Cybersecurity News

Cybersecurity News | QUICK READ

Patch Now! CrushFTP Zero-day Lets Attackers Download System Files

Using Running CrushFTP in DMZ Does Not Save You the Trouble.

Cybersecurity News | QUICK READ

MITRE Breached – Hackers Chained 2 Ivanti Zero-days to Compromise VPN

Cyberattacks Can Happen to the Best.

Cybersecurity News | QUICK READ

Deceptive Google Ads Mimic IP Scanner Software to Push Backdoor

The Backdoor Uses Multiple Stages of DLL Side-Loading and DNS Tunneling for C2 Communication to Evade Security Solutions.

Cybersecurity News | QUICK READ

Surge in Botnets Exploiting CVE-2023-1389 to Infect TP-Link Archer Routers

Sysadmins Urged to Apply Year-Old Available Patch and Protect Infrastructure.

Cybersecurity News | QUICK READ

Years-Old Vulnerability in AMI MegaRAC BMCs Impacts Intel and Lenovo Hardware

Hardware Using Lighttpd Versions 1.4.35, 1.4.45, and 1.4.51. Is Vulnerable.

Cybersecurity News | QUICK READ

SharePoint Flaws Could Help Threat Actors Evade Detection Easier When Stealing Files

SharePoint Admins Beware!

Cybersecurity News | QUICK READ

CISA Issues Emergency Directive and Orders Agencies to Mitigate the Risks of the Microsoft Hack

Russian Group APT29 Compromised Microsoft Business Email Accounts.

Cybersecurity News | QUICK READ

CISA Urges Sisense Customers to Reset Credentials and Report Suspicious Activity

CISA Calls for Increased Vigilance and Immediate Action from Sisense Users Following a Significant Data Compromise.

Cybersecurity News | QUICK READ

92,000 D-Link NAS Devices Vulnerable to Remote Code Execution

Users Urged to Remove or Replace EOL D-Link NAS Models Now.

Cybersecurity News | QUICK READ

Warning! Rust Standard Library Flaw Enables Windows Command Injection Attacks

Security Specialists Point to Windows Function as Root Cause.

Cybersecurity News | QUICK READ

Visa Warns: New Phishing Campaign Targets Financial Organizations

The JSOutProx Malware Is Used in the Attacks.

Cybersecurity News | QUICK READ

Powerhost's ESXi Servers Encrypted with New SEXi Ransomware

The Malicious Group Demands $140 Million Ransom.

Cybersecurity News | QUICK READ

Jackson County, Missouri, Closes Offices Because of Ransomware Attack

The Attack Didn’t Impact the April 2nd Elections .

Cybersecurity News | QUICK READ

New Version of the Vultur Android Banking Trojan Spoofs Security App

The Malware Improved Its Detection Evasion Technique and Remote Control Capabilities.

Cybersecurity News | QUICK READ

NHS Dumfries and Galloway Breached by INC Ransom

The Threat Actors Released a ‘Proof Pack’ of Data to Back Up Their Ransomware Claims.

Cybersecurity News | QUICK READ

Patch Now: CISA Adds New Microsoft SharePoint Server Vulnerability on its Catalog

CVE-2023-24955 Allows an Attacker with Site Owner Privileges to Run Arbitrary Code.

Cybersecurity News | QUICK READ

U.S. Announces $10 Million Reward for Leads on Blackcat Ransomware Group

The US State Department Is Seeking Information on the Group Behind the Attack on UnitedHealthcare.

Cybersecurity News | QUICK READ

NIST's National Vulnerability Database Put CVE Enrichment on Hold

More Than 2500 Vulnerabilities Lack Critical Information.

Cybersecurity News | QUICK READ

Phishing Campaign Uses Microsoft Office Docs to Spread NetSupport RAT

Malicious Emails Were Send Through Legitimate Email Marketing Delivery Platform.

Cybersecurity News | QUICK READ

Researchers Disclose Proof of Concept for New GhostRace Attack

GhostRace Impacts All Major CPU Makers and Can Lead to Data Leakage.

Cybersecurity News | QUICK READ

Russians Used Microsoft's Stolen Authentication Secrets to Access Source Code

Why Is Password Spraying Still a Threat?

Cybersecurity News | QUICK READ

Capita Reports a Yearly Loss of about £106M Due to Cyberattack

The Company’s Share Price Decreased by 54% from the Day Before the Incident.

Cybersecurity News | QUICK READ

WordPress Websites Used by Threat Actor to Launch Brute-Force Attacks

They use the visitors’ browsers to breach other sites.

Cybersecurity News | QUICK READ

Critical TeamCity On-Premises Vulnerability Actively Exploited by Threat Actors

Update to the latest version urgently.

Cybersecurity News | QUICK READ

Windows Kernel Zero-day Patched after Six Months of Active Exploitation

The Flaw Enables Privilege Escalation on Windows 10 and 11 and Windows Servers 2019 And 2022.

Cybersecurity News | QUICK READ

CISA Updates Phobos Ransomware IoCs List in New Joint Advisory

Securing RDP ports and Known Vulnerability Patching Highly Recommended.

Cybersecurity News | QUICK READ

NIST Releases the 2.0 Version of their Cybersecurity Framework (CSF 2.0)

The Agency Releases the Framework’s First Major Update in a Decade.

Cybersecurity News | QUICK READ

Massive Ransomware Attack Disrupts US Healthcare: Behind it, ALPHV/BlackCat

The Attack Impacted over 70,000 Pharmacies and Numerous Hospitals

Cybersecurity News | QUICK READ

Pepco Group Falls Victim to Multi-Million Euro Phishing Scam

The Company Lost €15M Due to Sophisticated Phishing Attack.