Chinese Threat Actors Hacking F5 Load Balancers for Last Two Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often focus on F5 Load Balancers for several reasons, as these are many enterprise networks’ vital parts that balance loads and manage traffic. If these load balancers are put at risk, they can expose confidential information, disable functions, or …

Beware Of Malicious Search Results Leading To SolarMarker Malware Installation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The SOC analysts identified a drive-by download attack leveraging SolarMarker malware, where the attack targeted users searching for team-building activities on Bing.  Attackers tricked the victim into downloading a seemingly harmless document by redirecting the user to a malicious website, …

NHS Ransomware Attack Leads to Cancellations of 800+ Operations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A ransomware cyber attack targeted Synnovis, a pathology laboratory that processes blood tests for several NHS organizations, primarily in southeast London. The attack has significantly reduced the number of tests that can be processed and reported to clinical teams, causing …

Total Fitness Exposes 500k Images of Members & Staff

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researcher Jeremiah Fowler discovered a non-password-protected database containing 474,651 images belonging to Total Fitness, a health club chain with 15 locations across North England and Wales. The database, which was 47.7 GB in size, included personal screenshots, profile pictures …

Arid Viper Weaponizing Android Apps To Exfiltrate Login Details

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Arid Viper APT Group has targeted Android users in the Middle East with five campaigns since 2022. These campaigns used trojanized apps impersonating legitimate ones, such as messaging apps and a civil registry app, which were downloaded from fake websites …

Zadig & Voltaire Breach: 587K Unique Email Address Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The renowned French fashion brand Zadig & Voltaire has suffered a data breach, exposing 587,000 unique email addresses. The popular data breach notification service Have I Been Pwned confirmed the breach via a tweet on its official account. The incident …

Windows Wi-Fi Code Execution Flaw Let Attacker Hijack Your Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft patched several vulnerabilities as part of June 2024’s Patch Tuesday, one of which was associated with remote code execution in Wi-Fi Driver. This vulnerability was assigned with CVE-2024-30078, and the severity was 8.8 (High).  However, based on Microsoft’s description …

BadSpace Malware Attacking Users By Leveraging High-Ranking Infected Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers abuse high-ranking infected websites to leverage their established credibility and large user base to spread malware, launch phishing attacks, or redirect traffic to malicious sites. While exploiting such trusted infected platforms they can now reach out to larger audiences, …

Critical ASUS Router Flaw Attacker Executes Arbitrary Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been discovered in several models of ASUS routers. It allows unauthenticated remote attackers to execute arbitrary system commands on the affected devices. The flaw, identified as CVE-2024-3912, has been assigned a CVSS score of 9.8, indicating …

Alleged Boss of ‘Scattered Spider’ Hacking Group Arrested

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 22-year-old man from the United Kingdom arrested this week in Spain is allegedly the ringleader of Scattered Spider, a cybercrime group suspected of hacking into Twilio, LastPass, DoorDash, Mailchimp, and nearly 130 other organizations over the past two years. …