It’s a Zero-day? It’s Malware? No! It’s Username and Password
Sep 01, 2023The Hacker NewsUnified Identity Protection As cyber threats continue to evolve, adversaries are deploying a range of tools to breach security defenses and…
Month: September 2023
Why You’re Doing Pentesting Wrong (And 2 Ways to Fix It)
Pentesting has been around for decades, but it hasn’t undergone the revolution that other security practices have. Organizations tend to rely on pentesting as a…
In Other News: Hacking Encrypted Linux Computers, Android Fuzzing, Skype Leaking IPs
SecurityWeek is publishing a weekly cybersecurity roundup that provides a concise compilation of noteworthy stories that might have slipped under the radar. We provide a…
Hackers Exploit Openfire Vulnerability To Deploy Kinsing Malware
The Kinsing malware has resurfaced with a new attack method that exploits the Openfire vulnerability tracked as CVE-2023-32315. A path traversal attack caused by this vulnerability allows…
Russian State-Backed ‘Infamous Chisel’ Android Malware Targets Ukrainian Military
Cybersecurity and intelligence agencies from Australia, Canada, New Zealand, the U.K., and the U.S. on Thursday disclosed details of a mobile malware strain targeting Android…
Threat actors exploiting unpatched Juniper Networks devices
Users of Juniper Networks SRX series firewalls and EX series switches are being warned to patch four different vulnerabilities affecting the Junos operating system (OS)…
Free Decryptor Available for ‘Key Group’ Ransomware
Cyber intelligence firm EclecticIQ on Thursday announced the release of a free decryption tool to help victims of the Key Group ransomware recover their data…
AI Coding Platform Sourcegraph Breached
On August 30, 2023, a malicious actor gained unauthorized access to specific Sourcegraph(.)com data through a leaked admin access token. Sourcegraph is a code AI…
What Is Business Broadband? – IT Security Guru
Business broadband is a type of connection which can support business needs and allow connectivity for multiple employees. Offices and workspaces which require large-scale internet…
New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists
A new phishing attack likely targeting civil society groups in South Korea has led to the discovery of a novel remote access trojan called SuperBear.…
It might be too soon to claim victory against Qakbot
By Ricardo Villadiego, Lumu Technologies Published: 01 Sep 2023 The recent operation against the Qakbot (“Qbot”) botnet by the US’ FBI, Justice Department and their…
Generates Personalized Phishing Pages In Seconds
Originating as an online shopping scam, Classiscam has evolved into a global operation, constantly expanding its reach and capabilities. This deceptive Classiscam campaign, initially emerging…