Uber Hacked – Attackers Gained Full Access to Company’s Critical IT Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A breach in Uber’s computer network was discovered after the company discovered it had been hacked. In turn, several internal communication systems and engineering systems were taken offline by the …

Severe Security Flaw in Microsoft Teams Desktop App Let Attackers Access Authentication Tokens

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Earlier, in August 2022, Vectra researchers discovered an attack path that let attackers with file system access to steal credentials for any Microsoft Teams user who is signed in. Reports …

Microsoft Security Update Fixed an Actively Exploited Zero-day Including 64 New Bugs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Microsoft released a new security update with the fixes for 64 new security vulnerabilities including 2 zero-day in which one is actively exploited in wild. In this list of Vulnerabilities, …

Lorenz Ransomware Group Breach Enterprise Networks Using Their Phone Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Using Mitel’s MiVoice VOIP appliances as a means to access the corporate network of enterprises, the Lorenz ransomware gang is now using a critical vulnerability in the appliances to compromise …

Two-Year Long DangerousSavanna Campaign Attack Financial and Banking Institutions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Over the past two years, a persistent malicious campaign dubbed “DangerousSavanna” has targeted major financial institutions and insurance companies. In Central and Western Africa, more than 85% of financial institutions …

Hackers Using Red Teaming Tools to Connect with C&C Servers After an Initial Compromise

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cyble Research and Intelligence Labs (CRIL) identified that attackers are using Red Teaming Tools for cyberattacks. During the routine threat hunting process, researchers noticed instances of the PowerShell Empire command …

North Korean APT Group Attacking Corporate Networks of Energy Providers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Lazarus (APT38), the North Korean APT group is attacking the corporate networks of energy providers by exploiting the VMWare Horizon servers. While the corporate networks of energy providers that were …

GIFShell – New Attack Method That Allows Attackers to Steal Data Using Microsoft Teams GIFs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybersecurity consultant and pentester, Bobby Rauch recently discovered that threat actors are abusing Microsoft Teams by executing phishing attacks using a new attack technique known as GIFshell. Using GIFs …