Beware Of Malicious Chrome Installer From Chinese Hackers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A malicious Chrome installer, ChromeSetup.msi, distributed via drive-by download, delivers a novel Gh0st RAT variant, dubbed Gh0stGambit, that evasively retrieves and executes encrypted payloads.  The RAT is a modified open-source …

Threat Actors Exploiting Selenium Grid Services For Cryptomining

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors often exploit the cloud services for cryptomining, as doing so allows them to abuse the huge computational resources available.  This enables them to significantly maximize their mining efficiency …

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 26, 2024 0 Comments Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that …

ServiceNow Flaw Let Remote Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ServiceNow recently disclosed three critical vulnerabilities (CVE-2024-4879, CVE-2024-5217, and CVE-2024-5178) affecting multiple Now Platform versions, allowing unauthenticated remote code execution and unauthorized file access.  The vulnerabilities, with CVSS scores ranging …

ConfusedFunction Vulnerability in Google Cloud Platform Let Attackers Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered vulnerability in Google Cloud Platform (GCP) has raised significant security concerns among users and experts alike. The vulnerability, dubbed “ConfusedFunction,” involves GCP’s Cloud Functions and Cloud Build …

PKfail Vulnerability Allows Hackers to Install UEFI Malware on Over 200 Device Models

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The PKfail vulnerability is a significant security issue affecting over 200 device models of Secure Boot. PKfail is a critical firmware supply-chain issue that undermines the Secure Boot process in …

OpenStack Nova Vulnerability Allows Hackers Gain Unauthorized Access to Cloud Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A vulnerability in OpenStack’s Nova component has been identified, potentially allowing hackers to gain unauthorized access to cloud servers. This vulnerability, tracked as CVE-2024-40767, affects multiple versions of Nova and …

North Korean Charged in Cyberattacks on US Hospitals, NASA & Military Bases

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A North Korean military intelligence operative has been indicted for orchestrating a series of cyberattacks targeting U.S. hospitals, NASA, and military bases, federal prosecutors announced on Thursday. Rim Jong Hyok, …