CISA to Flag Vulnerabilities & Misconfigurations Exploited in Ransomware Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Ransomware attacks have grown to be a serious concern for businesses of all sizes, with the potential to seriously harm the operations, finances, and reputation of the targeted enterprises. Many ransomware operators utilize flaws or known common vulnerabilities and exposures (CVE). …

Hackers Abusing Skype and Teams to Deliver the DarkGate Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers utilized the Teams and Skype messaging platforms to spread the DarkGate malware to the targeted businesses. When DarkGate malware is installed, a Visual Basic for Applications (VBA) loader script is delivered to victims. The Windows-based malware known as DARKGATE is …

Telegram, AWS, and Alibaba Cloud Users Targeted in Latest Supply Chain Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new supply-chain attack, which was active throughout September 2023, has been discovered in which threat actors used Typosquatting and Startjacking techniques to lure developers using Alibaba cloud services, AWS, and Telegram into downloading malicious Pypi packages. The threat actors, …

OWASP ZAP 2.14.0 Released – What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OWASP ZAP is a free and open-source web application security scanner. It is designed to be utilized by expert penetration testers as well as individuals who are new to application security.  It has received Flagship status and has been one …

Microsoft Announced AI Bug Bounty Program that Rewards Up to $15,000

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft created a new AI Bug Bounty program, which rewards people who help improve the AI Power Bing experience. The rewards range from $2,000 to $15,000. The initial release of AI-powered Bing’s scope product aims to provide enhanced security against …

Critical Google Chrome User-After-Free Site Isolation Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As part of a security update for Chrome, Google has upgraded the Stable channels to 118.0.5993.70 for Mac and Linux and 118.0.5993.70/.71 for Windows. The Extended Stable channel has been upgraded to 118.0.5993.71 for Windows and 118.0.5993.70 for Mac. This …

New WordPress Malware as Cache Plugin Creates Rogue Admin Account

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A novel kind of malware that acts as a sophisticated backdoor that can carry out several operations while impersonating a legitimate plugin has been identified. The malware has several features, including the ability to modify files, create an admin account, …

Large-scale Akira Ransomware Attacking Unsecured Computers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In order to disrupt human-operated ransomware attacks and prevent attackers from advancing their objectives through lateral movement, it is crucial to swiftly contain any compromised user accounts. Taking this step is essential to limit the attackers’ ability to spread their …

Google Initiates the End of Passwords, Making Passkeys the Default for Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google, a well-known tech giant, has introduced a new feature called “passwordless by default”. This feature aims to simplify the login process for users by eliminating the need for traditional passwords and instead relying on passkeys for authentication purposes. In …

Heap-based Buffer Overflow Flaw in cURL Library Using SOCKS5 Proxy

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Previously, the maintainers of the popular curl command line tool posted a pre-announcement regarding two vulnerabilities that affected both the curl tool and the libcurl library. However, the details of these vulnerabilities were not disclosed and were mentioned to be …