CISA Released Advisories to Mitigate Living Off the Land Attack Techniques

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In collaboration with international partners, the Cybersecurity and Infrastructure Security Agency (CISA) has released comprehensive advisories to mitigate Living Off the Land (LOTL) attack techniques. These techniques, which exploit legitimate tools and processes on systems to conduct malicious activities discreetly, …

Google Sues Two Chinese Developers Over Crypto Investment App Scams

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent lawsuit was filed by Google against two app developers, Yunfeng Sun (also known as Alphonse Sun) and Hongnam Cheung (also known as Zhang Hongnim and Stanford Fischer), for their alleged involvement in an international online investment fraud scheme. …

Google Adds V8 Sandbox in Chrome To Stop Hackers From Gaining Read/Write Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a significant move to bolster the security of its widely-used V8 JavaScript engine, Google has unveiled the V8 Sandbox, a cutting-edge mechanism to prevent memory corruption attacks. The V8 Sandbox represents a proactive approach to cybersecurity, operating under the …

Notepad++ Seeking your Help to Take Down the Parasite Website

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The developers of Notepad++, a widely used text and source code editor, have recently issued a call to action to their user base. The plea is an urgent one, and it is aimed at addressing a critical issue that requires …

Hackers Weaponize Suspended Domains To Deliver Malware Payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A recent phishing campaign targeting Latin America utilized emails with ZIP attachments containing an HTML file disguised as an invoice using free, temporary email addresses with the domain “temporary.link” and spoofing the User-Agent field in the header to indicate use …

Practical Guide to Simplify Your Malware Sandboxes Configuration

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Malware sandboxes are integral to security applications like intrusion detection, forensics, and threat intelligence, but using them correctly is challenging due to choices in implementations, monitoring techniques, and configurations.  Improper use can negatively impact applications through false positives, inconclusive analyses, …

New Cyber Attack Targeting Hospital IT Helpdesks with Voice Calls

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hospitals across the nation are on high alert as sophisticated cybercriminals use advanced social engineering tactics to target IT help desks. The Health Sector Cybersecurity Coordination Center (HC3) has issued a Sector Alert detailing the latest threat to the healthcare …

Massive boAt Data Breach: 7.5 Million Customers Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Personal data belonging to over 7.5 million customers of boAt, a leading Indian consumer electronics brand, has been compromised and is now circulating on the dark web. This breach has exposed many personally identifiable information (PII), posing significant risks to …

Cisco Nexus Dashboard Vulnerability Let Attackers Read Arbitrary Files

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco Nexus Dashboard Fabric Controller is a network management platform for all NX-OS-enabled devices. It enables data center operation teams to perform deep-dive troubleshooting and maintenance operations.  A new vulnerability has been discovered in the Cisco Nexus Dashboard Fabric Controller, …

Meet The New Qakbot DLL That Abuses Windows Process For persistence

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Law enforcement dismantled the Qakbot botnet’s servers in 2023’s Operation Duck Hunt, but researchers identified its reemergence with a modified DLL, which utilizes the srtasks.exe process for persistence, ensuring its survival on restarted machines.  Qakbot continues to spread via phishing …