Russian Nationals Charged for money laundering services Fueling criminal ecosystem

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Department of Justice has announced charges against two Russian nationals for allegedly operating extensive money laundering services that supported a global network of cybercriminals. This coordinated effort involved multiple U.S. government agencies and international partners, highlighting the ongoing …

VLC Player Vulnerability Let Attackers Execute Malicious Code, Update Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in the VLC media player has been identified, allowing attackers to execute malicious code on users’ computers. The vulnerability, detailed in the Security Bulletin VLC 3.0.21, affects versions 3.0.20 and earlier of the popular media player. The …

Unauthenticated RCE Flaw Impacts all Linux Systems – Details Revealed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe remote code execution (RCE) vulnerability has been uncovered by Simone Margaritelli in the Common Unix Printing System (CUPS), affecting all GNU/Linux systems. Simone Margaritelli earlier notified about the unauthenticated RCE flaw that impacting all GNU/Linux systems, now he …

CISA Releases Active Directory Security Guide to Mitigate Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a move to enhance cybersecurity, the Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with several international cybersecurity agencies, has released a comprehensive guide on detecting and mitigating Active Directory compromises. This guidance, co-authored by the Australian Signals Directorate …

Hackers Weaponizing PDF Files To Deliver New SnipBot Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are increasingly weaponizing PDF files to deliver malware and carry out cyberattacks.  They exploit the all-presence and trustworthiness of PDFs to trick victims into opening malicious files that can contain malicious links, embedded code, or vulnerabilities that allow remote …

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The United States today unveiled sanctions and indictments against the alleged proprietor of Joker’s Stash, a now-defunct cybercrime store that peddled tens of millions of payment cards stolen in some of the largest data breaches of the past decade. The …

Octo2 Android Malware Attacking Users To Steal Banking Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The mobile threat landscape has become increasingly dangerous, primarily following a significant rise in cyberattacks, which surged by 350% in 2023 due to the shift towards remote work.  Mobile devices are now prime targets for various threats, including mobile phishing, …

Azure Automation Account Packages & Runtime Environments Backdoored

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Azure Automation is a service that automates processes across various cloud platforms, making it easier to manage complicated hybrid setups.  It comes with a runtime environment that lets users set up the environment for running scripts and updates them to …

CISA Releases Industrial Control Systems Advisories to Defend Against Cyber Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cybersecurity and Infrastructure Security Agency (CISA) released eight new Industrial Control Systems (ICS) advisories. These advisories address pressing security issues, vulnerabilities, and exploits affecting ICS. ICSA-24-268-01 OPW Fuel Management Systems SiteSentinel A critical vulnerability in OPW Fuel Management Systems’ …

Beware Of Fake Verify You Are A Human Request That Delivers Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

CAPTCHAs, or Completely Automated Public Turing tests, are widely used online to verify that users are human rather than bots.  They typically present challenges like “distorted text,” “image recognition tasks,” or “audio prompts” that require human cognitive skills to solve. …