Authorities Seized RagnarLocker Ransomware Dark Web Site

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A coordinated international law enforcement action has seized the dark web site used by the notorious RagnarLocker ransomware group.  This operation involving law enforcement agencies from several countries is a major setback for cyber criminals and a significant achievement in …

Iranian Crambus Actors Modify Windows Firewall Rules To Enable Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Crambus espionage group, formally known as OilRig or APT34, has a lengthy history and a great deal of experience conducting prolonged attacks against Iranian targets. The Iranian-linked attackers targeted a Middle Eastern government between February and September 2023, compromising several …

SolarWinds Access Rights Manager Flaw Let Attackers Execute Remote Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

IT and security administrators can utilize SolarWinds Access Rights Manager (ARM) to efficiently manage and audit user access rights to data, systems, and files.  The software provides an easy-to-use interface for provisioning, de-provisioning, and overseeing access, which helps safeguard organizations …

TinyMCE Text Editor Flaw Let Attackers Execute XSS payload

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Tiny Technologies, the company behind the popular text editor TinyMCE, announced the release of version 5.10.8 on October 19, 2023.  This new version aims to improve the security of the editor and includes important security patches. One of the major …

New BlackCat Hacker Tool Spreads Ransomware to Remote Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The BlackCat ransomware operators have demonstrated ongoing adaptation and innovation in their malicious activities, making mitigating their threats challenging for security experts. BlackCat operators, like Munchkin, revealed updates for propagating their payload across victim networks. They’ve been consistently evolving their …

U.S. Government Releases Popular Phishing Technique Used by Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing is a cyberattack that uses deception to trick people into giving away sensitive information or taking actions that compromise security.  Phishing is often the first stage of a larger attack that can lead to data breaches, ransomware infections, identity …

React Developer Tools Flaw Let Attackers Launch a DDoS Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

React Developer Tools is an essential tool for developers as it allows them to effectively inspect React components, modify the properties and state of these components, and pinpoint any performance issues.  With this tool, developers can easily optimize the performance …

GhostLocker – A New Generation of Raas from Hacktivist Groups

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The increasing number of ransomware is on the rise primarily due to its lucrative nature and the inherent obscurity it provides to malicious actors in the cyber realm. Threat actors exploit ransomware because it allows them to extort significant sums …

Hackers Shifting Towards Non-Executable .txt & .log Files to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, researchers have found an increasing number of malware samples that employ code from non-executable files (such as .txt, .log, etc.), a strategy created particularly to get beyond standard detection procedures.  These files are often deceptively simple, with only a line …

Hackers Use Discord for C&C to Exploit Jupyter Notebooks & SSH

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers Use Discord for C&C to Exploit Jupyter Notebooks & SSH By Guru – October 19, 2023 Jupyter Notebooks exposed to the internet are being targeted by a new crypto jacking campaign called Qubit Strike, which Cado Security Labs discovered.  …