PoC Exploit Released for HTTP File Server Remote Code Execution Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical remote code execution vulnerability in the HTTP File Server (HFS) software, identified as CVE-2024-39943. This vulnerability affects HFS version 3 before 0.52.10 on Linux, UNIX, and macOS systems, allowing remote …

Hackers Weaponizing ScreenConnect Remote Access Client to Deliver AsyncRAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

eSentire’s Threat Response Unit (TRU) has uncovered a sophisticated campaign where threat actors exploit the ScreenConnect remote access client to deliver the AsyncRAT trojan. This discovery highlights the evolving tactics of cybercriminals and underscores the importance of robust cybersecurity measures. …

Teamviewer Discloses Investigation Update Following Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TeamViewer, the global leader in remote connectivity solutions, has provided an update on the cyber attack detected on June 26, 2024. The company has concluded the main incident response and investigation phase, confirming that the breach was contained in its …

Team ARXU Hackers Aggressively Attacking Schools And Bank Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers frequently target schools and bank servers to obtain important personal information, including financial data, that can be used for identity theft and financial fraud. These data are also being sold on the dark web. This makes them easier targets …

Hackers Using ProxyLogon & ProxyShell To Attack Microsoft Exchange Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers attack Microsoft Exchange servers because they often contain sensitive communication data that can be exploited for several illicit purposes. Besides this, the widespread use of Microsoft Exchange in enterprises makes it an attractive and high-impact target for cybercriminals. Three …

Logsign Unified SecOps RCE Vulnerabilities Let Attackers Gain Control of the System

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Logsign, a web server built on Python for Unified Security Operations (SecOps), has successfully addressed critical vulnerabilities that could potentially enable threat actors to gain full control over the system. The vulnerabilities, identified as CVE-2024-5716 and CVE-2024-5717, can be combined …

Beware of Open-Source Neptune Stealer Delivered Via GitHub

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity analysts have identified a new malware strain known as Neptune Stealer. This malicious software, designed to steal sensitive information from infected systems, is being distributed openly via GitHub, a popular platform for hosting and sharing code. The discovery, highlighted …

New SnailLoad Side-Channel Attack Let Hackers Monitor Your Web Activity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often monitor web activities to gather several types of confidential data. By tracking your online activities, hackers can tailor phishing schemes and social engineering attacks, which will increase their chances of success. The following cybersecurity researchers from Graz University …

Kematian Stealer Abuses Powershell Tool for Covert Data Exfiltration

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Kematian Stealer has emerged as a sophisticated PowerShell-based malware that covertly exfiltrates sensitive data from compromised systems. This article delves into the intricate workings of this malicious tool, highlighting its methods and the potential risks it poses. Binary Analysis …

New Volcano Demon Ransomware Group Threatening Victims Over Phone Call

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A novel malware known as Volcano Demon has been observed targeting Windows workstations and servers, obtaining administrative credentials from the network. The threat actor doesn’t have a leak site and instead uses phone calls to executives in IT and leadership …