How Threat Actors Establish Persistence on Linux Systems
In a detailed continuation of the Linux Detection Engineering series, Elastic Security’s Ruben Groenewoud has released an in-depth exploration of advanced persistence mechanisms used by…
Author: Cybernoz
Hackers Exploited Digital Advertising Tools to Launch Malicious Campaigns
Cybersecurity researchers from Mandiant and Google Cloud have uncovered a sophisticated scheme where hackers exploit digital advertising tools to conduct malicious campaigns. These tools, originally…
A Call to Action for Securing ICS/OT Environments
Aug 30, 2024The Hacker NewsICS Security / OT Security A comprehensive guide authored by Dean Parsons emphasizes the growing need for specialized ICS security measures…
Hackers Rally For Pavel Durov With #FreeDurov Campaigns
The arrest of Pavel Durov, the founder and CEO of Telegram, on August 24, 2024, has ignited an international uproar with #FreeDurov and #OpDurov campaigns,…
Iran State-Sponsored Hackers Intelligence Operations Using Fake Job Offers
Mandiant has discovered one of the unusual Iranian counterintelligence activities that focuses on prospective agents of foreign intelligence services, especially in Israel. The operation was…
Hackers Repeatedly Using Same iOS & Chrome Exploits to Attack Gov Websites
Hackers have been exploiting vulnerabilities in iOS and Google Chrome to target government websites, particularly in Mongolia. Google’s Threat Analysis Group (TAG) observed these attacks,…
Palo Alto Networks Linked to Malware Spread
Palo Alto Networks is currently being misused as a cover for malware distribution. Although the California-based cybersecurity company is not involved in these activities, hackers…
North Korean Hackers Target Developers with Malicious npm Packages
Aug 30, 2024Ravie LakshmananCryptocurrency / Malware Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm…
A Tool For Easier Incident Reporting
The Cybersecurity and Infrastructure Security Agency (CISA) announced the launch of its new CISA Services Portal, which includes an updated cyber incident reporting form. This…
RansomHub Attacks Hit Over 200 Organizations, FBI Warns
The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), Multi-State Information Sharing and Analysis Center (MS-ISAC), and the Department of Health and…
Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa
Russia-linked APT29 reused iOS and Chrome exploits previously developed by NSO Group and Intellexa Pierluigi Paganini August 30, 2024 Russia-linked APT29 group was spotted reusing…
Exploiting Jenkins RCE Vulnerability (CVE-2024-43044) Via Agents
A critical vulnerability has been identified in Jenkins, a widely used automation server. If exploited further, this vulnerability allows attackers to read arbitrary files from…