Linux Kernel Vulnerabilities in Ubuntu Let Hackers Launch DOS Attack & Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several security vulnerabilities were recently addressed by Canonical in both Graphviz and the Linux kernel of Ubuntu. Recent discoveries include null pointer dereference vulnerabilities in Graphviz and improper handling of indirect branch prediction isolation between L1 and L2 VMs in …

Explosive USB Drive Bomb that Gets Detonated when Plugged into Computer

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Journalists across Ecuador were targeted using a novel bomb resembling a USB drive. Once inserted into a computer, these devices detonate. According to a report from CBS News, over five Ecuadorian journalists, they received a USB letter bomb from Quinsaloma. …

6 Best Free Malware Analysis Tools to Break Down the Malware Samples – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The malware analysis tools simply allow us to know in a quick and effective way, what actions a threat makes in the system. In this way, you can easily collect all the information about the created files, network connections, changes …

New Android Banking Malware Attacking Over 400 Financial Apps

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Android New Android Banking Malware Attacking Over 400 Financial Apps By Guru – March 25, 2023 Several threat actors have already been exploiting a newly discovered Android banking trojan, dubbed Nexus, to penetrate 450 financial applications and steal data. While …

CISA Released a New Tool to Detect Hacking Activity in Microsoft Cloud Environments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As part of its ongoing efforts to protect Microsoft cloud environments against malicious activity, CISA recently introduced an open-source incident response tool called the “Untitled Goose Tool.” This Python-based utility tool was developed in collaboration with Sandia, a national laboratory …

Microsoft Teams, Virtualbox, Tesla Zero-Days Exploited –  Pwn2Own Day Two

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

At Pwn2Own Vancouver 2023 Day 2, for 10 unique zero-day exploits, the participants received $475,000 of cash prizes. The Tesla Model 3, the Microsoft Teams communication platform, the Oracle VirtualBox virtualization platform, and the Ubuntu Desktop operating system were all on the …

Windows 11, Tesla, macOS & Ubuntu Desktop Hacked – Pwn2Own Day One

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

On the first day, Pwn2Own Vancouver 2023 hacking challenge participants compromised Windows 11, Tesla, macOS, and Ubuntu Desktop. AbdulAziz Hariri of Haboob SA, who completed his attack against Adobe Reader utilizing a 6-bug logic chain leveraging many failed fixes that …

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Google says it has suspended the app for the Chinese e-commerce giant Pinduoduo after malware was found in versions of the app. The move comes just weeks after Chinese security researchers published an analysis suggesting the popular e-commerce app sought …

ChatGPT Privacy Bug Exposes Chat Histories to Other Users

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A severe flaw recently affecting ChatGPT, an artificial intelligence chatbot developed by OpenAI, exposed chat history and consequently caused an outage. After observing Chinese characters in the title of their conversation history, a ChatGPT user on Reddit first reported the …

Hackers Attack Administrative Organizations Using PowerMagic and CommonMagic Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Significant numbers of cyberattacks are executed in a political or geopolitical context that Kaspersky researchers and the international community are identifying. In recent weeks, reports have surfaced of attacks carried out by an advanced threat actor using a previously unknown …