OpenSSL Fixed Two High Severity Vulnerabilities That Can be Exploited Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

There have been two high-severity security vulnerabilities recently discovered and patched by the OpenSSL Project in its open-source cryptographic library. Encryption of communication channels and HTTPS connections is achieved through the use of this cryptographic library. In OpenSSL version 3.0.7 …

Follina Exploit Let Hackers Compromise the Domain Controller Via RDP Session

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

An intrusion was detected by The DFir Report in early June 2022 that leveraged the NetSupport Atera Agent Cobalt Strike Threat actors have exploited the CVE-2022-30190 (Follina vulnerability) in this intrusion and here they used a malicious Word document to …

Chinese APT Hackers Deploy LODEINFO Malware in Windows to Open Backdoor

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybersecurity researchers at Kaspersky’s threat research lab have recently tracked down a revised version of LODEINFO malware that has been used by APT10 (aka Stone Panda, Bronze Riverside, Cicada, and Potassium) to abuse security software and use the malware against …

Hackers Selling Ransomware Victims and Network Access Data for $4 Million

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Israeli cyber-intelligence firm KELA has recently published its Q3 2022 ransomware report in which it has reported that an estimated $4 million worth of 576 global corporate network access is being sold worldwide by hackers, enhancing the cyberattacks on large …

GitHub Repojacking Bug Let Hackers Take Control Over a GitHub Repository

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A high-severity security flaw has been patched recently by GitHub on September 19, 2022, and it’s a cloud-based repository hosting service. By exploiting this vulnerability, malicious repositories could have been created and attacks on the supply chain could have been …

Accused ‘Raccoon’ Malware Developer Fled Ukraine After Russian Invasion

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

October 31, 2022 0 Comments A 26-year-old Ukrainian man is awaiting extradition from The Netherlands to the United States on charges that he acted as a core developer for Raccoon, a popular “malware-as-a-service” offering that helped paying customers steal passwords …

Student Arrested in Germany For Running Largest Darknet Market

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In Bavaria, a 22-year-old German student has been arrested recently by the Federal Criminal Police Office (BKA) of Germany for allegedly operating one of the most extensive darknet marketplaces, ‘Deutschland im Deep Web‘ (DiDW). In March 2022, the platform had …

S3crets Scanner – New Tool to Scan and Secure Public AWS S3 Buckets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The information that is stored accidentally in AWS S3 or public storage buckets that are exposed publicly could now be accessed by security researchers and red team members with the help of a new open-source scanner tool, called S3crets Scanner. …

Best UTM Software (Unified Threat Management Solutions) – 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Unified Threat Management software or UTM software (UTM solutions) is best known to address network threats and malicious activities on enterprise networks. With Best UTM software, you are provided with a comprehensive and dynamic security protection system that takes care …

Chrome Zero-Day Bug Actively Exploited in Wild – Update Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In order to address a potentially exploitable zero-day vulnerability discovered in recent attacks on Google’s Chrome desktop web browser, Google has released a security update as an emergency fix. The vulnerability has been tracked as CVE-2022-3723, and this vulnerability affects …