New Cyber Attack Targeting Hospital IT Helpdesks with Voice Calls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hospitals across the nation are on high alert as sophisticated cybercriminals use advanced social engineering tactics to target IT help desks. The Health Sector Cybersecurity Coordination Center (HC3) has issued a Sector Alert detailing the latest threat to the healthcare …

Massive boAt Data Breach: 7.5 Million Customers Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Personal data belonging to over 7.5 million customers of boAt, a leading Indian consumer electronics brand, has been compromised and is now circulating on the dark web. This breach has exposed many personally identifiable information (PII), posing significant risks to …

Cisco Nexus Dashboard Vulnerability Let Attackers Read Arbitrary Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Nexus Dashboard Fabric Controller is a network management platform for all NX-OS-enabled devices. It enables data center operation teams to perform deep-dive troubleshooting and maintenance operations.  A new vulnerability has been discovered in the Cisco Nexus Dashboard Fabric Controller, …

Meet The New Qakbot DLL That Abuses Windows Process For persistence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Law enforcement dismantled the Qakbot botnet’s servers in 2023’s Operation Duck Hunt, but researchers identified its reemergence with a modified DLL, which utilizes the srtasks.exe process for persistence, ensuring its survival on restarted machines.  Qakbot continues to spread via phishing …

Splunk vs Cribl Lawsuit of Terms Violating Enterprise License

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Splunk-Cribl lawsuit is poised to go to trial. Both companies are suing over alleged violations of enterprise license terms. The case, brewing since October 2022, has now escalated to the point where the intricacies of software licensing and intellectual …

JsOutProx Malware Abusing GitLab To Attack Financial Institutions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab is a prominent web-based Git repository manager that is exploited by hackers to gain unauthorized access to confidential source code, steal intellectual property or insert malicious code into projects that are hosted on GitLab.  Gitlab’s software vulnerabilities or misconfigurations …

Hackers Hijacked Notepad++ Plugin To Inject Malicious Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have manipulated a popular Notepad++ plugin, injecting malicious code that compromises users’ systems upon execution. The AhnLab Security Intelligence Center (ASEC) researchers have revealed that the “mimeTools.dll” plugin, which is widely used, was modified to carry out the attack. …

Hackers Use Weaponized PDF Files to Deliver Byakugan Malware on Windows

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Due to their high level of trust and popularity, hackers frequently use weaponized PDF files as attack vectors. Even PDFs can contain harmful codes or exploits that abuse the flaws in PDF readers. Once this malicious PDF is opened by …

Multiple Chinese Hacking Groups Exploiting Ivanti Connect Secure VPN Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity firm Mandiant has uncovered a series of sophisticated cyberattacks targeting Ivanti Connect Secure VPN appliances. These attacks, attributed to multiple Chinese nexus espionage groups, exploit critical vulnerabilities to facilitate lateral movement and compromise Active Directory systems. This article delves …

Magento Vulnerability Let Attackers Inject Backdoor On E-commerce Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated vulnerability within the Magento ecommerce platform has been unveiled, posing a significant threat to online merchants and shoppers alike.  The vulnerability, identified as CVE-2024-20720, allows attackers to inject a persistent backdoor into Magento servers, compromising the security of …