Earth Kapre Hackers Using Weaponized ISO & IMG Files to Attack Organizations

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious hacking group known as Earth Kapre, also referred to as RedCurl and Red Wolf, has been targeting organizations across the globe with weaponized ISO and IMG files. This comprehensive investigation reveals the intricate tactics employed by the group …

BianLian Hackers Exploiting TeamCity Servers to Deploy Powershell Backdoor

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The notorious hacking group BianLian, known for its sophisticated cyber attacks, has shifted its focus to extortion-only operations following the release of a decryptor by Avast in January 2023. GuidePoint’s Research and Intelligence Team (GRIT) has been closely monitoring BianLian’s …

Vulnerabilities in Popular Fonts Allow XXE & Arbitrary Command Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The popular fonts used in web development and design can be exploited to launch XML External Entity (XXE) attacks and execute arbitrary commands. These vulnerabilities, identified as CVE-2023-45139, CVE-2024-25081, and CVE-2024-25082, pose a significant threat, allowing for XML External Entity …

Magnet Goblin Hackers Exploiting 1-day Vulnerabilities To Attack Linux Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors often target Linux servers due to their widespread use in critical infrastructure, web hosting, and cloud environments.  The open-source nature of the Linux operating system allows threat actors to study its code for vulnerabilities. The cybersecurity researchers at …

NSA Releases Top 10 Cloud Security Mitigation Strategies – 2024

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NSA and CISA jointly released “Top 10 Cloud Security Mitigation Strategies” to advise cloud users on critical security practices for migrating data.  The National Security Agency outlines ten essential strategies to improve cloud security posture, each explained in a separate …

Beware of Fake Trading Apps on Google Play & App Store that Steal Your Money

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent investigation unveiled a trend of fake trading apps on Google Play and the App Store designed to trick unsuspecting users out of their hard-earned money. This article delves into the mechanics of these scams, highlighting the urgent need …

Malware Families Adapting To COM Hijacking Technique For Persistence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

COM (Component Object Model) hijacking is a technique in which threat actors exploit the core architecture of Windows by adding a new value on a specific registry key related to the COM object. This allows the threat actors to achieve …

Cyber Security News Weekly Round-Up : Vulnerabilities, Cyber Attacks, Threats & New Cyber Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Stay updated with the most recent advancements in the cybersecurity industry with our weekly recap of cybersecurity news. Get comprehensive insights into the latest technical details and cutting-edge technologies being employed to safeguard against cyber threats. This will help you …

150K+ Fortinet Devices Vulnerable to Critical Code Execution Flaw

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical security flaw identified as CVE-2024-21762 has been discovered in Fortinet’s FortiOS and FortiProxy secure web gateway systems, potentially impacting around 150,000 devices worldwide. The vulnerability allows for unauthenticated remote code execution (RCE) by sending specially crafted HTTP requests …

Russian Spies Hacked Microsoft Email Systems & Stolen Source Codes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has disclosed that Russian government hackers, identified as the group Midnight Blizzard, have successfully infiltrated its corporate email systems and stolen source codes. The tech giant recently discovered unauthorized access attempts that were made using information obtained from a …