Hackers Abuse Red Team Tool MacroPack To Deliver Multiple Malicious Payloads

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MacroPack is a convenient tool for creating obfuscated VBA malware, but it is still a risk even with the macro execution restricted in downloaded Office documents from Microsoft. This tool can create several output types like office files, scripts, and …

Travelers Beware of Sophisticated Booking.com Phishing Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have launched a sophisticated phishing attack targeting Booking.com, one of the world’s leading online travel platforms. This attack, characterized by its complexity and high success rate, has been evolving over the past year, posing significant risks to hotel managers …

Actively Exploited Android Zero-Day Elevation of Privilege vulnerability Patched

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has released a patch for a critical zero-day vulnerability, CVE-2024-32896, which was actively exploited in the wild. This vulnerability, classified as a high-severity elevation of privilege (EoP) flaw, was discovered in the Android operating system, specifically impacting Pixel devices. …

PoC Exploit Released for 0-Day Windows Kernel Privilege Escalation Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been publicly released for a critical zero-day elevation of privilege vulnerability in the Windows kernel. The flaw, tracked as CVE-2024-38106, was one of several zero-days patched by Microsoft in their August 2024 Patch Tuesday update. …

Blackwired Launches ThirdWatch℠, A Paradigm Shift in Cybersecurity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Blackwired, the leading cyber observatory for disruptive cybersecurity technologies, has announced the launch of ThirdWatch℠, a groundbreaking solution to identify direct threats facing an organization and its Third Parties. ThirdWatch℠ is a subject-directed monitoring platform that provides a comprehensive 360-degree …

YubiKeys cryptographic Flaw Let Attackers Clone Devices by Extracting Private Key

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have uncovered a significant vulnerability in YubiKeys, specifically targeting the YubiKey 5 Series. This vulnerability, identified as a side-channel attack, allows attackers to clone these devices by extracting the secret keys stored within them. The attack exploits a …

D-Link Declines to Patch RCE Vulnerabilities That Affected End-of-Life Routers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A significant security vulnerability has been reported in the DAP-2310, specifically affecting Hardware Revision A with Firmware version 1.16RC028. Hahna Latonick of Dark Wolf Solutions identified the vulnerability, which has been named “BouncyPufferfish.” It exploits a stack-based buffer overflow in …

Sextortion Scams Now Include Photos of Your Home

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

An old but persistent email scam known as “sextortion” has a new personalized touch: The missives, which claim that malware has captured webcam footage of recipients pleasuring themselves, now include a photo of the target’s home in a bid to make …

North Korean Hackers Actively Exploiting Chromium RCE Zero-Day In The Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Chromium is the foundation for many popular web browsers including Google Chrome and Microsoft Edge, and this is the most lucrative thing that attracts the hackers most. Cybersecurity analysts at Microsoft recently discovered that North Korean hackers have been actively …

Bonjour Network Service Vulnerable to Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability has been identified in the Bonjour service, specifically in the mDNSResponder.exe process, which is used for network discovery across local area networks. This vulnerability affects both macOS and Windows systems, potentially allowing attackers to escalate privileges within …