A fraudulent site resembling the official WinRar distribution platform is spreading malware. The fake website, win-rar[.]co, utilizes typosquatting to trick users who mistype the URL. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Category: Cyware News – Latest Cyber News
New Widespread Extension Trojan Malware Campaign
The malware attack flow involves luring users with fake websites imitating popular downloads, then executing PowerShell scripts to download and install malicious extensions that steal private data and control browser settings. This article has been indexed from Cyware News –…
‘0.0.0.0 Day’ Flaw Puts Chrome, Firefox, Mozilla Browsers at RCE Risk
An open source security firm, Oligo Security, has discovered a vulnerability called “0.0.0.0 Day” that allows attackers to execute code on web browsers like Chrome, Safari, and Firefox, potentially leading to data theft and malware. This article has been indexed…
Cisco Warns of Critical RCE Zero-Days in End of Life IP Phones
Cisco has issued a warning about critical remote code execution zero-days affecting the web-based management interface of the Small Business SPA 300 and SPA 500 series IP phones, which are no longer supported. This article has been indexed from Cyware…
CISA Warns of Hackers Abusing Cisco Smart Install Feature
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has advised organizations to disable the legacy Cisco Smart Install (SMI) feature due to recent attacks exploiting it. This article has been indexed from Cyware News – Latest Cyber News Read the…
Hazy Issue in Entra ID Allows Privileged Users to Become Global Admins
An issue with Microsoft’s Entra ID identity and access management service could allow a hacker with admin-level access to gain global administrator privileges within an organization’s cloud environment. This article has been indexed from Cyware News – Latest Cyber News…
Russian Spies Hacked UK Government Systems Earlier This Year, Stole Data and Emails
Russian spies hacked UK government systems earlier this year, stealing data and emails in a nation-state attack. The breach targeted the Home Office’s systems, which had not been previously reported. This article has been indexed from Cyware News – Latest…
How to Weaponize Microsoft Copilot for Cyberattackers
Copilot is an AI-based chatbot used by enterprises to streamline tasks, but it can also be manipulated by attackers to steal data and conduct phishing scams without leaving a trace. This article has been indexed from Cyware News – Latest…
US Offers $10 Million for Information on Iranian Hackers Behind CyberAv3ngers Water Utility Attacks
The U.S. State Department has offered a $10 million reward for information on six Iranian government hackers who allegedly targeted U.S. water utilities last fall. These individuals were previously sanctioned for targeting critical infrastructure. This article has been indexed from…
Number of Incidents Affecting GitHub, Bitbucket, GitLab, and Jira Continues to Rise
The number of incidents affecting GitHub, Bitbucket, GitLab, and Jira is on the rise, leading to outages, human errors, cyberattacks, data breaches, ransomware, security vulnerabilities, and data loss for DevSecOps teams, according to GitProtect.io. This article has been indexed from…
Consumer Reports Study Finds Data Removal Services are Often Ineffective
Consumer Reports cautioned against relying too heavily on data removal services, as many fall short of expectations despite high costs. The study highlighted the need for better protection of consumer data and stricter regulations on data brokers. This article has…
New Ransomware Groups Emerge Despite Crackdowns
According to a report by Rapid7, a total of 21 new or rebranded groups have emerged since January 2024, alongside existing groups like LockBit, which has survived law enforcement crackdowns. This article has been indexed from Cyware News – Latest…
Russia’s Kursk Region Suffers ‘Massive’ DDoS Attack Amid Ukraine Offensive
Kursk region in Russia was hit by a large-scale DDoS attack during Ukraine’s cross-border incursion, affecting government, business websites, and critical services. NetBlocks reported disruptions in internet connectivity linked to the attacks. This article has been indexed from Cyware News…
Ransomware Drill Targets Healthcare in Operation 911
A ransomware drill focused on healthcare called Operation 911 was conducted at Black Hat USA 2024 by Las Vegas law enforcement, the FBI, and Semperis. During the drill, a simulated ransomware attack targeted a fictitious hospital. This article has been…
RustScan: Open-Source Port Scanner
RustScan is a fast and versatile open-source port scanner with Adaptive Learning for optimal performance. It can scan all 65,000 ports in 3 seconds and supports a scripting engine for customization. This article has been indexed from Cyware News –…
OpenWrt Dominates, but Vulnerabilities Persist in OT/IoT Router Firmware
A Forescont study showed that outdated software components in OT/IoT cellular routers and SOHO routers are linked to known vulnerabilities, with an average of 20 exploitable n-days affecting the kernel in widely used firmware images. This article has been indexed…
Critical Progress WhatsUp Gold RCE Flaw Now Under Active Exploitation
Threat actors are actively exploiting a critical remote code execution vulnerability in Progress WhatsUp Gold 23.1.2 and older versions, identified as CVE-2024-4885 with a CVSS v3 score of 9.8. This article has been indexed from Cyware News – Latest Cyber…
Alibaba’s T-Head C910 RISC-V Chips Found Vulnerable to GhostWrite Attack
Alibaba’s T-Head C910 RISC-V CPUs have been found to have serious security flaws by computer security researchers at the CISPA Helmholtz Center for Information Security in Germany. This article has been indexed from Cyware News – Latest Cyber News Read…
Cloud Storage From Microsoft, Google Used in Malware Attacks
Symantec’s Threat Hunter Team has observed various espionage operations utilizing cloud services, like the backdoors GoGra and Grager targeting organizations in South Asia, South East Asia, Taiwan, Hong Kong, and Vietnam. This article has been indexed from Cyware News –…
FBI and CISA Uncover Updated TTPs and Activity of the BlackSuit Ransomware Group
The BlackSuit ransomware group gains access through phishing campaigns, RDP, and vulnerability exploits, using tools like Chisel and Mimikatz for communication and credential theft. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…