Stargazers Ghost: Network of GitHub Accounts Used to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers at Check Point have uncovered a sophisticated network of GitHub accounts, dubbed the Stargazers Ghost Network, that has been distributing malware and phishing links since at least June 2023. This network, operated by a threat actor known as …

Google Chrome 127 Released With Fix for Vulnerabilities that Lead to Browser Crash

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has announced the release of Chrome 127, which is now available on the Stable channel for Windows, Mac, and Linux. The new version, 127.0.6533.72/73 for Windows and Mac and 127.0.6533.72 for Linux, will be rolled out over the coming …

New Windows False File Immutability Vulnerability Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new unnamed vulnerability class has been detected in the Windows 11 Kernel that could allow a threat actor to execute arbitrary code with Kernel privileges.  This vulnerability, named “File Immutability,” exists due to incorrect assumptions in the design of …

CrowdStrike Details Incident Affected Millions of Windows Systems Worldwide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent preliminary Post-Incident Review (PIR), cybersecurity firm CrowdStrike provided a detailed account of the events that led to a massive global IT outage on July 19, 2024. The incident affected millions of Windows systems worldwide and was traced …

LiteSpeed Cache Plugin Flaw Let Attackers Inject Malicious Code, 5M+ Sites Impacted

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular LiteSpeed Cache plugin for WordPress has been found vulnerable to a Cross-Site Request Forgery (CSRF) attack, which could potentially impact over 5 million websites. The flaw, identified as CVE-2024-3246, was publicly disclosed on July 23, 2024, and has …

KnowBe4 Hired Fake North Korean IT Worker, Catches While Installing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security awareness and training provider KnowBe4 recently disclosed that it inadvertently hired a fake North Korean IT worker who attempted to install malware on a company-issued computer. The incident highlights the growing sophistication of cybercriminals and the challenges organizations face …

Pentagon IT Service Provider Hacked: U.S. Government Secrets Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Leidos Holdings Inc., one of the largest IT services providers to the U.S. government, experienced a significant cybersecurity breach. Hackers leaked internal documents, raising concerns about the security of sensitive government data managed by third-party contractors. Leidos, known for its …

Phish-Friendly Domain Registry “.top” Put on Notice

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its …

Top Phishing Campaigns in July 2024: SharePoint Abuse, DeerStealer, and More

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July saw a new influx of phishing and malware campaigns. The analyst team at ANY.RUN sandbox is closely monitoring all developments in the threat landscape and sharing their analysis on X. Here are some of the campaigns they identified this …

IPFire Unveils New Feature to Protect Systems from SYN Flood Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IPFire, a well-known open-source firewall solution, has introduced a new feature to protect systems from SYN Flood attacks, enhancing cybersecurity defenses. This enhancement aims to mitigate the risks associated with one of the most common forms of Denial-of-Service (DoS) attacks, …