North Korean Hackers Breached Leading Russian Missile & Military Engineering Company

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

North Korean threat actors actively grabbed the attention of security experts, revealing fruitful campaign insights over the year, including:- New reconnaissance tools Multiple new supply chain intrusions Elusive multi-platform targeting New sly social engineering tactics Last year, a group of …

Rewards Platform Flaw, Let attackers Steal User’s Personal Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security vulnerabilities have been reported on points.com between March 2023 and May 2023.  On Aug 3, 2023, a group of cybersecurity researchers made these Points.com API vulnerabilities public, along with the technical details of their intrusion. Through these reported vulnerabilities, …

Researchers Uncover a New Sophisticated Malware Attacking Air-Gapped ICS Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Industrial control systems (ICS) security teams are actively fighting against a worm that is breaching and compromising the defense mechanisms of the air-gapped systems. A China-linked nation-state actor was suspected in a series of attacks on Eastern European industrial …

Spyware Provider “LetMeSpy” Shuts Down After Hacker Deletes Server Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On June 21, 2023, hackers broke into LetMeSpy’s servers and stole private data. Following the hack, the attackers were able to obtain unauthorized access to email addresses, telephone numbers, and message content stored within the affected accounts. Our previous article …

New Rilide Malware Attacking Enterprise Employees to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As per reports, a new version of the Rilide stealer is known to be stealing credentials from enterprise employees and crypto wallets. This new version is capable of bypassing the new Chromium browser manifest v3. Rilide is a malicious browser …

Threat and Vulnerability Roundup for the week of July 30th to August 5th

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Threat and Vulnerability Roundup for this week is out! With great pride, Cyber Writes presents a weekly overview of the most recent cybersecurity news. We highlight notable vulnerabilities and exploits, new attack tactics, and critical software patches. Both individuals …

Teach a Man to Phish and He’s Set for Life

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

August 4, 2023 0 Comments One frustrating aspect of email phishing is the frequency with which scammers fall back on tried-and-true methods that really have no business working these days. Like attaching a phishing email to a traditional, clean email …

New AD CTS Attack Vector Enables Lateral Movement Between Microsoft tenant

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to reports, the threat group known as “Nobelium” who were responsible for the SolarWinds attacks is now discovered to be targeting Microsoft tenants through the new Cross-Tenant Synchronisation (CTS) feature introduced by Microsoft. CTS is a feature that enables …

Hackers Using Fake Certificates to Infiltrate Corporate Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Using fake certificates, attackers gain unauthorized access to corporate network resources.  Attackers use such certificates to trick the Key Distribution Center (KDC) to get into the target company’s network. Shadow Credentials are an example of such an attack. This technique …

BlueCharlie Hacker Group Builds a 94-Domain Password Stealing Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are evolving their techniques and tools at a rapid pace that is completely changing the current threat scenario. BlueCharlie is a Russia-linked threat group that has been active since 2017 and associated with several other names like:- Callisto …