Ronin Network was hacked, resulting in the withdrawal of $12 million by “white hat” hackers who returned the stolen funds. The hackers exploited an undocumented vulnerability on the Ronin bridge, withdrawing 4,000 ETH and 2 million USDC. This article has…
Category: Cyware News – Latest Cyber News
Researcher Discovers Downgrade Attack Abusing Windows Update Process
A security researcher at SafeBreach demonstrated at the Black Hat 2024 conference that two zero-day vulnerabilities can be exploited in downgrade attacks to revert fully updated Windows systems back to older versions, reintroducing vulnerabilities. This article has been indexed from…
SEC Ends Probe Into MOVEit Attacks Impacting 95 Million People
The SEC has closed its investigation into Progress Software’s handling of a zero-day flaw in MOVEit Transfer. Progress Software announced in a recent SEC filing that no enforcement action will be recommended by the Division of Enforcement. This article has…
Roundcube Flaws Allow Easy Email Account Compromise (CVE-2024-42009, CVE-2024-42008)
Roundcube’s vulnerabilities (CVE-2024-42009, CVE-2024-42008) allow attackers to compromise email accounts easily. The two cross-site scripting flaws could lead to the theft of emails, contacts, and passwords, and the sending of unauthorized emails. This article has been indexed from Cyware News…
Microsoft 365 Anti-Phishing Feature can be Bypassed with CSS
A flaw in Microsoft 365’s anti-phishing feature allows attackers to hide the ‘First Contact Safety Tip’ warning in Outlook emails using CSS, increasing the risk of users falling for malicious emails. This article has been indexed from Cyware News –…
Report: Email Attacks Skyrocket 293%
According to Acronis, ransomware remains a top threat for SMBs, especially in critical sectors like government and healthcare, where 10 new ransomware groups conducted 84 cyberattacks globally in Q1 2024. This article has been indexed from Cyware News – Latest…
Federal Watchdog Urges EPA to Develop Comprehensive Cyber Strategy to Protect Water Systems
The U.S. Government Accountability Office is urging the Environmental Protection Agency (EPA) to develop a comprehensive strategy to protect the nation’s drinking and wastewater systems from cyber threats. This article has been indexed from Cyware News – Latest Cyber News…
NHS Software Supplier Advanced Faces $7.6 Million Fine Over Ransomware Attack Failings
NHS software supplier Advanced faces a hefty fine of over £6 million (~$7.6 Million) for failing to protect personal information during a ransomware attack that impacted the National Health Service in the UK. This article has been indexed from Cyware…
Threat Actors Announced Doubleface Ransomware, Claims Fully Undetectable
Threat actors have introduced Doubleface ransomware, claiming it to be fully undetectable by major antivirus software. The ransomware utilizes a unique algorithm with AES-128 and RSA-4096 encryption, making decryption difficult without the right key. This article has been indexed from…
Ransomware Swells Despite Collective Push to Curb Attacks
Rapid7 researchers noted over 2,570 attacks in the first half of 2024, equating to around 14 attacks daily. The number of ransomware groups posting on data leak sites surged 67% compared to the previous year. This article has been indexed…
Cyber Training Organization Pledges $15 Million in Education Programs
EC-Council, a cyber certification organization, has pledged $15 million in scholarships to support over 50,000 students in cybersecurity programs. The goal is to help students earn industry credentials and enhance their cybersecurity skills. This article has been indexed from Cyware…
Abnormal Security Raises $250M on $5.1B Valuation to Enhance AI-Driven Cyber Protection
Abnormal Security, an AI-driven cybersecurity company, has raised $250 million in funding, valuing the company at $5.1 billion. The funding will support their mission of using AI to protect against cybercrime by understanding human behavior. This article has been indexed…
North Korean Hackers Leverage Malicious NPM Packages for Initial Access
North Korean hackers, identified as Moonstone Sleet, have been distributing malicious JavaScript packages on the npm registry to infect Windows systems. The two packages, harthat-api and harthat-hash, were uploaded on July 7, 2024. This article has been indexed from Cyware…
Chameleon Malware Now Targeting Employees Masquerading as a CRM app
Researchers have revealed a new tactic used by threat actors behind the Chameleon Android banking trojan, targeting Canadian users with a disguised Customer Relationship Management (CRM) app. This article has been indexed from Cyware News – Latest Cyber News Read…
Replacement for Action Fraud, UK’s Cybercrime Reporting Service, Delayed Again Until 2025
The new service, known as the Fraud and Cyber Crime Reporting and Analysis System (FCCRAS), will enhance the reporting process by allowing users to upload additional information like metadata, screenshots, and images. This article has been indexed from Cyware News…
The Role of AI in Cybersecurity Operations
AI can analyze data quickly, detect patterns of malicious behavior, and automate routine tasks like alert triaging and log analysis. However, human oversight is still necessary to ensure the accuracy and relevance of AI-generated insights. This article has been indexed…
CISA Adds Microsoft COM for Windows Bug to its Known Exploited Vulnerabilities Catalog
The vulnerability, tracked as CVE-2018-0824, arises from the deserialization of untrusted data. Microsoft warns that this flaw could lead to remote code execution if exploited by a specially crafted file or script. This article has been indexed from Cyware News…
Attackers Use Multiple Techniques to Bypass Reputation-Based Security
Attackers have developed multiple techniques to bypass reputation-based security controls like Windows Smart App Control, allowing them initial access to environments without triggering alerts. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Bloody Wolf Strikes Organizations in Kazakhstan with STRRAT Commercial Malware
The STRRAT malware, sold for $80, allows attackers to take control of computers and steal data. Attackers use phishing emails pretending to be from government agencies to trick victims into downloading malicious files. This article has been indexed from Cyware…
Sneaky SnakeKeylogger Slithers Into Windows Email Inboxes
SnakeKeylogger, also known as KrakenKeylogger, is a malicious software targeting Windows users. It logs keystrokes, steals credentials, and takes screenshots, allowing cybercriminals to capture sensitive information. This article has been indexed from Cyware News – Latest Cyber News Read the…