Exploit Released for Cisco IOS XE Zero-day Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco was reported with a critical vulnerability last week, which has been actively exploited by threat actors in the wild. The vulnerability was assigned with the CVE-2023-20198 and was given a severity rating of 10.0 (Critical). This particular vulnerability affects …

Russian New Hacking Tool Creates Hundreds Of Fake Social Media Profiles In Seconds

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Kopeechka service, which refers to “penny” in Russian, is a new tool criminals use to quickly and easily generate hundreds of fake social media accounts. The service, operational since the start of 2019, offers simple account registration services for …

.US Harbors Prolific Malicious Link Shortening Service

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The top-level domain for the United States — .US — is home to thousands of newly-registered domains tied to a malicious link shortening service that facilitates malware and phishing scams, new research suggests. The findings come close on the heels …

Boeing Breached by LockBit Ransomware Gang? Investigation Inprogress

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Boeing, a major player in the aerospace industry, says it is “assessing” claims made by the LockBit ransomware group that it has taken a “tremendous amount” of confidential information from the company. After a new post on the LockBit leak site …

815 Million Indians’ Aadhaar Data Exposed on the Dark Web

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive data breach has occurred, resulting in the leak of personal information belonging to 815 million Indian citizens on the dark web.  The compromised data includes personally identifiable information, which can pose a serious threat to the privacy and …

TA571 Hacker Group Deliver IcedID Malware Via Password-protected Zip Archive

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers often use password-protected Zip Archive files for malware distribution to evade detection by security software.  They let the malware infiltrate the target system without detection by encrypting the file, which makes it more difficult for antivirus software to examine …

Hackers Infect Windows Users with Weaponized MSIX App Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

MSIX helps developers package Windows apps for easy installation. While it’s user-friendly, it demands access to code signing certificates, making it an attractive target for resourceful threat actors. Additionally, MSIX packages can be distributed and installed without administrative privileges, potentially …

NGINX ingress Security Flaw Let Attackers Kubernetes API Server Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Three vulnerabilities have been discovered in NGINX ingress controllers, which were associated with arbitrary command execution, code injection, and sanitization bypass. The severity of these vulnerabilities ranges between 7.6 (High) and 10.0 (Critical). NGINX Ingress Controller can be used to …

Hackers Have Earned More Than $300 Million on the HackerOne Platform

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The ethical hacking community has earned $300 million in total all-time rewards on the HackerOne platform. In addition, thirty hackers have made over a million dollars on the network; one hacker’s total profits have surpassed four million dollars. Through ongoing adversarial testing, …

Lazarus Group Hacked Software Vendor to Steal Source Code, Attack Supply Chain

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A hacker attack on a supply chain can be highly dangerous as it can disrupt the flow of goods and services, causing widespread economic and operational damage. Such attacks pose a serious risk to companies and society at large since …