Patch Tuesday, November 2022 Election Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Let’s face it: Having “2022 election” in the headline above is probably the only reason anyone might read this story today. Still, while most of us here in the United States are anxiously awaiting the results of how well we’ve …

29 Weaponized Python PyPI Packages Aimed to Infect Developers With Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Python Package Index (PyPI) has been found to contain 29 potentially malicious packages. In most of these cases, you will find that the obfuscated code drops an info-stealer called “W4SP” on infected machines. Others take advantage of malware that …

Path To Pentest Guide : 10 Best Penetration Testing Phases, Lifecycle, Methods – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Penetration Testing Phases involves a various Methods, phases, lifecycle and scope to prepare a best checklist to perform the quality penetration operations. Here we have created a complete Penetration Testing Guide with detailed step by step methods. Let’s take a …

New ChromeLoader Malware Hijack Chrome Browser to Steal Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There is a malicious Chrome browser extension known as ChromeLoader that classified as a pervasive browser hijacker caught that modifies the browser settings to redirect users’ traffic to a malicious websites and stealing credentials.. After first surfacing in January of …

Microsoft Defence Report – Hackers Highly Target Publicly-Disclosed Zero-Day Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft issues a warning about a rise in the use of publicly revealed zero-day exploits by threat actors in their attacks. The researchers noted a shortening of the period between the disclosure of a vulnerability and its commoditization and noted …

Black Basta Ransomware Ties With FIN7 Hackers To Deploy Custom Hacking & Evasion Tools

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There is evidence found pointing to the connection between FIN7 (aka Carbanak), a financially motivated hacking group, and the Black Basta ransomware gang.  The cybersecurity researchers at Sentinel Lab conducted an analysis in which they found this illicit connection between …

LinkedIn Adds Verified Emails, Profile Creation Dates

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Responding to a recent surge in AI-generated bot accounts, LinkedIn is rolling out new features that it hopes will help users make more informed decisions about with whom they choose to connect. Many LinkedIn profiles now display a creation date, …

Android Apps With Millions of Installation Redirect Users to Weaponized Websites

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

It seems that the Google app store has still not been able to catch malicious applications, as they are still being listed there. In the Google Play store, there are currently four malicious apps that are available. The 4 malicious …

Hacker Charged With Extorting Online Psychotherapy Service

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A 25-year-old Finnish man has been charged with extorting a once popular and now-bankrupt online psychotherapy company and its patients. Finnish authorities rarely name suspects in an investigation, but they were willing to make an exception for Julius “Zeekill” Kivimaki, …

Dropbox Hacked – Attackers Stolen 130 GitHub Repositories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent disclosure, Dropbox revealed that a security breach had occurred. On GitHub, 130 of the company’s source code repositories have been accessed unauthorizedly by the threat actors. Threat actors gained access to the GitHub repositories of Dropbox by …