Latest Cybersecurity News and Articles
Cybercriminals Aim to Lure Traitorous Insiders via Ransom Notes
Ransomware actors are now using a new tactic by offering individuals millions of dollars to betray their employers and share confidential company information. These actors include groups like Sarcoma and DoNex.
Netgear Warns Users to Patch Critical WiFi Router Vulnerabilities
The two critical security vulnerabilities impact multiple WiFi 6 access points (WAX206, WAX214v2, and WAX220) and Nighthawk Pro Gaming router models (XR1000, XR1000v2, XR500).
State-Linked Hackers Deploy New FlexibleFerret macOS Malware in Fake Job Interview Campaign
Apple addressed several variants of the macOS malware family in a signature update for XProtect last week. However, the North Korean threat actors adapted to the update by deploying FlexibleFerret, which is not detected by XProtect.
Critical Veeam Backup Vulnerability Enables Remote Code Execution
The vulnerability affects a wide range of Veeam products, including Veeam Backup for Salesforce, Nutanix AHV, AWS, Microsoft Azure, Google Cloud, Oracle Linux Virtualization Manager, and Red Hat Virtualization.
New Russian Threat Group Hacks Into U.S. Oil and Gas Facilities
Sector 16 claimed sole responsibility for hacking into the control systems of a U.S. oil and gas production facility, and released a video “purportedly demonstrating their access to the facility’s operational data and systems,” Cyble said.
Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks
The vulnerability was actively exploited by Russian cybercrime groups through spear-phishing campaigns, using homoglyph attacks to spoof document extensions and trick users and the Windows Operating System into executing malicious files.
Update: PoC Exploit Released for Linux Kernel Enabling Privilege Escalation and Container Escape
The vulnerability affects various Linux kernel versions, including v6.8 to v6.9, v5.15.147, v6.1.78, and v6.6.17. System administrators are advised to upgrade to patched versions immediately.
AsyncRAT Abusing Python and Cloudflare Tunnels for Stealthy Malware Delivery
AsyncRAT, known for its asynchronous communication capabilities, enables attackers to control compromised systems, exfiltrate sensitive data, and execute commands undetected.
Malicious Package Exploits Go Module Proxy Caching for Persistence
Socket researchers discovered a malicious typosquat package in the Go ecosystem, impersonating the widely used BoltDB database module (github.com/boltdb/bolt), a tool trusted by many organizations including Shopify and Heroku.
Update: PoC Privilege Escalation Exploit Revealed for Active Directory Domain Services
The exploit takes advantage of Windows Performance Counters, a mechanism that allows applications and services to register monitoring routines via PerfMon.exe or Windows Management Instrumentation (WMI).
Defend Against Threats with Cyber Fusion
Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.
Learn More
Trending Tags
