Researchers Hacked into Medusa Ransomware Group’s Cloud Storage

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Medusa Ransomware Group experienced significant operational security (OPSEC) failure, which was primarily due to the group’s use of Rclone, a widely utilized tool for data exfiltration, to store stolen …

iPhone Users Beware! Fake Postal Messages Stealing Your Login Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cybercriminals have launched a smishing campaign targeting iPhone users in India, impersonating India Post. Malicious iMessages falsely claim a package awaits at an India Post warehouse, enticing victims to click …

New MOVEit File Transfer Vulnerability Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Progress Software has disclosed a new high-severity vulnerability in its MOVEit Transfer file transfer solution that could allow attackers to escalate privileges through improper authentication. The vulnerability, tracked as CVE-2024-6576 …

Achieving 24/7 Threat Monitoring & Response for Small IT Security Teams – Free Guide

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Maintaining continuous vigilance is essential for organizations of all sizes in the face of increasing cyber threats. However, lean IT security teams often face the challenge of providing 24/7 threat …

North Korean Government Hacker Charged for Attacking U.S. Hospitals

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A grand jury in Kansas City has charged North Korean national Rim Jong Hyok for orchestrating a series of cyberattacks targeting U.S. hospitals and healthcare providers. The indictment outlines a …

HealthEquity Data Breach, 4.3 Million User Data Exposed

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

HealthEquity, Inc., a prominent health savings account administrator, has reported a data breach affecting approximately 4.3 million individuals. The breach, which occurred on March 9, 2024, and was discovered on …

DigiCert to Revoke Thousands of Certificates Following DNS Validation Error

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

DigiCert, a major certificate authority, to revoke thousands of SSL/TLS certificates because of a Domain Control Verification error. This could affect a lot of websites. The company discovered that an …

Proofpoint’s Email Protection Service Exploited to Send Millions of Phishing Emails

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A massive phishing campaign dubbed “EchoSpoofing” has exploited a critical vulnerability in Proofpoint’s email protection service, allowing cybercriminals to send millions of perfectly spoofed phishing emails impersonating major brands. The …

Ransomware Gangs Exploiting VMware ESXi Auth Bypass Flaw for Mass Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft researchers have found a critical vulnerability in VMware’s ESXi hypervisors. Ransomware operators are using this problem to attack systems. This vulnerability, CVE-2024-37085, allows threat actors to gain full administrative …

Phishing Threats and Cybersecurity 2024 : Protecting Personal and Organizational Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

As Americans engage in major activities such as the 2024 presidential race, large-scale cultural festivals, and high-profile sporting events, cybersecurity will be on high alert. Phishing attacks involve users through …