Cytactic, an Israel-based provider of a platform pioneering cyber crisis readiness and management, raised $16M in a seed funding round led by Evolution Equity Partners. It intends to use the funds to expand operations and development efforts. This article has…
Category: Cyware News – Latest Cyber News
Veeam Flaw Becomes Ransomware Vector a Year After Patching
A new ransomware gang known as EstateRansomware is exploiting a Veeam vulnerability that was patched over a year ago to spread file-encrypting malware and demand ransom payments. This article has been indexed from Cyware News – Latest Cyber News Read…
Exploring Compiled V8 JavaScript Usage in Malware
Compiled V8 JavaScript in Google’s engine converts JavaScript into low-level bytecode, making analysis and detection difficult. Attacks using this bytecode ensure compatibility with the V8 engine for successful execution. This article has been indexed from Cyware News – Latest Cyber…
BunkerWeb: Open-Source Web Application Firewall (WAF)
The genesis of BunkerWeb came from the need to apply security practices manually every time a web application was put online. The solution meets global needs with a modular architecture allowing for extensions. This article has been indexed from Cyware…
ViperSoftX Info-Stealing Malware Being Distributed Through Fake Ebooks
Originally detected in 2020, the ViperSoftX malware now incorporates more sophisticated evasion tactics by using the Common Language Runtime (CLR) to run PowerShell commands within AutoIt scripts distributed through pirated eBook copies. This article has been indexed from Cyware News…
Critical GitLab Bug Lets Attackers Run Pipelines as Other Users
The vulnerability impacts all GitLab CE/EE versions from 15.8 to 16.11.6, 17.0 to 17.0.4, and 17.1 to 17.1.2. Under certain circumstances that GitLab has yet to disclose, attackers can exploit it to trigger a new pipeline as an arbitrary user.…
Risk Escalates as Communication Channels Proliferate
A survey by data security company Kiteworks reveals that around 60% of organizations struggle to track their information once it leaves through communication channels like email. This article has been indexed from Cyware News – Latest Cyber News Read the…
Russian Researchers Identify Alleged Ukrainian Developer of Malicious Remote Access Tool
Researchers have identified the developer of a malicious remote access tool used in attacks on Russian organizations. Known as Mr. Burns, the developer has been active in darknet forums since 2010, creating harmful versions of popular tools. This article has…
Huione Guarantee Exposed as a $11 Billion Marketplace for Cybercrime
Huione Guarantee, an online marketplace, is reportedly being used for money laundering, particularly in “pig butchering” investment scams. Victims are tricked into investing in fake sites with high returns. This article has been indexed from Cyware News – Latest Cyber…
Singapore to Phase Out One-Time Passwords in Banking
This decision comes after a warning from the Singapore Police about phishing scams targeting bank customers. Scammers have managed to defraud individuals of over S$600,000 ($445,000) in just a few weeks. This article has been indexed from Cyware News –…
Google Advanced Protection Program gets passkeys for high-risk users
Google announced that passkeys are now available for high-risk users enrolling in the Advanced Protection Program, ensuring top-notch account security. The program offers free protection for accounts of high-risk individuals. This article has been indexed from Cyware News – Latest…
Diversifying Cyber Teams to Tackle Complex Threats
A diverse workforce brings different perspectives, experiences, and problem-solving approaches to the table, enabling teams to identify vulnerabilities and develop more robust defense strategies. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
New Malware Campaign Targeting Spanish Language Victims and the Mining Sector
Poco RAT was first categorized on February 7, 2024, and has since targeted customers in multiple sectors, with Mining being the primary focus. One company was the most targeted, responsible for 67% of the total volume of campaigns. This article…
Universal Code Execution by Chaining Messages in Browser Extensions
Cybersecurity analyst Eugene Lim discovered the risk posed by this vulnerability, which hackers can exploit by chaining messaging APIs in browsers and extensions, bypassing security measures like the Same Origin Policy. This article has been indexed from Cyware News –…
Citrix Fixed Critical and High-Severity Bugs in NetScaler Product
The most severe flaw is an improper authorization issue (CVE-2024-6235) with a CVSS score of 9.4, allowing attackers to access sensitive information through the NetScaler Console IP. This article has been indexed from Cyware News – Latest Cyber News Read…
VMware Fixed Critical SQL Injection Flaw in Aria Automation Platform
VMware has fixed a high-severity SQL-Injection vulnerability, known as CVE-2024-22280, in its Aria Automation platform. This flaw could allow authenticated users to execute unauthorized database operations through specially crafted SQL queries. This article has been indexed from Cyware News –…
US Busts Russian AI-Driven Disinformation Operation
The Department of Justice investigated around 1,000 accounts on social media platform X, previously Twitter, which were used by the Kremlin to spread pro-Moscow propaganda created by the AI-driven Meliorator software. This article has been indexed from Cyware News –…
Regional Transport Office Themed Phishing Campaign Targets Android Users In India
Phishing messages impersonating the Regional Transport Office have been circulating since 2024, claiming traffic violations and prompting users to download a malicious APK named “VAHAN PARIVAHAN.apk”. This article has been indexed from Cyware News – Latest Cyber News Read the…
As CISOs Grapple with the C-Suite, Job Satisfaction Takes a Hit
Research shows that 75% of CISOs are considering a job change due to various challenges and pressures. CISOs often face accountability for cyber incidents and compliance failures, leading to discontent. This article has been indexed from Cyware News – Latest…
US Senate NDAA 2025 Boosts Military Cyber and AI Initiatives
The Senate Armed Services Committee presented the NDAA for fiscal year 2025, totaling $923.3 billion for defense funding. This includes $878.4 billion for the Pentagon and $33.4 billion for national security programs under the Department of Energy. This article has…