The clinic said the hackers had access to personal data between May 4 and May 7, stealing information including Social Security numbers, passport numbers, financial account numbers with CVV numbers and expiration dates. This article has been indexed from Cyware…
Tag: Cyware News – Latest Cyber News
Evil Corp hit with new sanctions, BitPaymer ransomware charges
The Evil Corp cybercrime syndicate has been hit with new sanctions by the United States, United Kingdom, and Australia. The US also indicted one of its members for conducting BitPaymer ransomware attacks. This article has been indexed from Cyware News…
Crook made millions by breaking into execs’ Office365 inboxes, feds say
Federal prosecutors have charged a man for an alleged “hack-to-trade” scheme that earned him millions of dollars by breaking into the Office365 accounts of executives at publicly traded companies. This article has been indexed from Cyware News – Latest Cyber…
Zimbra RCE Vuln Under Attack Needs Immediate Patching
Attackers are actively targeting a severe remote code execution vulnerability that Zimbra recently disclosed in its SMTP server, heightening the urgency for affected organizations to patch vulnerable instances right away. This article has been indexed from Cyware News – Latest…
Cyble Researchers Uncover Sophisticated Attack Using VSCode for Remote Access
Cyble researchers have uncovered a sophisticated campaign that starts with a suspicious .LNK file and uses VSCode to establish persistence and remote access – and installs the VSCode CLI if VSCode isn’t found on the victim machine. This article has…
Iran-linked Threat Group Handala Actively Targets Israel
Handala’s most serious claims are unverified, but the Iranian threat group’s actions have led to numerous account suspensions and website shutdowns due to its persistent activities. This article has been indexed from Cyware News – Latest Cyber News Read the…
PLANET Technology Switches Face Multiple Vulnerabilities, Urgent Firmware Updates Advised
The Taiwan Computer Emergency Response Team (TWCERT/CC) has released a series of security advisories highlighting critical vulnerabilities affecting various PLANET Technology switch models. This article has been indexed from Cyware News – Latest Cyber News Read the original article: PLANET…
Cloud Security Firm Apono Raises $15.5 Million to Expand AI-Powered Access Management
This latest investment, led by New Era Capital Partners, brings Apono’s total funding to $20. 5 million, positioning the company to lead the identity security market with its innovative AI-driven product. This article has been indexed from Cyware News –…
Authorities Warn of Growing Iranian Spear Phishing Threat Against Journalists and Diplomats
The UK and US issued a joint warning about the increasing Iranian spear phishing threat, attributing it to Iran’s Islamic Revolutionary Guard Corps targeting individuals in Iranian and Middle Eastern affairs, as well as US political campaigns. This article has…
Logpoint Strengthens SIEM by Acquiring Muninn AI-Powered NDR
Logpoint, a SIEM company based in Copenhagen, acquired Muninn, an AI-powered NDR startup, to enhance threat detection capabilities. Muninn’s AI technology is designed to detect complex attacks in environments where traditional methods fall short. This article has been indexed from…
KartLANPwn Flaw Exploits Mario Kart 8 Deluxe LAN Play Feature for RCE
The KartLANPwn vulnerability (CVE-2024-45200) targets Mario Kart 8 Deluxe’s LAN Play feature, potentially allowing hackers to execute remote code on players’ game consoles. This article has been indexed from Cyware News – Latest Cyber News Read the original article: KartLANPwn…
CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog
The CISA has alerted to four newly exploited vulnerabilities in its KEV catalog. The vulnerabilities include critical flaws in D-Link and DrayTek Vigor routers, Motion Spell GPAC, and SAP Commerce Cloud. This article has been indexed from Cyware News –…
JPCERT Shares Windows Event Log Tips to Detect Ransomware Attacks
The investigation strategy shared by JPCERT/CC covers Application, Security, System, and Setup logs, which can reveal traces left by ransomware attacks and help identify the attack vector This article has been indexed from Cyware News – Latest Cyber News Read…
Researcher Details RCE Flaw (CVE-2024-36435) in Supermicro BMC IPMI Firmware
A critical vulnerability, CVE-2024-36435, has been found in several Supermicro enterprise products, allowing unauthenticated attackers to exploit a buffer overflow in the Baseboard Management Controller (BMC) firmware, leading to RCE. This article has been indexed from Cyware News – Latest…
Malicious Actors Use Infected PyPI Packages to Target Roblox Da Hood Game Cheaters
Platforms like Github, Discord, and YouTube are used to distribute compromised game cheats, which contain malware such as Skuld Stealer and Blank Grabber, known for stealing sensitive information. This article has been indexed from Cyware News – Latest Cyber News…
Phishing Attacks on Australia Disguised as Atlassian
Mimecast highlighted a noticeable increase in the use of Atlassian to evade detection. The attackers utilized postmark URLs to gather data intelligence, including location and browser details. This article has been indexed from Cyware News – Latest Cyber News Read…
DragonForce Ransomware Expands RaaS, Targets Firms Worldwide
The DragonForce group utilizes dual ransomware variants, including one based on LockBit 3.0 and another on ContiV3, to target industries like manufacturing, real estate, and transportation. This article has been indexed from Cyware News – Latest Cyber News Read the…
PoC Exploit Shows Local Privilege Escalation Risk in Linux
Researchers disclosed a critical privilege escalation vulnerability, CVE-2024-26808, in the Linux kernel affecting versions from v5.9 to v6.6. The flaw is in the Netfilter component, allowing root access by manipulating memory allocation. This article has been indexed from Cyware News…
Critical XSS Flaw Discovered in Filament Necessitates Urgent Update for Laravel Developers
A critical XSS flaw (CVE-2024-47186) has been found in Filament, a popular Laravel development tool. The vulnerability affects versions 3.0.0 to 3.2.114, putting applications at risk that render unvalidated ColorColumn or ColorEntry values. This article has been indexed from Cyware…
Multiple Vulnerabilities Discovered in PHP, Prompting Urgent Security Updates
Key vulnerabilities include log manipulation in PHP-FPM (CVE-2024-9026), bypassing redirect configurations (CVE-2024-8927), CGI parameter injection vulnerability (CVE-2024-8926), and erroneous parsing of multipart form data (CVE-2024-8925). This article has been indexed from Cyware News – Latest Cyber News Read the original…