Hackers Using Weaponized Virtual Hard Disk Files to Deliver Remcos RAT

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers have been found leveraging weaponized virtual hard disk (VHD) files to deploy the notorious Remote Control Software (RAT), Remcos. This method marks a significant evolution in cyberattack strategies, aiming to bypass traditional security measures and gain unauthorized access to …

NVIDIA ChatRTX For Windows App Vulnerability Let Attackers Escalate Privilege

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A security update released by ChatRTX on March 26th, 2024, addresses two vulnerabilities (CVE-2024-0082 and CVE-2024-0083) that could allow attackers to execute malicious code and tamper with data on affected systems.  The vulnerabilities stem from improper input validation (CWE-20) and …

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new threat has emerged, targeting unsuspecting iPhone users through the seemingly secure iMefofferssage platform. A sophisticated Phishing-as-a-Service (PhaaS) platform known as ‘Dracula’. This platform has been implicated in high-profile phishing attacks, leveraging the trust and widespread use of iMessage …

2 Chrome Zero-Days Exploited At Pwn2Own 2024 : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google patched seven vulnerabilities in the Chrome browser on Tuesday, including two zero-day exploits that were exploited at the Pwn2Own Vancouver 2024 hacking contest. Researchers at Pwn2Own challenge exploited the zero-days tagged as Type Confusion in WebAssembly (CVE-2024-2887) and Use …

Source Code of Italian anti-piracy Platform Privacy Shield Leaked on GitHub

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The source code and documentation of the Italian anti-piracy platform Privacy Shield have reportedly been leaked on the popular code-sharing platform GitHub. This incident raises serious questions about privacy, security, and the potential for censorship. According to reports, the leak …

Wireshark 4.2.4 Released : What’s New!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Wireshark remains the go-to choice for both professionals and enthusiasts due to its unmatched capabilities in packet capturing and analysis. Its advanced features and user-friendly interface make it an indispensable tool for network troubleshooting and protocol analysis. The latest release, …

Microsoft Edge Flaw Let Hackers Silently Install Malicious Extensions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Guardio Labs has uncovered a significant vulnerability in Microsoft Edge, Microsoft’s flagship web browser, that could allow hackers to install malicious extensions without the user’s knowledge. This flaw, if exploited, could lead to a range of security breaches, including data …

Agent Tesla’s Added New Tools & Tactics to Its Arsenal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The persistent search for money and the threat actors increasingly becoming more sophisticated are driving the alarming rate of malware change. Every day, new types of malware are created and put into circulation at an unusual speed, using modern tricks …

Hackers Using Weaponized PDF Files to Deliver Mispadu Banking Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Mispadu, a banking trojan initially targeting Latin America, has expanded its attacks to Europe, stealing credentials through phishing emails and malicious URLs.  The attackers utilize stolen credentials for further phishing attacks, making it a significant threat. Despite the geographic expansion, …

vBulletin Forums Breached: Dark Web Sale of Millions of Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

vBulletin, a widely used forum software, has been compromised, potentially exposing millions of user accounts. The breach was facilitated by a software vulnerability, specifically affecting versions 4.2.2 and 4.2.3. The Forumrunner add-on was pinpointed as the weak link that allowed …