Millions of Docker Hub Repositories Found Pushing Malware for Over 5 Years

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It has been found that almost one-fifth of the repositories on Docker Hub, a popular platform for developers to store and share containerized applications, have been exploited to spread malicious software and phishing scams. This is a concerning discovery for …

Investigating Two TeamCity Authentication Bypass Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Vulnerability exploits are the third most common way that cybercriminals gain access to target organizations, surpassed only by credential stealing and phishing in 2023. Once illicit access is achieved, intruders can launch ransomware attacks, exfiltrate sensitive data for sale in …

Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

April 30, 2024 0 Comments A 26-year-old Finnish man was sentenced to more than six years in prison today after being convicted of hacking into an online psychotherapy clinic, leaking tens of thousands of patient therapy records, and attempting to …

Threat Actors Claiming of 0-Day Vulnerability in Zyxel VPN Device

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have claimed to have discovered a 0-day vulnerability in Zyxel VPN devices. This revelation was made public through a tweet by the cybersecurity monitoring group MonThreat, which has been closely tracking and reporting on various cyber threats. As …

Muddling Meerkat Using DNS As A Powerful Weapon For Sophistication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers exploit DNS vulnerabilities to redirect users to malicious websites, launch distributed denial-of-service (DDoS) attacks by overwhelming DNS servers, and manipulate domain resolutions to intercept traffic for surveillance or data theft purposes. Infoblox researchers recently revealed “Muddling Meerkat,” a highly …

Pathfinder – New Attack Steals Sensitive Data From Modern Processors

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microarchitectural side-channel attacks misuse shared processor state to transmit information between security domains.  Although they can be used in isolation, they are frequently employed as building blocks for more sophisticated attacks such as Spectre, which uses side channels to achieve …

Beware of New Android Trojan That Executes Malicious Commands on Your Phone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers at XLab have uncovered a new Android malware strain called “Wpeeper.” This sophisticated backdoor Trojan has been designed to infiltrate Android systems and execute a wide range of malicious commands, posing a significant threat to unsuspecting users. Wpeeper’s …

Authorities Seized Platform Used For Paid DDoS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On April 17, 2024, a joint effort between the Dresden Public Prosecutor’s Office and the Cybercrime Competence Center of the Saxony State Criminal Police Office, in collaboration with a U.S. investigative agency, won significantly in the ongoing battle against cybercrime.  …

Ex-Infosec Designer Sentenced to Over 21 Years in Prison

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Jareh Sebastian Dalke, 32, of Colorado Springs, was sentenced today to 262 months in prison for attempted espionage in connection with his efforts to transmit classified National Defense Information (NDI) to an agent of the Russian Federation. According to the …

Safari is Not So Private! Safari Flaw Exposing EU iPhone Users to Trackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A significant security flaw has been identified in Apple’s Safari browser that could potentially expose iPhone users in the European Union to unauthorized tracking. This vulnerability stems from a new feature introduced in iOS 17.4, designed to facilitate the installation …