New Moonstone Sleet North Korean Actor Deploying Malicious Open Source Packages

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

In December 2023, we reported on how North Korean threat actors, particularly Jade Sleet, have been compromising supply chains through the open-source ecosystem. One of their key tactics is the …

Microsoft Delays Release of Controversial Windows AI Recall Tool Amid Privacy Concerns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft has announced that it will delay the broad release of its AI-powered Recall feature for Windows Copilot+ PCs, following heavy criticism from users and privacy advocates. The feature, which …

SmokeLoader – A Modular Malware With Range Of Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers misuse malware for diverse illicit intentions, including data theft, disrupting systems, espionage, or distortion for unethical monetary benefits. Besides this malware is also helpful in conducting cyber warfare or …

Hackers Abuse Windows Search Functionality To Deploy Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers use Windows Search’s vulnerability to penetrate different layers and rooms in the client’s systems and execute unauthorized code by using bugs in the search functionality itself.  This enables them …

Kulicke & Soffa Data Breach – 12 Million Files Leaked

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kulicke and Soffa Industries, Inc. (K&S), a leading semiconductor packaging and electronic assembly solutions provider, has disclosed a data breach that has compromised approximately 12 million files. Initially detected on …

FortiOS Vulnerability Let Attackers to Execute Unauthorized Commands

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fortinet has disclosed multiple stack-based buffer overflow vulnerabilities (CVE-2024-23110) in FortiOS’s command line interpreter. These vulnerabilities could allow authenticated attackers to execute unauthorized code or commands. Gwendal Guégniaud of the …