Researchers Detailed ValleyRAT Password Stealing Techniques

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use RATs to get unauthorized access and full control of the victim’s computer and all its functionalities and enable other malicious abilities. They allow the threat actors to control the system and obtain useful information for their goals. Zscaler …

Canada & U.K. To Launch Investigation over 23andMe Hack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Privacy regulators in Canada and the United Kingdom have initiated a collaborative inquiry into the genetic testing firm 23andMe in response to a major data breach, marking a significant step toward addressing the issue. The sensitive personal information of almost …

Popular Biometric Terminal Vulnerable To QR Code SQL Injection

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A popular hybrid biometric terminal manufactured by ZKTeco has been found to have several critical vulnerabilities, including a significant flaw that allows for SQL injection via QR codes. This discovery raises serious concerns about the security of biometric access control …

APT Hackers Abusing Google & OneDrive To Host Malicious Scripts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are leveraging cloud storage services like Google Drive, OneDrive, and Dropbox to distribute malware and steal user information by uploading malicious files such as scripts, RAT (Remote Access Trojan) malware, and decoy documents, which can download additional malware …

UNC5537 Hackers Hijacking Snowflake Customer Instances

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors penetrate the networks with the aim of obtaining unauthorized access to personal and corporate details, bank accounts, and organizational resources for purposes of identity theft, fraud, and data theft. They can masquerade as legit users to gain access …

Hackers Using OTP bots To Bypass Two-Factor Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two-factor authentication (2FA) is a security method that requires two verification steps for user access and is commonly implemented with one-time passwords (OTPs) delivered via various channels.  To bypass 2FA, attackers leverage social engineering to trick users into revealing OTPs …

Japan Video-Sharing Website Suspensed Services Following Cyber Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular Japanese video-sharing website Niconico has suspended its services due to a large-scale cyberattack. Niconico is one of Japan’s most extensive video-sharing services. Users share various videos, from music and sports to multiple hobbies. The platform also offers live …

Fortinet to Acquire AI-Powered Cloud Security Platform Lacework

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet, a global leader in broad, integrated, and automated cybersecurity solutions, has announced its acquisition of Lacework, an AI-powered cloud-native application protection platform (CNAPP). This strategic move aims to enhance Fortinet’s already comprehensive cybersecurity platform by integrating Lacework’s advanced cloud …

Apple Unveils “Apple Intelligence” AI Features for iPhone, iPad, and Mac

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Apple has introduced a groundbreaking personal intelligence system called “Apple Intelligence” at its Worldwide Developers Conference (WWDC) 2024. This innovative AI technology is set to transform user experiences across iPhone, iPad, and Mac devices by harnessing the power of generative …

EmailGPT Vulnerability Let Attackers Access Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new prompt injection vulnerability has been discovered in the EmailGPT service. This API service and Google Chrome plugin help users write emails in Gmail using OpenAI’s GPT model. The prompt injection vulnerability arises when an attacker manipulates a large …