Highly Sophisticated Dolphin Malware Steals Sensitive Files and Store Them on Google Drive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, cybersecurity experts at ESET identified that North Korean hackers had been actively using a previously unknown backdoor called Dolphin. This backdoor has been used for more than a year to carry out highly targeted operations against South Korean targets. …

ConnectWise Quietly Patches Flaw That Helps Phishers

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

ConnectWise, a self-hosted, remote desktop software application that is widely used by Managed Service Providers (MSPs), is warning about an unusually sophisticated phishing attack that can let attackers take remote control over user systems when recipients click the included link. …

Critical RCE Flaw With 2M Downloaded Android Remote Keyboard Apps Let Attackers Access keystrokes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Critical RCE Flaw With 2M Downloaded Android Remote Keyboard Apps Let Attackers Access keystrokes By Guru – December 1, 2022 Multiple critical vulnerabilities were found by the security researchers at Synopsys in three Android apps that enable users to control …

Hackers Selling Access to Enterprise Networks via a Critical Flaw in Fortinet Products

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security experts from Cyble security firm have recently identified a security flaw, CVE-2022-40684 that’s affecting multiple versions of Fortinet products, and this product range includes the following products:- FortiOS FortiProxy FortiSwitchManager A recently patched critical vulnerability in Fortinet products may …

New Flaw in Acer Laptops Let Attackers Disable Boot Protection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Experts from Acer observed multiple Acer laptop models have vulnerabilities that might let hackers disable the ‘Secure Boot’ function and security checks to install malware. The vulnerability, tracked as CVE-2022-4020 (CVSS score of 8.1), was found in the HQSwSmiDxe DXE …

AIIMS Server Hacked – Hacker Demand 200 Crore in Cryptocurrency

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The All India Institute of Medical Sciences (AIIMS), Delhi’s server has been down for six days in a row, and sources told news agency PTI that hackers have allegedly demanded almost 200 crores in cryptocurrencies from the institution. Reports stated …

Fake Android SMS APP on the Google Play Steal Phone Numbers to Verify & Create New Web Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Evina’s security researcher Maxime Ingrao identified a fake Android SMS APP on Google Play ‘Symoo’, with 100,000 downloads actually serving as an SMS relay for a service that creates accounts for websites including Microsoft, Google, Instagram, Telegram, and Facebook. Despite …

13 New Vulnerabilities in BMC Firmware Let Hackers Launch Remote Attacks on OT & IoT Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BMC (Baseboard Management Controller) firmware from Lanner has been found to contain over a dozen vulnerabilities that could allow remote attacks to be launched against OT and IoT networks. As a result of analyzing an IPMC from Lanner Electronics (a …

U.S. Banned Chinese Telecom & Surveillance Cameras That Pose National Security Threat

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The US has banned the import and sale of Chinese telecom equipment and security camera systems from Huawei, ZTE, Hytera Communications, Hikvision, Dahua, Pacific Network Corp, along with its subsidiary ComNet (USA) LLC, and China Unicom (Americas) Operations Limited. Reports …

U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A recent scoop by Reuters revealed that mobile apps for the U.S. Army and the Centers for Disease Control and Prevention (CDC) were integrating software that sends visitor data to a Russian company called Pushwoosh, which claims to be based in …