RCE Vulnerability in 1,000,000 WordPress Sites Lets Attackers Gain Control Over Backend

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical Remote Code Execution (RCE) vulnerability (CVE-2024-6386), affecting over 1,000,000 active installations of the WordPress Multilingual Plugin (WPML). This flaw, stemming from a Server-Side Template Injection (SSTI) vulnerability in the Twig template engine, allowed attackers to execute arbitrary code …

Hackers Exploit Microsoft Management Console to Drop Backdoor Payloads on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Securonix Threat Research team has uncovered a sophisticated tax-related phishing campaign that employs Microsoft Common Console Document (MSC) files and advanced obfuscation techniques to deliver a stealthy backdoor payload. Dubbed the “FLUX#CONSOLE campaign,” this attack demonstrates the continued evolution of …

Hackers Leverage Red Team Tools in RDP Attacks Via TOR & VPN for Data Exfiltration

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a striking display of cyber sophistication, the advanced persistent threat (APT) group Earth Koshchei, also tracked as APT29 or Midnight Blizzard, has been linked to a massive rogue Remote Desktop Protocol (RDP) campaign. Earth Koshchei employs innovative tactics and …

1-Click RCE Attack in Kerio Control UTM Let Attackers Gain Root Access To the Firewall

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers have identified a critical set of HTTP Response Splitting vulnerabilities in Kerio Control, a widely used Unified Threat Management (UTM) solution developed by GFI Software. The impact is severe, potentially enabling attackers to escalate low-severity issues into one-click remote …

Cisco to Acquire Threat Detection Company SnapAttack to Power Splunk

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has announced its acquisition of the threat detection company SnapAttack. This acquisition aims to supercharge Cisco’s ever-expanding security portfolio, particularly by enhancing Splunk—Cisco’s leading Security Information and Event Management (SIEM) platform. The merger underscores Cisco’s commitment to empowering organizations in …

CISA Warns of Adobe & Windows Kernel Driver Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an important warning after adding two critical vulnerabilities to its Known Exploited Vulnerabilities Catalog. These vulnerabilities flagged due to active evidence of exploitation, highlight the ongoing threat landscape for organizations of …

Kali Linux 2024.4 Released With New Hacking Tools – What’s Inside!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The much-anticipated final release of Kali Linux for 2024.4 is here, packed with many updates, new hacking tools, and powerful features, from a new default Python version to the discontinuation of i386 kernel support. Kali Linux 2024.4 is designed to …

Windows Kernel Vulnerability Actively Exploits in Attacks to Gain System Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, one of which belongs to a Windows kernel vulnerability actively used in attacks. This update follows verified evidence of active exploitation of …

Arctic Wolf Acquires BlackBerry’s Cylance Assents For $160 Million in Cash

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move that will reshape the cybersecurity landscape, Arctic Wolf and BlackBerry Limited (NYSE: BB; TSX:BB) announced today that they have entered into a definitive agreement for Arctic Wolf to acquire BlackBerry’s Cylance endpoint security assets. The deal, …

CoinLurker, Next-Gen Tool Used by Threat Actors in Modern Cyberattacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CoinLurker is a sophisticated data-stealing malware that has revolutionized fake update campaigns. Written in the Go programming language, CoinLurker incorporates advanced obfuscation and anti-analysis techniques, enabling it to evade detection and execute stealthy cyberattacks. According to Morphisec’s report, his next-generation …