Zeek is an open-source network analysis framework. Unlike an active security device such as a firewall, Zeek operates on a versatile ‘sensor’ that can be a hardware, software, virtual, or cloud platform. This article has been indexed from Cyware News…
Category: Cyware News – Latest Cyber News
Update: CISA Warns Chemical Facilities of Potential Data Theft
Although there was no evidence of data theft or lateral movement, the agency’s investigation revealed that unauthorized access to various sensitive information, including security plans and user accounts, may have occurred. This article has been indexed from Cyware News –…
Russian Hackers Target Ukraine with XWorm RAT Malware Payload
Cyble Research and Intelligence Labs (CRIL) researchers have discovered that a Russia-linked threat group known as UAC-0184 is targeting Ukraine using the XWorm remote access trojan (RAT). This article has been indexed from Cyware News – Latest Cyber News Read…
Authentication Bypasses in MOVEit Transfer and MOVEit Gateway
A critical security vulnerability, CVE-2024-5806, has been found in MOVEit Transfer, a popular file transfer software. The vulnerability allows attackers to bypass authentication checks and gain administrative access by sending manipulated requests. This article has been indexed from Cyware News…
Report: Cloud Breaches Impact Nearly Half of Organizations
According to the Thales 2024 Cloud Security Study, 44% of organizations have experienced a cloud data breach, with 14% reporting incidents in the past year. Human error and misconfigurations were the top root causes, affecting 31% of cases. This article…
Four FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree
Ta Van Tai, Nguyen Viet Quoc, Nguyen Trang Xuyen, and Nguyen Van Truong are accused of conducting phishing campaigns and supply chain compromises to orchestrate cyberattacks and steal millions of dollars. This article has been indexed from Cyware News –…
FBI Warns of Fake Law Firms Targeting Crypto Scam Victims
The FBI has issued a warning about cybercriminals pretending to be law firms and lawyers offering cryptocurrency recovery services. These scammers target victims of investment scams, stealing funds and personal information. This article has been indexed from Cyware News –…
Android RAT SpyMax Targets Telegram Users
SpyMax does not require the targeted device to be rooted, making it easier for threat actors to cause damage. Once installed, SpyMax gathers personal information from the infected device without user consent and sends it to a remote threat actor.…
P2PInfect Botnet Targets Redis Servers with New Ransomware Module
P2PInfect, a previously dormant peer-to-peer malware botnet, has recently become active and is now targeting Redis servers. The botnet has introduced new features like cron-based persistence mechanisms and SSH lockout. This article has been indexed from Cyware News – Latest…
SnailLoad Attack can Exploit Remote Network Latency Measurements to Infer User Activity
Unlike previous methods, SnailLoad doesn’t require a person-in-the-middle attack or hacking the target’s Wi-Fi. Instead, it lets a remote attacker infer websites and content viewed by a user without accessing their network traffic directly. This article has been indexed from…
Is the Cybersecurity Industry Ready for AI?
AI is not new to cybersecurity, but generative AI is causing concern as it impacts organizations. A study found that AI-generated threats have already affected 75% of organizations, yet 60% are not prepared to handle AI-based attacks. This article has…
Manufacturing Cybersecurity at Heart of New White House Guidance
The U.S. Department of Energy has released a new framework of best practices for securing clean energy cyber supply chains, focusing on key technologies used in managing electricity, oil, and natural gas systems. This article has been indexed from Cyware…
New Attack Uses MSC Files and Windows XSS Flaw to Breach Networks
A new command execution technique called “GrimResource” has been discovered that leverages a combination of specially crafted Microsoft Saved Console (MSC) files and an unpatched Windows XSS flaw. This article has been indexed from Cyware News – Latest Cyber News…
Boolka Group’s Modular Trojan BMANAGER Exposed
The Boolka group is responsible for deploying advanced malware and conducting web attacks. They have been exploiting vulnerabilities using SQL injection attacks since 2022, targeting websites in various countries. This article has been indexed from Cyware News – Latest Cyber…
Hackers Create Rogue Admin Accounts via Backdoored WordPress Plugins
Multiple WordPress plugins have been found to contain a backdoor that injects malicious code. This code allows attackers to create unauthorized administrator accounts, enabling them to perform malicious actions. This article has been indexed from Cyware News – Latest Cyber…
Ransomhub’s Latest Attack Raises Alarms for Industrial Control Systems (ICS) Security
The Ransomhub ransomware group’s modus operandi involves encrypting data and leveraging access to SCADA systems to disrupt essential functions, as evidenced in their recent breach. This article has been indexed from Cyware News – Latest Cyber News Read the original…
CERT-UA Warns of Malware Campaign Conducted by Threat Actor UAC-0006
SmokeLoader acts as a loader for other malware, once it is executed it will inject malicious code into the currently running explorer process (explorer.exe) and download another payload to the system. This article has been indexed from Cyware News –…
SingCERT Warns Critical Vulnerabilities Found in Multiple WordPress Plugins
Security updates have been promptly released to address these critical vulnerabilities in multiple WordPress plugins. SingCERT reported 9 critical plugin vulnerabilities and shared the mitigation strategies to avoid exploration by threat actors. This article has been indexed from Cyware News…
Digital ID Adoption: Implementation and Security Concerns
As digital transformation accelerates, understanding how businesses are preparing for and implementing digital ID technologies is crucial for staying ahead in security and efficiency, according to Regula. This article has been indexed from Cyware News – Latest Cyber News Read…
Update: Threat Actors Created Rogue VMs to Evade Detection During December 2023 Attack on MITRE
According to the new update, threat actors exploited zero-day flaws in Ivanti Connect Secure (ICS) and created rogue virtual machines (VMs) within the organization’s VMware environment. This article has been indexed from Cyware News – Latest Cyber News Read the…