New iPhone Hack Convinces Users With Fake Lockdown Mode

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A post-exploitation tampering technique has been discovered that allows the malware to visually trick the user into thinking their iPhone is in Lockdown Mode. While iOS devices with Lockdown Mode have a smaller attack surface, it’s crucial to keep in …

Researchers Exploited GOG Galaxy XPC for Privilege Escalation in macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical privilege escalation vulnerability has been discovered to affect macOS devices, particularly the GOG Galaxy software-installed machines. The CVE for this vulnerability has been assigned as CVE-2023-40713, and the severity rating has been given as 7.8 (High). GOG Galaxy …

Two Russian National Charged for Hacking Government Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two Russian citizens have been charged for being involved in a campaign on behalf of the Russian government to breach computer networks in the US, the UK, other North Atlantic Treaty Organization member countries, and Ukraine. The conspiracy allegedly targeted current …

5 Best Ways a Malware Sandbox Can Help Your Company – Threat Analysis Guide 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware sandboxes are indispensable for threat analysis, but many of their capabilities are often overlooked. On a closer look, they offer a surprising array of benefits that extend beyond typical scenarios. Here are some of them. 1. Empowering Junior Staff …

Lazarus Group Attacking Crypto Users Via Telegram to Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a calculated escalation of cyber warfare, the Lazarus Group, a notorious North Korea hacking unit, has pivoted its focus to cryptocurrency projects, employing intricate phishing scams on the widely-used platform Telegram.  SlowMist, a cybersecurity authority, meticulously monitors and dissects …

Malicious Android Loan Apps Steal Users Personal & Financial Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There were reports of several Android loan apps that pretended to be providing loan services and easy access to funds, which were found to be malicious apps that collected personal and financial information from the victims. These applications are identified …

Google Chrome 120 Released with Patch for 10 Critical Security Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has recently released Chrome 120 for Windows, Mac, and Linux. This version of Chrome comes with 10 security patches to ensure a safer browsing experience for its users. The most recent versions of Chrome available to users are 120.0.6099.62 …

SnappyTCP – Reverse Shell for Linux/Unix Systems With C2 Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers exploit reverse TCP shells on Linux or Unix systems to gain unauthorized remote access. This enables them to do the following illicit activities by exploiting vulnerabilities while masking their identity and location:- Execute commands Exfiltrate data Compromise the system’s …

Reflectiz Introduces AI-powered Insights on Top of Its Smart Alerting System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Reflectiz, a cybersecurity company specializing in continuous web threat management, proudly introduces a new AI-powered capability enhancing its Smart Alerting system. The new AI-powered insights enhances the Reflectiz Smart Alerting system by integrating AI LLM technology on top of its …

Nissan Is Investigating Cyberattack; Potential Personal Data Breach

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nissan, a global carmaker with headquarters in Japan, is investigating a cyber incident that may have compromised company systems and if personal data was accessed.  The company possibly experienced a cyber attack that had a significant impact on its operations in both Australia …