Threat Actors Exploiting ChatGPT’s Sora AI Excitement To Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors exploit AI to make their attacks more effective through automation, scanning large data sets for security gaps and creating intricate phishing scams that are harder to spot. In …

DEV#POPPER Attacking developers via New Social Engineering Tactics

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors masquerade as interviewers and send a ZIP file (onlinestoreforhirog.zip) to candidates as part of a fake interview, which contains legitimate files and a malicious JavaScript file (printfulRoute.js) that …

Tricky OneDrive Phishing Campaign Tricks Users To Execute PowerShell Script

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated phishing campaign targets Microsoft OneDrive users, employing social engineering to trick victims into executing malicious PowerShell scripts.  The attack leverages a false sense of urgency by claiming a …

SLUBStick Linux Vulnerability Let Attackers Gain Full System Control

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers have discovered a severe vulnerability in the Linux kernel that could allow attackers to gain full control over affected systems. Dubbed “SLUBStick,” the exploit technique uses memory allocation …

Hackers Abuse TryCloudflare Service To Bypass Detection And Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals increasingly leverage the TryCloudflare Tunnel to deliver Remote Access Trojans (RATs) in financially motivated attacks. TryCloudflare is a tool for developers to experiment with Cloudflare Tunnel without adding a …

New Widespread Phishing Campaign Attacking Users With Multiple Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Phishing campaigns intensified in May 2024, with Poland bearing the brunt of attacks, accounting for 80% of over 26,000 protected users, as Italy and Romania also experienced significant targeting.  Threat …

Microsoft Edge Vulnerability Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has released a critical security update for its Edge browser to address multiple vulnerabilities, including a severe validation flaw that could allow attackers to execute arbitrary code on affected …

RBI Mandated Additional Factor Authentication for All Card payments

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Reserve Bank of India (RBI) has proposed a new framework mandating additional factor authentication (AFA) for all digital payment transactions, with some exceptions. This move aims to enhance the …