Cactus Ransomware Exploiting Qlik Servers Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Cactus ransomware gang has been exploiting vulnerable Qlik sense servers ever since November 2023 using multiple vulnerabilities such as CVE-2023-41266 (Path Traversal), CVE-2023-41265 (HTTP request Tunneling) and CVE-2023-48365 (Unauthenticated Remote Code Execution). Though Qlik has addressed these vulnerabilities with …

Hackers Abuse Autodesk Drive For Hosting Weaponized PDF Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Autodesk Drive is a data-sharing platform for organizations to share documents and files in the cloud. It also supports 2D and 3D data files, including PDF files, which are free to use when other Autodesk products are subscribed. However, a …

MuddyWater Hackers Abusing Legitimate RMM Tool to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Iranian state-sponsored threat actor MuddyWater has been observed exploiting a legitimate remote monitoring and management (RMM) tool, Atera Agent, to conduct a sophisticated malware delivery campaign. This alarming trend has been under scrutiny since the beginning of 2024, with …

Microsoft Releases Historical MS-DOS 4.0 Source Code to the Public

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move for tech enthusiasts and historians alike, Microsoft has made the source code for MS-DOS 4.0 publicly available. This decision marks a pivotal moment in the accessibility of historical software, allowing developers, students, and technology aficionados to …

PoC Exploit Released For Critical Flowmon Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress addressed a critical vulnerability last week, which was associated with an unauthenticated Command injection on the Progress Flowmon product. This vulnerability was assigned CVE-2024-2189, and the severity was given as 10.0 (Critical). Progress Flowmon is a network monitoring and …

Chrome Critical Flaw Let Attackers Execute Arbitary Code : Patch Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google announced the release of Chrome 124, which fixes four vulnerabilities, including a critical security issue that allows attackers to execute arbitrary code. Over the next few days or weeks, the Google Stable channel will be updated to 124.0.6367.78/.79 for Windows …

Hackers Exploit Google Ads to Spread IP Scanner with Concealed Backdoor

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malicious actors are distributing a new backdoor, MadMxShell, through a Google Ads campaign that impersonates an IP scanner. This Windows backdoor leverages DNS MX queries for communication with its command-and-control server.  The technique involves encoding data within subdomains of DNS …

PlugX USB worm Infected Over 2.5M Devices

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new menace has emerged, affecting millions of devices worldwide. The PlugX USB worm, a sophisticated malware, has been reported to have infected over 2.5 million devices, posing a significant threat to global cybersecurity. The PlugX malware, initially identified several …

Hackers Employ Black Hat SEO Techniques To Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use black hat SEO methods to manipulate search engine rankings and make malicious or fraudulent websites more visible. Recently, Zscaler cybersecurity researchers have seen a wave of fraudulent sites hosted on well-known web hosting services and blogging platforms that …

GitLab High-severity Flaw Let Attackers Takeover Account – Update Now

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitLab released security patches 16.11.1, 16.10.4, and 16.9.6 for both Community and Enterprise Editions, and upgrading to these versions is strongly recommended to address vulnerabilities.  Scheduled patch releases occur twice a month, while ad-hoc critical patches are released for high-severity …