2024 Malware Trends – An Year With Highest Ever Recorded Cyber Threats
Last year witnessed an alarming escalation in cyber threats, with malware families evolving and attack tactics becoming more sophisticated than ever. According to a detailed…
Category: CyberSecurityNews
Kubernetes Windows Nodes Vulnerability Allows Arbitrary Command Execution On Host
A newly disclosed vulnerability in Kubernetes, CVE-2024-9042, has raised concerns within the cloud-native community. This security flaw specifically affects Windows worker nodes and could allow…
FTC Slams GoDaddy For Failing To Implement Standard Security Practices Following Major Breaches
The Federal Trade Commission (FTC) has taken significant action against GoDaddy, one of the world’s largest web hosting companies, for failing to implement adequate security…
New Tunneling Protocol Vulnerabilities Lets Attackers Hijack Over 4 Million Internet Hosts & VPN
Researchers from Top10VPN report to Cyber Security News that they have uncovered major vulnerabilities in tunneling protocols that allow attackers to hijack millions of internet…
FunkSec Ransomware Dominating Ransomware Attacks, Compromised 85 Victims in December
A new ransomware group called FunkSec has emerged as a dominant force in the cybercrime landscape, claiming to have compromised over 85 victims in December…
California Wildfire Exploited By Hackers To Launch Phishing Attacks
As California battles devastating wildfires, cybercriminals are seizing the opportunity to exploit the confusion and uncertainty through sophisticated phishing attacks. The Veriti Research team has…
New UEFI Secure Boot Bypass Vulnerability Exposes Systems to Malicious Bootkits
A newly discovered vulnerability, CVE-2024-7344, has been identified as a critical flaw in the UEFI Secure Boot mechanism, potentially impacting the majority of UEFI-based systems.…
Hackers Attacking Exploited Thousands of PHP-Based Web Applications to Deploy Malware
A massive cybersecurity threat has emerged as hackers exploit vulnerabilities in PHP-based web applications to deploy malware on a global scale. Imperva Threat Research has…
Veeam Azure Backup Solution Vulnerability Allows Attackers To Enumerate Network
A critical security flaw has been discovered in Veeam’s popular backup solution for Microsoft Azure, potentially exposing countless organizations to network enumeration and further malicious…
Black Basta Abusing Teams Chat To Initiate Remote Session & Drop Malware
Notorious ransomware group Black Basta has been observed leveraging Microsoft Teams as part of a sophisticated social engineering campaign. This new tactic, which combines email…
Ivanti Endpoint Manager Vulnerabilities Allows Attackers To Extract Sensitive Information
Ivanti addressed multiple severe vulnerabilities in its Endpoint Manager (EPM) software, potentially exposing organizations to significant data breaches. The most alarming of these flaws are…
Botnet Malware Exploits 13,000 MikroTik Devices By Abusing Misconfigured DNS Records
Cybersecurity experts at Infoblox Threat Intel have uncovered a sophisticated botnet leveraging misconfigured DNS records to bypass email protection systems and deliver malware through spam…