New Android Rafel RAT Takes Complete Control Of Your Android Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android has many features and access to apps but is prone to security risks due to its open-source nature. Android malware, viruses, Trojans, ransomware, spyware, and adware programs threaten the data privacy and integrity of users. These threats exploit different …

ESET Security Products for Windows Vulnerable to Privilege Escalation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ESET, a leading cybersecurity company, recently addressed a local privilege escalation vulnerability in its Windows security products. The Zero Day Initiative (ZDI) reported the vulnerability to ESET. It could have allowed attackers to misuse ESET’s file operations during a restore …

Zyxel NAS Devices Under Attack: Mirai-Like Botnet Exploiting CVE-2024-29973

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new vulnerability, CVE-2024-29973, has been discovered in Zyxel NAS devices, exposing them to attacks from a Mirai-like botnet. This vulnerability, a Python code injection flaw, has raised significant concerns among cybersecurity experts and users alike. According to the Outpost24 …

New North Korean Hackers Attack Aerospace and Defense Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a sophisticated new malware campaign likely linked to North Korean hackers, targeting aerospace and defense companies with a previously undocumented backdoor. Researchers have dubbed the campaign “Niki.” It uses job description lures to deliver a multi-stage …

Microsoft Unveils Playbook to Defend AD & Entra Against Notorious Octo Tempest Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Octo Tempest is a financially motivated cybercrime group that leverages social engineering and identity compromise to gain initial access to an environment. It exploits weaknesses in identity systems to steal data and deploy ransomware.  This group is particularly dangerous because …

15 Best Enterprise Risk Management Tools 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Enterprise Risk Management (ERM) tools help organizations identify, assess, manage, and monitor risks across their operations. These tools provide a structured framework for integrating risk management into strategic planning, ensuring that potential threats and opportunities are systematically addressed. By offering …

UEFIcanhazbufferoverflow Flaw In Intel Processors Impacts 100s PC And Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Phoenix SecureCore UEFI firmware has discovered a new vulnerability, which runs on several Intel Core Desktop and mobile processors. This vulnerability has been assigned CVE-2024-0762, and its severity has been given as 7.5 (High). This was initially identified on …

New Linux Variant Of RansomHub Attacking ESXi Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often attack ESXi systems, as they are widely used in enterprise environments to manage virtualized infrastructure, making them lucrative targets. Threat actors can exploit security flaws in ESXi to deploy ransomware and perform other malicious activities, significantly increasing the …

Over 50% of US Car Dealers Are Shut Down Following CDK Hack Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cyberattack on CDK Global, a major provider of automotive dealership software solutions, has caused widespread disruption, affecting more than half of all car dealerships in the US. The incident, which began on Wednesday, forced CDK to shut down most …

Hackers Published Sensitive Data Stolen From London Hospitals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cyber-attack on London hospitals resulted in the publication of sensitive data stolen from Synnovis, a National Health Service (NHS) pathology provider. The attack, which occurred on June 3, has been attributed to the Russian-speaking hacker group Qilin. The group …