Threat actors exploit vulnerabilities in container orchestration technologies, particularly misconfigured Docker API endpoints, to compromise containers and cloud hosts to deploy a crypto miner. This article has been indexed from Cyware News – Latest Cyber News Read the original article:…
Tag: Cyware News – Latest Cyber News
Inside SnipBot: The Latest RomCom Malware Variant
Unit 42 researchers discovered a new variant of the RomCom malware family called “SnipBot,” designed to target enterprise networks. It can infiltrate networks, execute remote commands, and download additional malicious software. This article has been indexed from Cyware News –…
Kryptina RaaS: From Unsellable Cast-Off to Enterprise Ransomware
Mallox, known for targeting Windows systems, has expanded its operations to Linux by using a modified version of the Kryptina ransomware, named “Mallox Linux 1.0.” The ransomware utilizes the same encryption algorithm as Kryptina. This article has been indexed from…
FreeBSD Issues Critical Security Advisory for CVE-2024-41721 (CVSS 9.8)
The flaw, CVE-2024-41721, in bhyve’s USB emulation functionality could lead to malicious code execution, posing a serious threat to systems running vulnerable versions of FreeBSD. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Critical Dragonfly2 Flaw Due to Hardcoded Key Threatens Admin Access
The flaw, tracked as CVE-2023-27584, stems from a hard-coded cryptographic key used in the authentication process, posing a serious risk of unauthorized access, including admin-level privileges. This article has been indexed from Cyware News – Latest Cyber News Read the…
Critical Grafana Plugin SDK Flaw Exposes Sensitive Information
This flaw, tracked as CVE-2024-8986 with a CVSS score of 9.1, could lead to the unintentional exposure of sensitive information, such as repository credentials, due to the build metadata being included in compiled binaries. This article has been indexed from…
More Than $44 Million in Cryptocurrency Stolen From Singaporean Platform Bingx
Singaporean cryptocurrency platform BingX was hit by a cyberattack resulting in the theft of over $44 million. The attack was detected by two blockchain security firms, leading to a temporary suspension of withdrawals and emergency asset transfers. This article has…
DOJ, FBI Need Better Metrics for Tracking Ransomware Disruption Efforts, Audit Finds
An audit found that both the DOJ and FBI need to improve in three key areas to enhance their fight against ransomware. While the FBI reported an improvement in taking action within 72 hours in 47% of incidents, there is…
Keycloak Vulnerability Puts SAML Authentication at Risk
The vulnerability lies in Keycloak’s XMLSignatureUtil class, which incorrectly verifies SAML signatures, disregarding the vital “Reference” element that specifies the signed portion of the document. This article has been indexed from Cyware News – Latest Cyber News Read the original…
Picus Security Raises $45M in Funding
Picus Security, a San Francisco, CA-based security validation company, raised $45M in funding. The round, which brought total funds raised to $80M, was led by Riverwood Capital, with participation from existing investor Earlybird Digital East Fund. This article has been…
US DoJ Charged Two Men With Stealing and Laundering $230 Million Worth of Cryptocurrency
Two suspects, Malone Lam and Jeandiel Serrano, were arrested by the US Department of Justice for stealing and laundering over $230 million worth of cryptocurrency in Miami. This article has been indexed from Cyware News – Latest Cyber News Read…
AT&T Pays $13 Million FCC Settlement Over 2023 Data Breach
The breach occurred when threat actors gained access to customer data of about 9 million AT&T wireless accounts stored by a vendor. This exposed sensitive customer information like account numbers, phone numbers, and email addresses. This article has been indexed…
GSMA Plans End-to-End Encryption for Cross-Platform RCS Messaging
The GSM Association is working on implementing end-to-end encryption for Rich Communications Services (RCS) messaging between Android and iOS. This important step aims to enhance user protection and secure messages across platforms. This article has been indexed from Cyware News…
SambaSpy RAT Targets Italian Users in a Unique Malware Campaign
This unique malware campaign stood out for its precise targeting of Italian victims, with checks implemented to ensure the system language was set to Italian before infecting the device. This article has been indexed from Cyware News – Latest Cyber…
Lumma Stealer Malware Campaign Exploits Fake CAPTCHA Pages
The Lumma Stealer malware is being distributed through deceptive human verification pages that trick Windows users into running malicious PowerShell commands, leading to sensitive information theft. This article has been indexed from Cyware News – Latest Cyber News Read the…
Police Dismantles Phone Unlocking Ring Linked to 483,000 Victims
This scheme was uncovered in 2022 during “Operation Kaerb,” involving global enforcement agencies. The criminals mimicked popular mobile platforms to conduct phishing attacks. This article has been indexed from Cyware News – Latest Cyber News Read the original article: Police…
Germany Seizes Leak Site of ‘Vanir’ Ransomware Operation
German authorities have seized the leak site used by a ransomware group known as “Vanir” in a move to disrupt their operations. The site was used to post information about victims, including a German company. This article has been indexed…
CISA Adds Windows, Apache HugeGraph-Server, Oracle JDeveloper, Oracle WebLogic Server, and MSSQL Server Bugs to its KEV Catalog
These vulnerabilities can lead to remote code execution and privilege escalation, posing a significant risk to affected systems. For example, the Oracle JDeveloper vulnerability can allow attackers to compromise the software and take over the system. This article has been…
Patch this Critical Safeguard for Privileged Passwords Authentication Bypass Flaw
Researchers have released technical details about CVE-2024-45488, a critical authentication bypass vulnerability affecting One Identity’s Safeguard for Privileged Passwords (SPP), which could allow attackers to gain full administrative access. This article has been indexed from Cyware News – Latest Cyber…
Microsoft Entra ID’s Administrative Units Weaponized to Gain Stealthy Persistence
Datadog Security Labs recently revealed a security risk within Microsoft Entra ID, showing how its administrative units (AUs) can be weaponized by attackers to create persistent backdoor access. This article has been indexed from Cyware News – Latest Cyber News…