Paris 2024 Olympics are expected to face a significant increase in cyber threats, with IDC predicting the Games will encounter a complex threat landscape and a large ecosystem of threat actors. This article has been indexed from Cyware News –…
Category: Cyware News – Latest Cyber News
Ransomware Leak Site Posts Jumped 20% in Q2
According to Reliaquest, ransomware incidents surged in Q2, with 1,237 organizations listed on data leak sites, a 20% increase from Q1. U.S. businesses were hit the hardest, accounting for over half of the victims. This article has been indexed from…
ChatGPTriage: How can CISOs See and Control Employees’ AI Use?
Building a database of AI destinations and capturing employee activity are essential steps in gaining visibility. Monitoring user prompts, responses, and data exchanged with AI models is crucial for understanding employee behavior. This article has been indexed from Cyware News…
JPCERT/CC Warns of MirrorFace Attacks Against Japanese Organizations
Initially, the targets of MirrorFace were media, political organizations, think tanks, and universities, but by 2023, the focus shifted to manufacturers and research institutions. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Well-Established Cybercriminal Ecosystem Blooms in Iraq
Researchers have uncovered a well-established cybercriminal ecosystem connected to a Telegram bot, with over 90,000 Arabic messages dating back to 2022, enabling a sophisticated network offering social media manipulation and financial theft services. This article has been indexed from Cyware…
Kubernetes Exposed: Exploiting the Kubelet API
Real-world attacks have been observed where attackers target the Kubelet API to steal secrets and gain control over clusters. Various techniques, such as environment discovery, network scanning, and secrets collection, have been utilized by hackers. This article has been indexed…
Facebook Ads for Windows Desktop Themes Push Info-Stealing Malware
The threat actors take out ads for Windows themes, free game downloads, and software cracks for apps like Photoshop and Microsoft Office. These ads are shared through new or hijacked Facebook business pages. This article has been indexed from Cyware…
HR-Themed Phishing Campaign Targets Employees to Steal Microsoft Credentials
In a recent phishing attempt, Cofense researchers spotted an email disguised as a communication from a company’s HR department, prompting recipients to review an updated employee handbook. This article has been indexed from Cyware News – Latest Cyber News Read…
SEXi Ransomware Rebrands as ‘APT Inc.,’ Retains Prior Extortion Tactics
The cybercrime group known as SEXi ransomware, now operating as APT Inc., has been targeting organizations since February. They use a leaked Babuk encryptor for VMware ESXi servers and LockBit 3 encryptor for Windows servers. This article has been indexed…
Void Banshee Targets Windows Users Through MSHTML Flaw to Spread Atlantida Stealer
The vulnerability, CVE-2024-38112, was observed by Trend Micro in May 2024, being exploited as part of a multi-stage attack chain using internet shortcut files. The campaign has been active throughout 2024. This article has been indexed from Cyware News –…
DNS Hijacks Target Cryptocurrency Platforms Registered With Squarespace
A coordinated wave of DNS hijacking attacks recently targeted decentralized finance (DeFi) cryptocurrency domains. Attackers used the Squarespace registrar to redirect visitors to phishing sites that aimed to steal cryptocurrency and NFTs. This article has been indexed from Cyware News…
Risk Related to Non-Human Identities: Believe the Hype, Reject the FUD
The hype surrounding non-human identities (NHIs) has recently increased due to the risk they pose, with breaches causing fear, uncertainty, and doubt. With NHIs outnumbering human identities, the associated risks need to be addressed. This article has been indexed from…
Realm: Open-Source Adversary Emulation Framework
Realm is an open-source adversary emulation framework focused on scalability, reliability, and automation. It features a custom interpreter in Rust, enabling the creation of complex TTPs as code. This article has been indexed from Cyware News – Latest Cyber News…
Report: Hackers Use PoC Exploits in Attacks 22 Minutes After Release
Threat actors rapidly weaponize proof-of-concept exploits in real attacks, often within 22 minutes of their public release, as per Cloudflare’s 2024 Application Security report covering May 2023 to March 2024. This article has been indexed from Cyware News – Latest…
New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns
The deployment of BugSleep is a significant development in MuddyWater’s tactics, targeting various sectors with phishing emails leading to the distribution of Remote Management Tools and the BugSleep malware. This article has been indexed from Cyware News – Latest Cyber…
Over 4000 Domains Used By FIN7 Actors Mimic Popular Brands
By targeting famous brands like tech firms and financial industry players, FIN7 actors deploy redirects, multi-stage phishing campaigns, and impersonate open directories to spread malware. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Malvertising Campaign Lures Mac Users with Fake Microsoft Teams Ad
The malicious ad campaign employed advanced filtering techniques to evade detection and appeared as a top search result for Microsoft Teams. It redirected users through deceptive links despite displaying microsoft.com as its URL. This article has been indexed from Cyware…
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
The US Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team exercise at an unnamed federal agency in 2023, exposing serious security failings that left critical assets vulnerable. This article has been indexed from Cyware News – Latest Cyber…
Zeus Banking Malware Player Gets Nine-Year Prison Term
Vyacheslav Igorevich Penchukov, a criminal who used Zeus and IcedID malware to steal millions of dollars from victims, has been sentenced to almost a decade in prison and ordered to pay $73 million in restitution by a Nebraska federal court…
Netgear Warns Users to Patch Auth Bypass, XSS Router Flaws
Netgear released firmware patches to fix stored XSS and authentication bypass flaws in the XR1000 Nighthawk gaming router and CAX30 Nighthawk AX6 6-Stream cable modem routers, respectively. This article has been indexed from Cyware News – Latest Cyber News Read…