Vesta Admin Panel Vulnerability Allows Complete Linux Server Takeover

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability in the Vesta Control Panel has been discovered that allows attackers to take over entire Linux servers. This alarming exploit leverages weaknesses in the password reset mechanism, posing a severe risk to users relying on Vesta for server …

Hackers Exploiting Critical SolarWinds Serv-U Vulnerability In The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SolarWinds is a prominent software company specializing in IT management and monitoring solutions for networks and infrastructure. The company gained fame following a significant supply chain attack in 2020, where hackers inserted malicious code into Orion updates, compromising the networks …

Microsoft Defender Adds protection to Detect unsecured Wi-Fi connections Automatically

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced a significant update to its Defender software, aiming to improve online safety by automatically detecting unsecured Wi-Fi connections. This new feature is part of Microsoft’s ongoing efforts to provide comprehensive privacy protection for users across various platforms. …

Google Workspace Implements New Password Policies to Enhance Security

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has announced significant changes to its password policies for Google Workspace, aimed at improving user security and protecting against unauthorized access. The tech giant is phasing out support for Less Secure Apps (LSAs), which require users to share their …

U.K. Citizen Charged for Hacking into Computer Systems of U.S. Companies

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Securities and Exchange Commission (SEC) announced charges against Robert B. Westbrook, a U.K. citizen, for allegedly hacking into the computer systems of five U.S. public companies. The SEC claims that Westbrook used this unauthorized access to obtain material nonpublic …

New Sophisticated Linux Malware Exploiting Apache2 Web Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Exploiting Apache2 web servers often involves targeting vulnerabilities such as remote code execution (RCE) and path traversal flaws. Since Apache is used widely, these exploits pose a significant risk to many organizations that fail to implement timely updates and security …

Western Digital My Cloud Devices Flaw Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Western Digital’s My Cloud devices has been identified. An unchecked buffer in the Dynamic DNS client allows attackers to execute arbitrary code. This vulnerability, designated as CVE-2024-22170, carries a CVSS score of 9.2, indicating a high-severity …

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A California man accused of failing to pay taxes on tens of millions of dollars allegedly earned from cybercrime also paid local police officers hundreds of thousands of dollars to help him extort, intimidate and silence rivals and former business …

Nitrogen Malware As IP Scanner Deploying Sliver & Cobalt Strike On Hijacked Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Silver and Cobalt Strike are sophisticated adversary simulation tools that are widely used in penetration testing and red team operations. These tools enable security researchers to emulate advanced persistent threats by offering features like “covert command and control channels” and …

BBTok Attacking Organizations Using PowerShell, Python, And dnlib

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

BBTok is a banking malware first identified in 2020 and it primarily targets users in Latin America (particularly Mexico and Brazil). It employs sophisticated tactics like phishing emails that lead to the download of malicious files, which can replicate the …