Tag Archive

A completely new and previously unreported form of BPFdoor was recently discovered and examined by Deep Instinct’s threat lab. The malware’s use of a Berkley Packet Filter, an unusual method of obtaining instructions and avoiding detection that gets beyond firewall …

A joint Cybersecurity Advisory (CSA) from the FBI and CISA have been published on actively exploiting the vulnerability in some versions of PaperCut NG and PaperCut MF, identified as CVE-2023-27350. This makes it possible for an unauthenticated actor to execute malicious code …

In March, the Zero Day Initiative (ZDI) organized a competition called “Pwn2Own.” Several vulnerabilities were discovered during this event across various technology brands, including NetGear routers. With the increasing threats targeting Internet of Things (IoT) devices, extensive research is being …

CRIL discovered a recently identified ransomware group called BlackSuit, which poses a threat to users of both widely used operating systems:- Windows Linux The Linux version of BlackSuit ransomware resembles the Royal ransomware while maintaining its distinct communication method through …

The cybersecurity researchers at Akamai recently affirmed as web applications and third-party tools become more prevalent, the risk of cyber-attacks increases due to a larger attack surface and low entry barriers for attackers. Shortly after the announcement of a critical …

The rapid expansion of the internet has provided an ideal environment for malware to thrive. As more people and organizations connect to the internet, more opportunities arise for cybercriminals to exploit vulnerabilities in systems and networks.  The increased connectivity has …

Cyber Security News came across a new ChatGPT-powered Vulnerability detection Tool called “BurpGPT,” which helps security researchers to detect the vulnerabilities that traditional scanners might miss. Like PentestGPT, a ChatGPT Powered Automated Penetration Testing Tool, BurpGPT was developed with deep …

A cybercriminal group obtained contracts from cybersecurity firm Dragos Inc. as part of an extortion attempt that involved contacting the chief executive officer’s wife and 5-year-old kid. For industrial control systems, including power grids, water treatment facilities, and pipelines, Dragos excels …

Bridewell’s Cyber Threat Intelligence (CTI) team has discovered previously undetected Ursnif infrastructure used in 2023 campaigns, suggesting that the malware operators have not yet utilized this highly elusive infrastructure. Ursnif Banking Malware Ursnif, originally a banking trojan also known as …