Chinese APT Groups Actively Targeting Outlook and Exchange Online Email Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A china based APT actor accessed Microsoft 365 cloud environment and exfiltrated unclassified Exchange Online Outlook data from a small number of accounts. In June 2023, a Federal Civilian Executive Branch (FCEB) agency observed suspicious activity in their Microsoft 365 (M365) …

QuickBlox Framework Security Flaws Exposes Millions of Users Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recent reports from Team82 and Check Point Research (CPR) team state that there has been a major vulnerability in QuickBlox SDK (Software Development Kit) and API (Application Programming Interface) that is used for developing chat and video applications. Researchers are …

Ransomware Payments are at a Record High for 2023: $449.1 million through June.

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The significant plunge in cyber crimes shows a decent rise in legitimate services in the mid of this year, 2023. However, the rise in ransomware attacks still continues to threaten individuals and organizations, and the proliferation of cyber crimes related …

10 Mobile App Security Scanners to Detect Vulnerability in Applications 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In this era, mobile technology and smartphone both are trendy terms that often get used. 90% of the population holds a smartphone in their hands. Their purpose is not only to “call” other parties but to use other features like …

10 Different Types of Most Dangerous Malware Attack in 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Today’s topic is basically about types of malware, yes, it’s malicious software that is basically designated to damage, impair, or exploit computers or computer systems. Thus we can say that it is a term that most of us have heard …

Fortinet Critical Flaw: Let a Remote Attacker Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A ‘critical’ severity flaw has been detected inFortiOS and FortiProxy, identified as CVE-2023-33308 (CVSS rating 9.8). A remote attacker can use the vulnerability on susceptible devices to execute Fortinet arbitrary code. “A stack-based overflow vulnerability [CWE-124] in FortiOS&FortiProxy may allow a remote attacker …

Wireshark 4.0.7 Released – What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wireshark, an industry-leading network packet analyzer, has released version 4.0.7, which includes defect fixes, protocol updates, and a few enhancements. It continues to be an extensively utilized and popular network protocol analysis tool. Wireshark, a packet analyzer, is mainly utilized …

DangerousPassword Attacks Targeting Windows, macOS, and Linux Software Developers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Python-based malware targets Windows, linux, and macOS and is presumed to be used by dangerous password attack groups, also known as Crypto mimics. This group has been active since June 2019 and employs various techniques to deliver malware to the …

ICS/OTICS Patch Tuesday: Siemens and Schneider Electric Releases Patch for 50 vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Siemens and Schneider Electric published nine new security warnings that together addressed 50 vulnerabilities impacting its industrial devices. Recently, Schneider Electric and Siemens Energy indicated that they were the targets of the Cl0p ransomware group’s attack that took use of a …

New Stealthy Universal Rootkit Let Attacker Load second-stage Payload Directly

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A self-signed China-originated Rootkit acts as a universal downloader targeting gaming sectors to exfiltrate sensitive information. The threat actors abuse Microsoft signing portals to sign their drivers in order to pass the security check. As per the analysis of Trend …