New DDoS Malware “cShell” Exploit Linux Tools to Attack SSH Servers
The AhnLab Security Intelligence Center (ASEC) has uncovered a new strain of DDoS malware, named cShell, targeting poorly managed Linux SSH servers (screen and hping3).…
Category: CyberSecurityNews
Critical RCE Vulnerability in Apache Struts Actively Exploited using Public PoC
A critical security vulnerability has been identified in Apache Struts, a popular open-source framework for building Java-based web applications actively used in attacks leveraging publish…
FBI Warns Of HiatusRAT Attacking Web Cameras And DVRs To Gain Full Access
The Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) alerting cybersecurity professionals and system administrators about a new threat targeting web…
Azure Data Factory And Apache Airflow Integration Flaws Let Attackers Gain Write Access
Researchers uncovered new security vulnerabilities in the Azure Data Factory Apache Airflow integration dubbed “Dirty DAG”, which allow attackers to get unauthorized write permissions to…
RCE Vulnerability in 1,000,000 WordPress Sites Lets Hackers Take Full Control
A critical Remote Code Execution (RCE) vulnerability (CVE-2024-6386), affecting over 1,000,000 active installations of the WordPress Multilingual Plugin (WPML). This flaw, stemming from a Server-Side…
Hackers Exploit Microsoft Management Console to Drop Backdoor on Windows
Securonix Threat Research team has uncovered a sophisticated tax-related phishing campaign that employs Microsoft Common Console Document (MSC) files and advanced obfuscation techniques to deliver…
Hackers Leverage Red Team Tools in RDP Attacks Via TOR & VPN for Data Exfiltration
In a striking display of cyber sophistication, the advanced persistent threat (APT) group Earth Koshchei, also tracked as APT29 or Midnight Blizzard, has been linked…
1-Click RCE Attack in Kerio Control Firewall Let Attackers Take Full Control Remotely
Researchers have identified a critical set of HTTP Response Splitting vulnerabilities in Kerio Control, a widely used Unified Threat Management (UTM) solution developed by GFI…
Cisco to Acquire Threat Detection Company SnapAttack to Power Splunk
Cisco has announced its acquisition of the threat detection company SnapAttack. This acquisition aims to supercharge Cisco’s ever-expanding security portfolio, particularly by enhancing Splunk—Cisco’s leading Security…
Kali Linux 2024.4 Released With New Hacking Tools: What’s Inside!
The much-anticipated final release of Kali Linux for 2024.4 is here, packed with many updates, new hacking tools, and powerful features, from a new default…
Windows Kernal Vulnerability Actively Exploits in Attacks to Gain System Access
The Cybersecurity and Infrastructure Security Agency (CISA) has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, one of which belongs to a Windows…
Arctic Wolf Acquires BlackBerry’s Cylance Assents For $160 Million in Cash
In a significant move that will reshape the cybersecurity landscape, Arctic Wolf and BlackBerry Limited (NYSE: BB; TSX:BB) announced today that they have entered into…