Lumen researchers identified the bug and reported it to Versa in June, with active exploitation by Volt Typhoon observed since at least June. The attackers use a Web shell called VersaMem to capture credentials and monitor system activity. This article…
Category: Cyware News – Latest Cyber News
South Korean APT Group Exploits WPS Office Zero-Day for Espionage
ESET uncovered a new cyber-espionage campaign tied to a South Korean APT group that used a remote code execution (RCE) vulnerability in WPS Office for Windows to deploy a custom backdoor called “SpyGlace.” This article has been indexed from Cyware…
Report: A Third of Organizations Suffer SaaS Data Breaches Last Year
According to AppOmni, one-third of organizations experienced SaaS data breaches last year due to a lack of visibility and control, as revealed by a survey of 644 enterprises globally. This article has been indexed from Cyware News – Latest Cyber…
Lateral Movement: Clearest Sign of Unfolding Ransomware Attack
Lateral movement is a key indicator of ransomware attacks, with 44% of attacks being spotted during this phase, as reported by Barracuda Networks. Additionally, file modifications and off-pattern behavior were also significant triggers for detection. This article has been indexed…
Google Tags a Tenth Chrome Zero-Day as Exploited This Year
The vulnerability, tracked as CVE-2024-7965 and reported by a security researcher known as TheDog, involved a bug in the compiler backend that could allow remote attackers to exploit heap corruption through a crafted HTML page. This article has been indexed…
India’s Critical Infrastructure Suffers Spike in Cyberattacks
India is experiencing a rise in cyberattacks on its critical infrastructure, particularly in the financial and government sectors, prompting the Reserve Bank of India to issue warnings about the need for enhanced cybersecurity measures. This article has been indexed from…
New Cheana Stealer Threat Targets VPN Users Across Multiple Operating Systems
This campaign is notable for its malicious apps for Windows, Linux, and macOS users. The attackers have created different versions of Cheana Stealer for each OS to widen their attack surface. This article has been indexed from Cyware News –…
Two Strategies to Protect Your Business From the Next Large-Scale Tech Failure
Diversifying suppliers and systems can help minimize risks, as shown by corporations that purchase networking equipment from multiple vendors to prevent total network failure in case of vendor issues. This article has been indexed from Cyware News – Latest Cyber…
SonicWall Patches Critical Flaw Affecting its Firewalls (CVE-2024-40766)
SonicWall has addressed a critical vulnerability (CVE-2024-40766) in its next-gen firewalls, which could be exploited by remote attackers to gain unauthorized access and potentially crash the devices. This article has been indexed from Cyware News – Latest Cyber News Read…
Top Universities to Battle in Cybersecurity at UNSW’s Upcoming Australian Cybersecurity Games
Top universities in Australia will compete in the Australian Cybersecurity Games at UNSW from September 2-30, 2024. This event, organized by SECedu, features cybersecurity experts collaborating with leading universities like UNSW. This article has been indexed from Cyware News –…
NASA IV&V Facility Expands Cybersecurity Work and Educational Outreach
NASA’s IV&V Facility is expanding its cybersecurity services to enhance the safety of its missions. This initiative includes incorporating cybersecurity assessments into their traditional roles of software examination. This article has been indexed from Cyware News – Latest Cyber News…
Uber Hit With $324m GDPR Fine
The Dutch Data Protection Authority (AP) announced the €290m ($324m) fine yesterday, claiming that it stems from the same concerns that have led to years-long legal wranglings between the EU and US. This article has been indexed from Cyware News…
Nuclei: Open-Source Vulnerability Scanner
Nuclei is an open-source vulnerability scanner known for its speed and customizable YAML-based templates. It offers flexibility in security checks by allowing customization of templates to send requests to multiple targets. This article has been indexed from Cyware News –…
Zimbabwe Government Places Priority on Cybersecurity Training for Public Servants
Over 100 government officials recently completed a comprehensive cybersecurity training program, focusing on global cybersecurity trends, security standards, and data protection governance. This article has been indexed from Cyware News – Latest Cyber News Read the original article: Zimbabwe Government…
Update: Researcher Publishes PoC Exploit for Zero-Click Windows RCE Threat
A security researcher has published a proof-of-concept exploit for a critical zero-click vulnerability, CVE-2024-38063, in Windows TCP/IP. This flaw allows remote code execution on Windows systems with IPv6 enabled, affecting millions of devices. This article has been indexed from Cyware…
Researchers Warn of Text Scams That Send Drivers Fake Bills for Highway Tolls
Cybercriminals are sending malicious SMS messages demanding payment for non-existent charges across Illinois, Florida, North Carolina, and Washington. These scams imitate state authorities and provide links to fake payment websites to steal data. This article has been indexed from Cyware…
Researchers Discover Over 20 Supply Chain Vulnerabilities in MLOps Platforms
Inherent vulnerabilities stem from the underlying formats and processes of the technology, allowing attackers to exploit features like automatic code execution in ML models and certain dataset formats. This article has been indexed from Cyware News – Latest Cyber News…
The Changing Dynamics of Ransomware as Law Enforcement Strikes
Despite law enforcement actions disrupting major ransomware operations, the long-term impact remains uncertain as groups adapt and evolve. Ransomware-as-a-Service (RaaS) collectives are facing growing competition to attract affiliates. This article has been indexed from Cyware News – Latest Cyber News…
McDonald’s Instagram Hacked by Crypto Scammers to Steal $700,000
The scammers targeted both McDonald’s Instagram and a senior marketing director’s Twitter account, leveraging the association between Grimace, McDonald’s iconic purple mascot, and the brand to add credibility to their scam. This article has been indexed from Cyware News –…
Pidgin Users Beware! Malicious Plugin Discovered with Keylogger
The plugin, which was added to Pidgin’s third-party plugins list on July 6th, was flagged by a user, 0xFFFC0000, on August 16th, who reported suspicious behavior, including the unauthorized capture and sharing of screenshots. This article has been indexed from…