Mallox Ransomware Attacking Linux Servers In Wild – Decryptor Uncovered

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Linux servers often provide hosting for critical applications, websites, and databases, which makes them a lucrative target for intruders to get unauthorized access to steal data and manipulate services. Exploiting security holes in Linux servers can enable attackers to take …

Malicious QR Reader App in Google Play Delivers Anatsa Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity experts have identified a malicious QR code reader app on Google Play that is delivering the notorious Anatsa banking malware. This discovery underscores the persistent threat posed by malicious apps in official app stores, emphasizing the need for heightened …

ChatGPT for MacOS Store All The Conversation in Plain Text

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Significant security concerns have been raised regarding the OpenAI ChatGPT app on macOS. The app reportedly stores user conversations in plain text in a non-protected location, sparking a debate about its adherence to macOS’s stringent security protocols. This practice means …

MSI Installer Vulnerability Let Attackers Escalate Privileges with Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical local privilege escalation vulnerability has been discovered in MSI Center versions 2.0.36.0 and earlier, allowing low-privileged users to escalate their privileges on Windows systems. This security flaw, tracked as CVE-2024-37726, stems from insecure file operations performed by the …

International Operation Takes Down 593 Malicious Cobalt Strike Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Law enforcement agencies from around the world have successfully shut down 593 rogue servers running unauthorized versions of Cobalt Strike, a tool often misused by cybercriminals. The operation, codenamed “Operation Morpheus,” was spearheaded by the UK’s National Crime Agency (NCA) …

The Not-So-Secret Network Access Broker x999xx

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring …

Free Malware Research with ANY.RUN Sandbox: Now Windows 10 Access for All Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move to enhance cybersecurity analysis for all its users, ANY.RUN has announced that Windows 10 is now available to everyone, including Community plan users. This update marks a substantial improvement in the platform’s ability to detect and …

Proton Launched a New end-to-end encrypted Document Editor to Take On Google Docs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Proton, the privacy-focused technology company, has unveiled a groundbreaking addition to its suite of secure services: This new offering aims to challenge industry giants like Google Docs and Microsoft 365 by providing a collaborative platform that prioritizes user privacy and …

Hackers Breaking Passkeys Using AitM Phishing Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers abuse phishing attacks as they are highly effective and low-cost methods for deceiving users into revealing sensitive information. Despite the recent surge in passkey adoption by large tech firms, Joe Stewart of Esentire discovered that several online platforms are …

Multiple Flaws In Rockwell Automation Panel Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two vulnerabilities in Rockwell Automation PanelView Plus have been discovered. Unauthenticated attackers could exploit them remotely to perform remote code execution (RCE) and denial-of-service attacks.  Rockwell Automation, Inc. is an American provider of industrial automation and digital transformation technology. Among …