DumpForums Claims to Have Stolen 10TB Data from Cybersecurity Firm Dr.Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A notable hacking forum, DumpForums, has claimed responsibility for a massive data breach targeting Dr.Web, a prominent Russian cybersecurity company. The hackers allege that they have exfiltrated a staggering 10 …

Chrome Security Update: Patch for Type Confusion Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has released a critical security update for its Chrome browser, addressing several vulnerabilities, including two high-severity type confusion flaws in the V8 JavaScript engine. The update, which brings Chrome …

Microsoft Security Updates: 5 Zero-Days & 118 Vulnerabilities Patched

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In its latest Patch Tuesday release, Microsoft addressed 118 vulnerabilities, including five zero-day flaws, two of which attackers are actively exploiting. The updates cover various Microsoft products, including Windows, Office, Azure, .NET, and Visual Studio. …

North Korean APT Hackers Exploiting DMARC Misconfigs For Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DMARC is an email authentication protocol that helps domain owners protect against unauthorized use like “email spoofing” and “phishing attacks.” By leveraging existing protocols like “SPF” and “DKIM,” DMARC enables …

LemonDuck Malware Exploiting SMB Vulnerabilities To Attack Windows Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LemonDuck malware has evolved from a cryptocurrency mining botnet into a “versatile malware” that is capable of “stealing credentials,” “disabling security measures,” and “propagating through various methods.”  It targets both …

Ukrainian Hackers Attack Russian Media Following Putin’s Birthday

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ukrainian hackers launched a large-scale attack on Russian state media company VGTRK on October 7, coinciding with President Vladimir Putin’s 72nd birthday. The attack, described as “unprecedented” by Kremlin officials, …

Hackers Exploiting DNS Tunneling Service To Bypass Network Firewalls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DNS tunneling is a hacking technique that hides information by taking advantage of the DNS protocol. This attack enables threat actors to evade firewalls and security measures.  Hackers retrieve information …

Vulnerability Scanner Released For CUPS Printing System Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical set of vulnerabilities in the Common Unix Printing System (CUPS) has been disclosed, allowing remote attackers to execute arbitrary code on target systems without valid credentials or prior …