Massive DDoS Attacks at 633.7 Gbps Combining ACK, PUSH, RESET, and SYN Packets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DDoS attack evolves with changing tech and attacker motivations, with recent cases involving significant damages and legal consequences. Recently, the DDoS defense platform of Akamai Prolexic prevented the largest DDoS attack on a major U.S. financial institution’s platform, reaching 633.7 …

Point Of Sale Device (POS) Penetration Testing – A Practical Guide 2023

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

POS Is an important system that manages sales transactions in businesses. Although it may seem complex at first glance, it is actually quite simple. Now, let’s explain in more detail what POS is and how it works. POS is an …

NSO’s Pegasus Hacked Russia Media Agency CEO’s iPhone

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

NSO’s Pegasus Hacked Russia Media Agency CEO’s iPhone By Guru – September 15, 2023 The iPhone of Galina Timchenko, the co-founder, CEO, and publisher of the Russian independent media outlet Meduza, was found to have NSO Group’s Pegasus spyware. According to the …

Mozilla Zero-Day Vulnerability Exploited in the Wild – Patch Now!

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a race against the clock to protect user security, major browser vendors, including Google and Mozilla, have rushed to release critical updates in response to a critical vulnerability discovered in the WebP Codec. This newly discovered vulnerability with the …

GitHub Vulnerability Let Attackers Hijack Thousands of Repositories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Researchers uncover a novel Github vulnerability that might let an attacker exploit a race condition in GitHub’s repository creation and username renaming operations. A Repojacking attack may be carried out using this method. Exploiting this issue successfully impacts the open-source community …

Hackers Claim MGM Resorts Were Compromised in 10 Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a recent cyber incident, the ALPHV/BlackCat ransomware group has claimed responsibility for causing disruptions at MGM Resorts.  Their method involved gaining an employee’s trust via a phone call, which reportedly took only 10 minutes to execute. The ALPHV ransomware …

Kubernetes Command Injection Flaw Allows SYSTEM Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As per recent reports, Kubernetes has been discovered with a remote code execution vulnerability, which could allow a threat actor to execute code on the affected Windows endpoints inside a Kubernetes Cluster with SYSTEM privileges. To exploit this vulnerability, the …

APT36 Using Customized Malware to Attack Indian Government Linux and Windows Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

APT36 is a highly sophisticated APT (Advanced Persistent Threat) group that is known for conducting targeted espionage in South Asia and is strongly linked to Pakistan. While this APT group is known for targeting the following Indian sectors:- Government Defense …

FBI Hacker Dropped Stolen Airbus Data on 9/11

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle “USDoD” had infiltrated the FBI‘s vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying all InfraGard …

Adobe PDF Creator Zero-day Vulnerability Exploited in the Wild

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Adobe has published a security update for Adobe Acrobat PDF and Reader for Windows and macOS as part of its regular Patch Tuesday updates. This patch fixes a ‘Critical’ vulnerability, which might allow an attacker to run malicious code on unprotected …