Ten Years Later, New Clues in the Target Breach

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On Dec. 18, 2013, KrebsOnSecurity broke the news that U.S. retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards over the previous month. The malware used in the Target breach included …

Engineering-assisted Dynamic Malware Analysis using GPT-4 With 100% Recall Rate

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new prompt engineering-assisted Dynamic Malware Analysis model has been introduced, which can overcome the drawbacks faced in the quality API call sequences deployed for dynamic malware analysis.  This new method has been reported to perform detection that surpasses the …

Zoom Mobile and Desktop App Flaws Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular video conferencing software Zoom has security issues with its desktop and mobile apps that could allow for privilege escalation. An attacker may be able to obtain elevated privileges within the application or the operating system by exploiting this …

New Dark Web Market OLVX Advertising Variety of Hacking Tools 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors exploit underground markets by purchasing or selling stolen data, malware, and hacking tools to facilitate cybercrime.  These underground markets provide the following key facilities among threat actors that fuel the growth of cyber threats:- Anonymity Enabling illegal transactions …

Microsoft Seized Storm-1152 Websites Used to Sell Microsoft Products & Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers sell fake Microsoft products and accounts because it allows them to profit from illicit activities, taking advantage of unsuspecting users. Microsoft’s security team, partnered with Arkose Labs, is cracking down on cyber criminals Storm-1152, the top seller of fake …

Beware of Malicious 7ZIP on the Microsoft App Store that Delivers Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers target 7ZIP due to its widespread use and popularity, making it a lucrative vector for spreading malware.  Exploiting vulnerabilities in 7ZIP allows them to compromise a large number of systems, potentially leading to unauthorized access or data theft. Cybersecurity …

Hackers Abuse OAuth Applications to Launch Automated Financial Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OAuth (Open Authorization) is an industry-standard protocol that allows third-party applications to access a user’s data without exposing login credentials.  This standard protocol facilitates secure authorization and authentication, commonly used to access resources on websites or applications. Cybersecurity researchers at …

Recruiters Beware! Hackers Deliver Malware Posing as Job Applicant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have been targeting recruiters disguised as job applicants to deliver their malware. Though this method is not unique, the technique and attack vectors have been noted to have changed from their previous methods. TA4557 is a highly skilled, …

Lazarus Group’s Operation Blacksmith Attacking Organizations Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Lazarus Group is a notorious North Korean state-sponsored hacking organization known for:- Cyber espionage Financial Theft Destructive attacks They have been implicated in high-profile incidents, including the 2014 Sony Pictures hack and the 2017 WannaCry ransomware outbreak. Cybersecurity researchers …

Microsoft Patch Tuesday, December 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known “zero-day” threats …