50+ Vulnerabilities Uncovered in RPKI security Framework for Internet Routing

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

RPKI is a security framework designed to enhance the integrity of Internet routing by associating specific IP address blocks and ASNs with their legitimate holders.  It employs cryptographic certificates that are known as ROAs to validate BGP route announcements which …

Crypto Hacker Pleads Guilty for Stealing Over $37 Million in Cryptocurrency

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Evan Frederick Light, a 21-year-old from Lebanon, Indiana, has pleaded guilty to conspiracy charges to Commit Wire Fraud and to Launder Monetary Instruments. The announcement was made by United States Attorney Alison J. Ramsdell following Light’s appearance before U.S. Magistrate …

Chinese Threat Group Hacked Major US Temlecom Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

According to U.S. officials, a Chinese hacker group known as “Salt Typhoon” has infiltrated the networks of at least three major U.S. telecommunications providers in a significant cybersecurity breach. This audacious espionage operation is believed to be aimed at uncovering …

LEGO Website Hacked to Promote a Crypto Scam

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cryptocurrency scammers temporarily compromised the LEGO website to deceive fans into buying a fake “LEGO Coin” cryptocurrency. The breach occurred on October 4, 2024, when an unauthorized banner appeared on the LEGO.com homepage, claiming to offer “secret rewards” to those …

North Korean Hackers Attacking U.S. Organizations With Unique Hacking Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

⁤Cyber extortion is a cybercrime under which the threat actors illicitly access “sensitive data” in systems and demand a “ransom” to stop the attack to restore access. ⁤ There are two primary types of cyber extortion: “Ransomware,” which encrypts data …

Hackers Exploit CosmicSting Flaw to Hack 1000+ Adobe Commerce & Magento Stores

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe Commerce (formerly known as Magento) is a robust e-commerce platform owned by Adobe that provides flexible and scalable solutions for both B2B and B2C businesses. It offers features like “advanced customization,” “integrated analytics,” and “cloud-based hosting” via “Adobe Commerce …

Beware Of Fraudulent Trading Apps From Apple & Google Play Steals Login

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

⁤Fraudulent trading apps have emerged as a significant threat to users in cyberspace. As these applications target and lure victims via lucrative ads on different “social media” and “messaging platforms.” ⁤ ⁤While all these scams promise high returns to users …

Malicious PyPI Packages Mimics a Legitimate Tools Attacking Crypto Wallets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors target the “PyPI” primarily due to its vast user base and the ease of distributing malicious packages within an “open-source ecosystem.” The decentralized nature of “PyPI” complicates monitoring efforts which makes it an attractive platform for threat actors …

New Snapekit Rootkit Malware Targeting Arch Linux Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A rootkit is a type of malicious software that is primarily designed to provide unauthorized access and control over a computer system while hiding its presence. They can be difficult to detect and remove as they operate at a low …

CISA Warns Active Exploitation of Zimbra & Ivanti Endpoint Manager Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of critical vulnerabilities in Synacor’s Zimbra Collaboration and Ivanti’s Endpoint Manager (EPM). Organizations using these products are urged to mitigate potential risks immediately.  CVE-2024-45519: …