13,800+ Internet-Exposed Check Point Gateways Vulnerable To 0-Day Attacks: Poc Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical zero-day vulnerability, CVE-2024-24919, has been discovered in Check Point Security Gateways, enabling the IPSec VPN or Mobile Access blades. This vulnerability is actively exploited in the wild, posing a significant threat to organizations worldwide. Vulnerability Details – CVE-2024-24919 …

ELLIO and ntop partnership to boost high-speed network traffic monitoring with real-time data on opportunistic scans, botnets, and mass attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ELLIO, a provider of real-time, highly accurate intelligence for filtering of unwanted network traffic and cybernoise, and ntop, a provider of open-source and commercial high-speed traffic monitoring applications, have announced a partnership to enhance visibility into malicious traffic originating from …

Windows-based AllaKore Malware Abuses Azure Cloud for C2 Infrastructure

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new variant of AllaKore RAT, named AllaSenha, has been discovered targeting Brazilian bank accounts, which leverages a multi-stage infection chain involving phishing emails, malicious LNK disguised as PDF files, Python scripts, and a Delphi-developed loader.  The malware steals banking …

Hackers Impersonating As Fake Toll Payment Processor Across The U.S.

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A convincing phishing scam recently targeted a cybersecurity researcher’s (Jonathan Munshaw) wife with a fake text claiming she owed unpaid New Jersey E-ZPass highway tolls. The message prompted visiting a fraudulent site mimicking the legitimate E-ZPass website to pay fictitious …

Hackers Compromised SOHO 600,000 Routers Within 72 Hours For Botnet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often target the routers to take charge of network traffic, get hold of sensitive data, and attack attached devices. When a router is hacked, it can create a botnet for major cyber-attacks or send users to harmful websites while …

Telegram Know For Secure Messaging, Now Became A Tool For Cybercriminals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Telegram, synonymous with secure messaging, has paradoxically become a tool for cybercriminals who abuse the platform’s strengths to target unsuspecting websites. Once known for its commitment to user privacy and security, this popular messaging platform is now used in ways …

Microsoft Observed Huge-Surge In Attacks Targeting Internet-Exposed OT Devices In WWS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has reported a significant increase in cyberattacks targeting internet-exposed, poorly secured operational technology (OT) devices. These attacks have particularly focused on the United States’ water and wastewater systems (WWS). Various nation-backed actors, including the IRGC-affiliated “CyberAv3ngers” and pro-Russian hacktivists, …

RedTail Cryptominer Exploiting Palo Alto Networks Firewall Zero-day Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The RedTail cryptocurrency mining malware has been observed exploiting a critical zero-day vulnerability in Palo Alto Networks’ firewall software, PAN-OS. This vulnerability, tracked as CVE-2024-3400, has a CVSS score of 10.0, indicating its severity. The flaw allows unauthenticated attackers to …

BBC Data Breach: Hackers Access Cloud-Based Storage Service

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The BBC has confirmed a data security incident involving the personal information of some members of the BBC Pension Scheme. The breach, which was detected by the BBC’s information security team, involved unauthorized access to a cloud-based storage service where …

‘Operation Endgame’ Hits Malware Delivery Platforms

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Law enforcement agencies in the United States and Europe today announced Operation Endgame, a coordinated action against some of the most popular cybercrime platforms for delivering ransomware and data-stealing malware. Dubbed “the largest ever operation against botnets,” the international effort …