New Linux malware WolfsBane and FireWood have been linked to Gelsemium APT, a cyber-espionage group targeting critical systems This article has been indexed from www.infosecurity-magazine.com Read the original article: Linux Malware WolfsBane and FireWood Linked to Gelsemium APT
Category: www.infosecurity-magazine.com
Palo Alto Networks Confirms New Zero-Day Being Exploited by Threat Actors
The security provider has elevated its warning about a vulnerability affecting firewall management interfaces after observing active exploitation This article has been indexed from www.infosecurity-magazine.com Read the original article: Palo Alto Networks Confirms New Zero-Day Being Exploited by Threat Actors
Bitfinex Hacker Jailed for Five Years Over Billion Dollar Crypto Heist
Ilya Lichtenstein hacked into the cryptocurrency exchange in 2016 and stole around 120,000 bitcoins This article has been indexed from www.infosecurity-magazine.com Read the original article: Bitfinex Hacker Jailed for Five Years Over Billion Dollar Crypto Heist
watchTowr Finds New Zero-Day Vulnerability in Fortinet Products
The new vulnerability was named “FortiJump Higher” due to its similarity with the “FortiJump” vulnerability discovered in October This article has been indexed from www.infosecurity-magazine.com Read the original article: watchTowr Finds New Zero-Day Vulnerability in Fortinet Products
Ransomware Groups Use Cloud Services For Data Exfiltration
SentinelOne described some of ransomware groups’ favorite techniques for targeting cloud services This article has been indexed from www.infosecurity-magazine.com Read the original article: Ransomware Groups Use Cloud Services For Data Exfiltration
O2’s AI Granny Outsmarts Scam Callers with Knitting Tales
This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from www.infosecurity-magazine.com Read the original article: O2’s AI Granny Outsmarts Scam Callers with Knitting Tales
Microsoft Power Pages Misconfiguration Leads to Data Exposure
Misconfigurations in Microsoft Power Pages granting excessive access permissions expose sensitive data, risking PII to unauthorized users This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Power Pages Misconfiguration Leads to Data Exposure
Sitting Ducks DNS Attacks Put Global Domains at Risk
Over 1 million domains are vulnerable to “Sitting Ducks” attack, which exploits DNS misconfigurations This article has been indexed from www.infosecurity-magazine.com Read the original article: Sitting Ducks DNS Attacks Put Global Domains at Risk
Massive Telecom Hack Exposes US Officials to Chinese Espionage
The FBI and CISA have confirmed that US officials’ private communications have been compromised This article has been indexed from www.infosecurity-magazine.com Read the original article: Massive Telecom Hack Exposes US Officials to Chinese Espionage
API Security in Peril as 83% of Firms Suffer Incidents
Over 80% of UK organizations suffered an API security incident in the past year, with each costing over £400,000 This article has been indexed from www.infosecurity-magazine.com Read the original article: API Security in Peril as 83% of Firms Suffer Incidents
Bank of England U-turns on Vulnerability Disclosure Rules
The UK’s financial regulators have discarded plans to force critical suppliers to disclose new vulnerabilities This article has been indexed from www.infosecurity-magazine.com Read the original article: Bank of England U-turns on Vulnerability Disclosure Rules
Hive0145 Targets Europe with Advanced Strela Stealer Campaigns
Hive0145 is targeting Spain, Germany, Ukraine with Strela Stealer malware in invoice phishing tactic This article has been indexed from www.infosecurity-magazine.com Read the original article: Hive0145 Targets Europe with Advanced Strela Stealer Campaigns
AI Threat to Escalate in 2025, Google Cloud Warns
2025 could see our biggest AI fears materialize, according to a Google Cloud forecast report This article has been indexed from www.infosecurity-magazine.com Read the original article: AI Threat to Escalate in 2025, Google Cloud Warns
Lazarus Group Uses Extended Attributes for Code Smuggling in macOS
Lazarus APT has been found smuggling malware onto macOS devices using custom extended attributes, evading detection This article has been indexed from www.infosecurity-magazine.com Read the original article: Lazarus Group Uses Extended Attributes for Code Smuggling in macOS
Amazon MOVEit Leaker Claims to Be Ethical Hacker
An individual who posted data allegedly stolen via MOVEit from Amazon and other big-name firms claims not to be malicious This article has been indexed from www.infosecurity-magazine.com Read the original article: Amazon MOVEit Leaker Claims to Be Ethical Hacker
Microsoft Fixes Four More Zero-Days in November Patch Tuesday
Microsoft has addressed four zero-day vulnerabilities this month, two of which have been exploited This article has been indexed from www.infosecurity-magazine.com Read the original article: Microsoft Fixes Four More Zero-Days in November Patch Tuesday
TA455’s Iranian Dream Job Campaign Targets Aerospace with Malware
The TA455 phishing campaign used fake job offers on LinkedIn to deploy malware This article has been indexed from www.infosecurity-magazine.com Read the original article: TA455’s Iranian Dream Job Campaign Targets Aerospace with Malware
Phishing Tool GoIssue Targets Developers on GitHub
New phishing tool GoIssue targets GitHub, enabling mass phishing, and has been linked to the GitLoker extortion campaign This article has been indexed from www.infosecurity-magazine.com Read the original article: Phishing Tool GoIssue Targets Developers on GitHub
CISOs Turn to Indemnity Insurance as Breach Pressure Mounts
Panaseer claims 72% of security leaders are taking out personal indemnity insurance as board scrutiny increases This article has been indexed from www.infosecurity-magazine.com Read the original article: CISOs Turn to Indemnity Insurance as Breach Pressure Mounts
New Citrix Zero-Day Vulnerability Allows Remote Code Execution
watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops This article has been indexed from www.infosecurity-magazine.com Read the original article: New Citrix Zero-Day Vulnerability Allows…