New SMS Stealer Infects Millions Of Android Users In 113 Countries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Since February 2022, a highly advanced Android malware campaign has been specifically designed to attack one-time passwords (OTPs), which are used for enterprise security breaches. While tracking more than 107,000 malware samples, zLabs researchers noticed how the attackers changed their …

Google Chrome Now Prevent Users From Cookie Steal Malware on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has introduced several measures to address this threat, including Safe Browsing download protection in Chrome, Device Bound Session Credentials, and account-based threat detection systems that alert users to the misuse of stolen cookies. Cybercriminals using cookie theft infostealer malware …

20,275 VMware ESXi Vulnerable Instances Exposed, Microsoft Warns of Massive Exploitation

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has issued a significant security alert regarding a vulnerability in VMware ESXi hypervisors, which ransomware operators have actively exploited. According to the Shadowserver Foundation, the vulnerability, identified as CVE-2024-37085, exposed 20,275 instances as of July 30, 2024. The CVE-2024-37085 …

Don’t Let Your Domain Name Become a “Sitting Duck”

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, …

Hackers Actively Exploiting GeoServer RCE Flaw, 6635 Servers Vulnerable

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in GeoServer, an open-source Java-based software server, has put thousands of servers at risk. The flaw, CVE-2024-36401, allows unauthenticated users to execute remote code, posing a significant threat to global geospatial data infrastructures. A recent tweet from …

Beware of Malicious Crypto Management App that Drains Your Wallet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cryptocurrency scams are becoming increasingly sophisticated. This article delves into the intricacies of these scams, providing insights into how they operate and offering tips on how to protect your cryptocurrency assets. The scam begins innocuously with a forwarded Telegram message …

DDoS Attack Leads to Microsoft Azure Global Outage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On July 30, 2024, Microsoft experienced a significant global outage affecting its Azure cloud services and Microsoft 365 products. The incident, which lasted nearly 10 hours, was triggered by a Distributed Denial-of-Service (DDoS) attack and impacted users worldwide. The outage …

Multiple SMTP Servers Vulnerable to Spoofing Attacks, Let Hackers Bypass Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent discovery has unveiled vulnerabilities in multiple hosted, outbound SMTP servers, allowing authenticated users and certain trusted networks to send emails with spoofed sender information. These vulnerabilities, CVE-2024-7208 and CVE-2024-7209, exploit weaknesses in the authentication and verification mechanisms provided …

Google Patched Critical Chrome Vulnerability Leads to Browser Crash

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has rolled out a critical security update for its Chrome browser, addressing a severe flaw that could lead to browser crashes. The update, now available on the Stable channel, brings Chrome to version 127.0.6533.88/89 for Windows and Mac and …

Beware! Tycoon 2FA Phish-kit Exploits Amazon SES to Steal User Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign with Tycoon 2FA Phish-kit has been identified, leveraging Amazon Simple Email Service (SES) and a series of high-profile redirects to steal user credentials. The attack chain, meticulously designed to evade detection, involves multiple stages and utilizes …