Critical OAuth Vulnerability Exposes 1 Million Sites to XSS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a critical vulnerability affecting over one million websites. The vulnerability combines OAuth implementation flaws with cross-site scripting (XSS) attacks. The vulnerability stems from the interaction between …

Record-breaking Ransom Payment: Dark Angels Ransomware Received $75 Million

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity firm Zscaler has revealed that the Dark Angels ransomware group received an unprecedented $75 million ransom payment from a single victim in a shocking development that underscores the escalating …

How to Collect and Use IOCs From Malware Configs IN TI Lookup – SOC/DFIR Teams

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Indicators of Compromise (IOCs) are key forensic data points used to detect security breaches. They include file hashes, suspicious IP addresses, domain names, URLs, specific email addresses, unusual file names, …

Cuckoo Spear Attacking Windows Users With Highly Sophisticated Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncovered Cuckoo Spear, a new threat actor associated with the APT10 group, demonstrating persistent stealthy operations within victim networks for two to three years.  The advanced persistent threat (APT) …

Researchers Hacked into Medusa Ransomware Group’s Cloud Storage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Medusa Ransomware Group experienced significant operational security (OPSEC) failure, which was primarily due to the group’s use of Rclone, a widely utilized tool for data exfiltration, to store stolen …

iPhone Users Beware! Fake Postal Messages Stealing Your Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have launched a smishing campaign targeting iPhone users in India, impersonating India Post. Malicious iMessages falsely claim a package awaits at an India Post warehouse, enticing victims to click …

New MOVEit File Transfer Vulnerability Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress Software has disclosed a new high-severity vulnerability in its MOVEit Transfer file transfer solution that could allow attackers to escalate privileges through improper authentication. The vulnerability, tracked as CVE-2024-6576 …

Achieving 24/7 Threat Monitoring & Response for Small IT Security Teams – Free Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Maintaining continuous vigilance is essential for organizations of all sizes in the face of increasing cyber threats. However, lean IT security teams often face the challenge of providing 24/7 threat …

North Korean Government Hacker Charged for Attacking U.S. Hospitals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A grand jury in Kansas City has charged North Korean national Rim Jong Hyok for orchestrating a series of cyberattacks targeting U.S. hospitals and healthcare providers. The indictment outlines a …