Apache NiFi RCE Vulnerability Let Attackers Exfiltrate Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The widely used data integration tool Apache NiFi has been discovered to be susceptible to a critical security flaw tracked as CVE-2023-34468 that might allow remote code execution. Additionally, this significant issue might allow attackers to exfiltrate sensitive information, compromise data integrity, obtain unauthorized access, …

BunnyLoader: New Malware-as-a-Service (MaaS) Under Rapid Development

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new malware-as-a-service (MaaS) loader under the name “BunnyLoader” has been discovered to be sold in multiple hacking forums. This malware has multiple functionalities which include second-stage payload downloading and executing, browser credentials and system information stealing, keylogging, and much …

Don’t Let Zombie Zoom Links Drag You Down

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Many organizations — including quite a few Fortune 500 firms — have exposed web links that allow anyone to initiate a Zoom video conference meeting as a valid employee. These company-specific Zoom links, which include a permanent user ID number …

Marvin Attack: 25-year-old RSA Decryption Vulnerability Disclosed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new type of vulnerability in the software implementation of PKCS#1 v1.5 padding scheme for RSA key exchange, which was previously confirmed to be susceptible, has been discovered and still can be exploited. This attack has been named as “Marvin …

Windows Server Running SMB over QUIC Let Attacker Launch DoS Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

QUIC, created by Google, is a modern transport layer protocol aimed at enhancing connection reliability and security while addressing latency and packet loss issues utilizing UDP. Microsoft’s QUIC implementation is known as MsQuic, utilized for SMB and HTTP/3 in IIS …

Malicious npm and PyPi Packages Exfiltrate SSH Keys From Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

JavaScript and Python both have their own package repositories called npm (Node Package Manager) and PyPi (Python Package Index), respectively. They act as key centers for publishing and exchanging reusable code libraries and packages by developers. Sonatype Security Research tracks …

$20M Offered By Russian Zero-Day Seller To Hack Android And iPhone Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Russian company Operation Zero is currently offering researchers $20 million in exchange for hacking tools that would enable its customers to take control of Android and iPhone devices. “By increasing the premium and providing competitive plans and bonuses for …

New Ransomware Trend – Threat Actors Deploy Two Ransomware on Victims’ Networks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The FBI alerts on rising ransomware trends and urges organizations to follow mitigation recommendations for minimizing ransomware risks and consequences. In July 2023, the FBI observed two ransomware trends, and here we have mentioned them:- Multiple attacks on the same …

A Closer Look at the Snatch Data Ransom Group

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Earlier this week, KrebsOnSecurity revealed that the darknet website for the Snatch ransomware group was leaking data about its users and the crime gang’s internal operations. Today, we’ll take a closer look at the history of Snatch, its alleged founder, …

What is Origin Server? How To Protect them? A Detailed Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The origin server stores a website’s or application’s content and data. As the starting point for all requests made to a website, the origin server’s main responsibility is to access the requested resource from the server’s file system and send …