, software, signatures, rules, and machine learning, you may think your applications are fully protected. How do you know for sure that your apps are secured? And what if you’ve cloud-native apps? Can a …

Hackers Exploiting Critical Citrix NetScaler Zero-day Flaw To Deploy Webshells

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) recently released a security advisory that indicates that threat actors have been exploiting a Zero-day vulnerability in Citrix ADC (Application Delivery Controller) and NetScaler Gateways. A vulnerability was discovered that enabled the placement …

Hackers Use Fake Update Page Mimicking Victim’s Browser to Deliver NetSupport RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors deliver NetSupport RAT through a new campaign called Fake SG which could rival with SocGholish. This campaign utilizes hacked WordPress websites to display a custom landing page mimicking the victim’s browser to deliver payloads to compromise victims. According …

Mallox Ransomware Attacking MS-SQL Servers to Compromise Victims’ Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new ransomware strain dubbed, Mallox (aka TargetCompany, FARGO, and Tohnichi) is actively targeting and attacking Microsoft SQL (MS-SQL) servers. Since June 2021, this new ransomware strain has been active, and it’s noteworthy, as it targets the MS-SQL servers that …

Hackers Fraudulent Job offers to target University Students

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Campaigns of Fraudulent Job offers target university students in North America, asking victims to pay a fee in exchange for work. The campaigns began as early as March 2023 and continued through June 2023; the threat actors were purported to …

P2P Worm Attacking 307,000 Redis Instances on Linux and Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

P2PInfect is a new P2P worm that is actively targeting the Redis servers on Linux and Windows OS, making it highly scalable and powerful compared to others. While not all Redis instances are vulnerable, they should still anticipate compromise attempts …

Legendary Hacker Kevin Mitnick Died At The Age Of 59

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Renowned former hacker Kevin Mitnick unexpectedly passed away on Sunday at the age of 59.  After being identified over a year ago, it has been reported that he sought pancreatic cancer treatment at the renowned University of Pittsburgh Medical Centre. …

OpenSSH Agent RCE Flaw Let Attackers Execute Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers at Qualys discovered a new Remote Code Execution flaw in the OpenSSH.  This flaw exists in OpenSSH’s forward ssh-agent. This flaw allows an attacker to execute arbitrary commands on vulnerable OpenSSH’s forwarded ssh-agent. OpenSSH has been used in several …

Chinese APT41 Group Attack Android Devices With WyrmSpy and DragonEgg Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A Chinese-based state-sponsored espionage group, APT41 targets Android devices through spyware wyrmspy and Dragon egg which masquerades as legit applications. This group has been active since 2012 and targets both public and private sectors related to software development, hardware manufacturers, …