BIND DNS Software High-Severity Flaws Let Hackers Remotely Trigger DoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Internet Systems Consortium (ISC) released security advisories on January 25, 2023, to address flaws in the DNS software suite BIND.  A denial of service could occur if these vulnerabilities are exploited. The flaws that were resolved have the potential …

PlugX Malware Hides on Removable USB Devices to Infect Windows Machine

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An investigation by cyber security experts at Palo Alto Network’s Unit 42 team recently revealed that a variation of PlugX malware has the ability to conceal harmful files on USB drives and subsequently infect Windows systems upon connection. A new …

New Mimic Ransomware Abuses Windows Search Engine to Look Files for Encryption

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new strain of ransomware named Mimic has been uncovered recently by security experts at Trend Micro in June 2022. Mimic takes advantage of the APIs of the ‘Everything’ a file search tool for Windows to search for files to …

Hackers Launching Millions of Attacks to Exploit Critical Realtek SDK Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the latter half of 2022, a significant number of cyber attacks utilizing a remote code execution vulnerability in Realtek Jungle SDK were reported. These attacks, numbering 134 million, aimed to compromise smart devices. The vulnerability in question grants unauthorized …

PoC Exploit Released for Critical CryptoAPI Spoofing Vulnerability in Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Akamai researchers have made available a demonstration exploit code for a significant vulnerability in Windows CryptoAPI that was identified by the National Security Agency (NSA) and the United Kingdom’s National Cyber Security Centre (NCSC). The exploit allows for the forging …

GoTo Says Hackers Stole Customer Data and Encryption Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GoTo, formerly LogMeIn Inc., has acknowledged that a threat actor stole an encryption key that gave access to a portion of the backup files that were encrypted. Information about certain customers was stolen from a third-party cloud storage service that LastPass …

FBI: Lazarus Group Is Responsible For $100 Million Harmony Crypto Theft

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been officially confirmed by the Federal Bureau of Investigation (FBI) that the cyber-attacks on the cryptocurrency exchange, Harmony Horizon, which resulted in the theft of $100 million worth of Ethereum, were orchestrated by state-sponsored hacking groups, Lazarus and …

Experian Glitch Exposing Credit Files Lasted 47 Days

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On Dec. 23, 2022, KrebsOnSecurity alerted big-three consumer credit reporting bureau Experian that identity thieves had worked out how to bypass its security and access any consumer’s full credit report — armed with nothing more than a person’s name, address, …

Warning! Apple Fixes Actively Exploited iOS Zero-Day on iPhones & iPads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an effort to ensure the safety and security of its customers, Apple has taken the necessary steps to address a potentially dangerous vulnerability that has been marked as “Zero-Day” by releasing updates for older iPhone and iPad models. The …

Hackers Use Shapeshifting Tactics to Steal Information Stealing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Cyble Research and Intelligence Labs (CRIL) discovered Aurora Stealer malware imitating popular applications on phishing sites to infect as many users as possible. To target a variety of well-known applications, the threat actors behind this attack are actively changing and …