Beware Of Malicious PDF Files That Mimic As Microsoft 2FA Security Update
Malware authors are exploiting the growing popularity of QR codes to target users through PDF files, where these malicious PDFs, often delivered via email disguised…
Category: CyberSecurityNews
Kematian Stealer Abuses Powershell for Covert Data Exfiltration
The Kematian Stealer has emerged as a sophisticated PowerShell-based malware that covertly exfiltrates sensitive data from compromised systems. This article delves into the intricate workings…
Volcano Demon Ransomware Group Threatening Victims Over Phone Call
A novel malware known as Volcano Demon has been observed targeting Windows workstations and servers, obtaining administrative credentials from the network. The threat actor doesn’t…
OpenStack Arbitrary File Access Flaw Exposes Cloud Data to Hackers
A critical security vulnerability has been identified in OpenStack, a widely used open-source cloud computing platform. The flaw tracked as CVE-2024-32498, allows authenticated attackers to…
Mallox Ransomware Attacking Linux Servers In Wild
Linux servers often provide hosting for critical applications, websites, and databases, which makes them a lucrative target for intruders to get unauthorized access to steal…
Malicious QR Reader App in Google Play Delivers Anatsa Malware
Cybersecurity experts have identified a malicious QR code reader app on Google Play that is delivering the notorious Anatsa banking malware. This discovery underscores the…
ChatGPT for MacOS Store All The Conversation in Plain Text
Significant security concerns have been raised regarding the OpenAI ChatGPT app on macOS. The app reportedly stores user conversations in plain text in a non-protected…
MSI Installer Vulnerability Let Attackers Escalate Privileges with Windows Systems
A critical local privilege escalation vulnerability has been discovered in MSI Center versions 2.0.36.0 and earlier, allowing low-privileged users to escalate their privileges on Windows…
International Operation Takes Down 593 Malicious Cobalt Strike Servers
Law enforcement agencies from around the world have successfully shut down 593 rogue servers running unauthorized versions of Cobalt Strike, a tool often misused by…
Hackers Exploiting HTTP File Server Remote Code Execution Vulnerability in Wild
Hackers are actively exploiting a remote code execution vulnerability in the HTTP File Server (HFS) program. The vulnerability, identified as CVE-2024-23692, was disclosed in May…
ANY.RUN Sandbox Now Open Windows 10 Access for All Users
In a significant move to enhance cybersecurity analysis for all its users, ANY.RUN has announced that Windows 10 is now available to everyone, including Community…
Proton Launched a New end-to-end encrypted Document Editor
Proton, the privacy-focused technology company, has unveiled a groundbreaking addition to its suite of secure services: an end-to-end encrypted document editor integrated into Proton Drive.…