NCA Reveals Identity of LockBit Ransomware Group Leader

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The UK’s National Crime Agency (NCA) announced a major breakthrough today in investigating the notorious LockBit ransomware gang. LockBit, a ransomware-as-a-service (RaaS) operation, has been responsible for numerous high-profile cyberattacks …

Yoast SEO Plugin XSS Flaw Exposes 5 Million+ WordPress Websites to Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular Yoast SEO WordPress plugin, potentially putting over 5 million websites at risk of compromise. The flaw was found …

MITRE Shares Details on Nation-State Hackers’ Intrusion into Research Network

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The MITRE Corporation, a not-for-profit organization that operates research and development centers for the U.S. government, has disclosed that sophisticated nation-state hackers recently compromised one of its internal research and …

Oracle Weblogic Server Flaw Allows Attackers Full Control – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new secondary JNDI injection vulnerability was discovered in a recent version of WebLogic, allowing attackers to trigger JNDI injection during another JNDI lookup process, effectively enabling Remote Code Execution …

Microsoft Defender XDR Expanded to Malicious OAuth Apps With the Power of AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In an update to its security operations suite, Microsoft has announced the expansion of its Defender Extended Detection and Response (XDR) capabilities to include advanced AI-powered detection and mitigation of …

Beware! 150+ SSH Accounts With Root Access Advertised On Hacker Forums

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development for cybersecurity, over 150 SSH accounts with root access are currently being advertised for sale on various hacker forums. These accounts reportedly provide unrestricted administrative access …

New CraxsRAT Version Claims Capability To Bypass Google Play Antivirus

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In a concerning development in the cybersecurity landscape, the latest version of CraxsRAT, known as v7.4, has been released with claims of enhanced capabilities, including the ability to bypass Google …