First-Ever Ransomware Found to be Attacking macOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

LockBit ransomware gang targets Macs with its newly-developed encryptors for the first time, making them potentially the first significant ransomware group to aim at macOS. Ransomware attacks are widespread. However, creating malware versions for targeting Macs by attackers is uncommon. …

Google Releases Assured OSS For Free to Detect Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google Cloud is making it’s Assured Open Source Software (Assured OSS) service available for Java and Python ecosystems without charge in response to the rising dangers associated with dependency on open-source software. According to a 2023 study by Synopsys, 84% …

Hackers Use Abandoned WordPress Plugins to Backdoor Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors have discovered a new technique to insert malicious code into websites. They are currently utilizing Eval PHP, an abandoned WordPress plugin. Mostly, website backdoors are programmed in PHP, the foundational language of the modern web. Most other popular CMS …

ICICI Bank Data Leak – Millions of Records with Sensitive Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Millions of records containing sensitive information, including financial data and client personal documents, were disclosed by ICICI Bank. During the most recent inquiry, the Cybernews research team learned that the bank’s systems were misconfigured, which allowed the bank to release …

3CX Breach Was a Double Supply Chain Compromise

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. The lengthy, complex intrusion has all the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on …

Pakistani APT-36 Hackers Using a Linux Malware To Attack Indian Government

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Transparent Tribe (aka APT36), an APT group based in Pakistan, has recently been found employing a stealthy tactic to distribute a new Linux Malware called Poseidon. The cybersecurity researchers at Uptycs have discovered Poseidon, a new Linux malware.  The group …

APT28 Hackers Deploy Malware on Cisco Routers Via Unpatched Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, the following agencies have published a joint advisory to warn of APT28, a Russian state-sponsored group that is found actively deploying the ‘Jaguar Tooth,’ a custom malware on Cisco IOS routers:- The UK National Cyber Security Centre (NCSC) The …

Second Google Chrome Zero-Day Bug Actively Exploited in Wild – Update Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, Google released an emergency security update to fix another Chrome zero-day vulnerability actively exploited in the wild. This zero-day flaw has been tracked as CVE-2023-2136 and is the second zero-day vulnerability found this year. In this case, the most …

What is DNS Filtering? How Does It Works? A Detailed Overview

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

What is DNS Filtering? How Does It Works? A Detailed Overview By Febi Sharon – April 19, 2023 DNS security is critical in today’s world to protect against the growing threat of DNS attacks. The risk of financial loss, data …

Hackers Using YouTube as a Malware Distribution Platform Via Hacked YT Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers Using YouTube as a Malware Distribution Platform Via Hacked YT Channel By Balaji N – April 19, 2023 Morphisec Threat Labs researchers have recently exposed a sneaky loader called “in2al5d p3in4er” (Invalid Printer) that delivers Aurora information stealer malware …