Beware! Gootkit Loader Malware Using VLC Player to Deliver Malicious Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Trend Micro researchers recently reported that Australian healthcare entities were infected with a Cobalt Strike beacon after a new SEO poisoning campaign has been launched by Gootkit loader malware operators who use VLC Media Player to infect them. Gaining initial …

Over 1,300 Domains Used to Deliver Notorious Information Stealer Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The official AnyDesk website is being impersonated using more than 1,300 domains, all of which are linking to a Dropbox folder that delivers the malware that steals information, Vidar. AnyDesk is a remote desktop program that provides file transfer, remote …

9 Million Times Downloaded JsonWebToken Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

During the course of investigating the popular open-source project JsonWebToken, Unit 42 researchers discovered a new vulnerability. The cybersecurity analysts tracked the flaw as CVE-2022-23529 and this flaw has been rated as high severity with a CVSS score of 7.6. …

Kinsing Malware Uses Unique Techniques to Breach Kubernetes Clusters

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

By exploiting vulnerabilities in container images and misconfigured PostgreSQL containers, Kinsing malware is now actively infiltrating Kubernetes clusters. Threat actors are not unusual in using these tactics, but it appears that the past week has seen an uptick in the …

Microsoft Patch Tuesday, January 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix nearly 100 security flaws in its Windows operating systems and other software. Highlights from the first Patch Tuesday of 2023 include a zero-day vulnerability in Windows, printer software flaws reported by the U.S. National …

Beware of Modified Zoom App that Delivers Banking Malware IcedID Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious IcedID malware campaign was identified recently by Cyble researchers through which threat actors are actively spreading malware using modified versions of the Zoom application that have been trojanized. Due to the growing awareness of the COVID-19 pandemic in …

Identity Thieves Bypassed Experian Security to View Credit Reports

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

January 9, 2023 0 Comments Identity thieves have been exploiting a glaring security weakness in the website of Experian, one of the big three consumer credit reporting bureaus. Normally, Experian requires that those seeking a copy of their credit report …

Beware That Hackers Using ChatGPT to Develop Powerful Hacking Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An AI chatbot called ChatGPT, developed by OpenAI is being abused by cybercriminals as part of a new technique they have been experimenting with. Since the ChatGPT application was launched at the end of November 2022, it has quickly become …

Hackers Use CAPTCHA Bypass Techniques to Create Five GitHub Accounts Every Minute

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers from Unit 42 analyze Automated Libra, the group of cloud threat actors responsible for PurpleUrchin, the freejacking campaign. It is been observed that Automated Libra has been refining its methods to profit from cloud platform resources used for cryptocurrency …

NYC Education Department Has Banned ChatGPT on School & Networks Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several New York schools have banned ChatGPT, an AI chatbot that generates conversational responses. On its online systems and internet networks, the New York City Department of Education has banned access to ChatGPT. According to the education department representative Jenna …