DJvu Ransomware Mimic as Cracked Software to Compromise Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent campaign has been observed to be delivering DJvu ransomware through a loader that pretends to be freeware or cracked software. This ransomware has been previously reported to provide a .xaro extension to infected files, and threat actors demand …

Okta Hack: Threat Actors Downloaded all Customer Support System Users’ Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a pivotal update to the Okta security incident divulged in October 2023, Okta Security has unearthed additional intricacies surrounding the unauthorized intrusion into its customer support system.  This revelation holds profound implications for the security of Okta’s clientele, particularly …

Defend Ransomware Attacks With Top Effective Proactive Measures in 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

We’re currently living in an age where digital threats loom large. Among these, ransomware has emerged as a formidable adversary, disrupting businesses and individuals alike. This malicious software, designed to encrypt data and demand payment for its release, poses significant …

Okta: Breach Affected All Customer Support Users

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

November 29, 2023 0 Comments When KrebsOnSecurity broke the news on Oct. 20, 2023 that identity and authentication giant Okta had suffered a breach in its customer support department, Okta said the intrusion allowed hackers to steal sensitive data from …

GoTitan Botnet Actively Exploiting Apache ActiveMQ Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Attackers are exploiting the recently discovered critical security vulnerability tracked as (CVE-2023-46604) affecting Apache ActiveMQ to disseminate the Golang-based botnet GoTitan and the.NET application “PrCtrl Rat,” which has the ability to be remotely controlled. Any Operating System using Apache Active …

Cybercriminals are Showing Hesitation to Utilize AI When Executing Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Media reports highlight the sale of LLMs like WormGPT and FraudGPT on underground forums. Fears mount over their potential for creating mutating malware, fueling a craze in the cybercriminal underground. Concerns arise over the dual-use nature of LLMs, with tools …

Vigil: Open-source Security Scanner for LLM Models Like ChatGPT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An open-source security scanner, developed by Git Hub user Adam Swanda, was released to explore the security of the LLM model. This model is utilized by chat assistants such as ChatGPT. This scanner, which is called ‘Vigil’, is specifically designed …

Slovenia’s Biggest Power Provider has Suffered a Cyberattack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

One of Slovenia’s major power providers, HSE, has recently fallen victim to a significant cyberattack. The security and control system, along with the fire alarms, were breached by the criminal who caused significant damage. It has been reported that the …

Genesis Market Technique: Hackers Exploited Node.js and EV Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the labyrinthine landscape of cyber threats, the Trend Micro Managed XDR team has uncovered a malevolent symphony echoing the tactics employed by the infamous Genesis Market.  Trend Micro Managed XDR, or Extended Detection and Response, is a comprehensive cybersecurity …

Design Flaw in Domain-Wide Delegation Could Leave Google Workspace Vulnerable to Takeover – Hunters

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BOSTON, MASS. and TEL AVIV, ISRAEL, November 28, 2023 – A severe design flaw in Google Workspace’s domain-wide delegation feature discovered by threat hunting experts from Hunters’ Team Axon, can allow attackers to misuse existing delegations, enabling privilege escalation and …