Hackers Infect Linux Machines with Rootkits via Apache ActiveMQ Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apache ActiveMQ is a Java-based open-source protocol that allows distributed applications to exchange messages. It uses the JMS API to provide a dependable messaging platform for sharing data across systems written in diverse programming languages. It includes the following features:- …

LitterDrifter Powershell Worm Rapidly Spreads on USB Drives by Itself

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Gamaredon (aka Primitive Bear, ACTINIUM, and Shuckworm) stands out in Russian espionage by exclusively targeting Ukrainian entities. Unusually evident, it challenges researchers seeking evidence of Russian activities. The Russian FSB leads this group, as Ukraine’s SSU linked them, and it …

Splunk RCE Vulnerability Let Attackers Upload Malicious File

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity Remote Code Execution (RCE) flaw in Splunk Enterprise has been discovered, enabling an attacker to upload malicious files. Versions of Splunk Enterprise less than 9.0.7 and 9.1.2 do not properly sanitize user-supplied extended stylesheet language transformations (XSLT). This implies …

Hackers Exploit Google Workspace to Exfiltrate Data and Deploy Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recent research into Google Workspace and Google Cloud Platform by Bitdefender Labs reveals novel attack methods, potentially leading to network-wide breaches and raising concerns about ransomware attacks or data exfiltration. The team has performed hundreds of investigations and helped dismantle …

Hackers Exploiting Zimbra 0-day to Attack Government Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Zimbra Collaboration is an open-source solution software suite with an email server and web client for collaboration.  Over 5,000 companies and public sector users, along with hundreds of millions of end-users in more than 140 countries, utilize this solution. Google …

Weekly Cyber Security News Roundup for the Week of November 13th to 18th

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Welcome to the Cyber Security News Recap, a weekly publication by Cyber Writes. Our aim is to bring you up-to-date information on the latest developments in the field of cybersecurity. Each week, we delve into the most recent and relevant …

FBI Shares Tactics & Techniques Used by Scattered Spider Hacker Group

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In recent months, the Scattered Spider hacking group (aka Starfraud, UNC3944, Scatter Swine, and Muddled Libra) has made news for allegedly attacking the following casino giants:- MGM Resorts Caesars Entertainment The FBI and CISA recently issued a joint Cybersecurity Advisory …

Malware Discovered in Kids’ Tablet steals sensitive data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In the ever-expanding market of Android devices, the allure of budget-friendly options can sometimes conceal unforeseen risks.  Purchasing Android devices from online platforms like Amazon offers varying price points but also exposes consumers to potential security hazards. For her birthday, …

FortiSIEM Injection Flaw Let Attackers Execute Malicious Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OS command injection is a security vulnerability where an attacker exploits improper user input validation to inject malicious commands into an operating system. This can lead to:- Unauthorized access Data breaches System compromise FortiSIEM is a security information and event …

Alleged Extortioner of Psychotherapy Patients Faces Trial

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

November 16, 2023 0 Comments Prosecutors in Finland this week commenced their criminal trial against Julius Kivimäki, a 26-year-old Finnish man charged with extorting a once popular and now-bankrupt online psychotherapy practice and thousands of its patients. In a 2,200-page …