Microsoft: Two New 0-Day Flaws in Exchange Server

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft Corp. is investigating reports that attackers are exploiting two previously unknown vulnerabilities in Exchange Server, a technology many organizations rely on to send and receive email. Microsoft says it is expediting work on software patches to plug the security …

Thousands of Vulnerable TP-Link Routers Can be Exploited By Multiple Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There are thousands of TP-Link routers being used all over the world and security analysts at CYFIRMA Tools & Exploits in Dark Web Forums There have been several reports of hackers working with other hackers around the world to exploit …

Hackers Using Dark Web Quantum Builder To Launch Agent Tesla RAT Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Zscaler ThreatLabz discovered a new malicious campaign in which the Agent Tesla RAT is delivered by a malware builder called Quantum Builder. Tesla is an active keylogging and RAT program that is based on .NET, and since 2014, it …

Fake CISO Profiles on LinkedIn Target Fortune 500s

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

September 29, 2022 0 Comments Someone has recently created a large number of fake LinkedIn profiles for Chief Information Security Officer (CISO) roles at some of the world’s largest corporations. It’s not clear who’s behind this network of fake CISOs …

Hackers Targeting Multiple Military & Weapons Contractor Companies Using Powershell Stagers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Securonix Threat Labs has identified a new covert attack campaign targeting Military and Weapons Contractor companies including an F-35 Lightning II fighter aircraft components supplier. This campaign involved the use of PowerShell, secured C2 infrastructure and multiple layers of obfuscation …

Hackers Use Mouse Movement in Microsoft PowerPoint Presentations to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There is a new code execution technique being used by hackers who are thought to be working for Russia as reported by the security analysts at Cluster25. An attack of this type makes use of mouse movement to launch a …

Microsoft to Retire Client Access Rules that Allows Admins to Filter Client Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft announced the retirement of Client Access Rules (CARs) in Exchange Online platform by September 2023. Client Access Rules are similar to mail flow rules (also known as transport rules) for client connections to your Exchange Online organization. It helps …

NullMixer Malware Spreads through Websites at the Top of Search Engine Results

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kaspersky researchers have discovered a new campaign, spreading NullMixer, a malware that is actively distributed by cybercriminals via websites offering crack, keygen and activators for downloading software illegally. This malware steals users’ credentials, addresses, credit card data, cryptocurrencies, and even …

NetSupport RAT Uses Social Engineering Toolkits to Deploy Malware on Victim’s System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyble Research & Intelligence Labs noticed threat actors using Fake Browser Update, SocGholish to deliver the NetSupport RAT. SocGholish is active since 2017. It is a JavaScript malware framework where “Soc” refers to the use of social engineering toolkits masquerading …

Warning!! New WhatsApp Zero-Day Bug Let Hackers Control The App Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical zero-day vulnerability that WhatsApp had been known to exploit was silently fixed by WhatsApp. As a result of these security flaws, attackers would be able to remotely execute arbitrary code on both Android and iOS devices. With over …