GIFShell – New Attack Method That Allows Attackers to Steal Data Using Microsoft Teams GIFs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybersecurity consultant and pentester, Bobby Rauch recently discovered that threat actors are abusing Microsoft Teams by executing phishing attacks using a new attack technique known as GIFshell. Using GIFs …

Cisco Will Not Fix Authentication Bypass Flaw Affecting Multiple Small Business VPN Routers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The vulnerability tracked as (CVE-2022-20923) in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers will not be patched since the devices have …

Hackers Heavily Use Minecraft Game to Lure Players into Installing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals use Minecraft to lure unsuspecting players into installing malware on their computers, as it is the most frequently abused game title by them. Kaspersky Labs, which is known for …

EvilProxy – Phishing-As-A-Service Advertise Via Darkweb to Bypass 2FA

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Recently, a PaaS (Phishing-as-a-Service) platform called EvilProxy that offers reverse-proxy services has emerged on the market and was identified by the Resecurity security firm. By exploiting this new emerging service …

Over 1800 Android and iOS Apps Leaking Hardcoded AWS Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The cybersecurity researchers at Symantec have recently warned of the risks related to poor security practices, pointing out that it found hardcoded credentials for AWS in more than 1,800 Android …