New Wave of Attack Campaign Targeting Zimbra Email Users for Credential Theft
Aug 18, 2023THNEmail Seucrity / Cyber Attack A new “mass-spreading” social engineering campaign is targeting users of the Zimbra Collaboration email server with an aim…
Category: TheHackerNews
Lessons from the Storm 0558 Hack
While IT security managers in companies and public administrations rely on the concept of Zero Trust, APTS (Advanced Persistent Threats) are putting its practical effectiveness…
14 Suspected Cybercriminals Arrested Across Africa in Coordinated Crackdown
Aug 18, 2023THNCyber Crime / Hacking News A coordinated law enforcement operation across 25 African countries has led to the arrest of 14 suspected cybercriminals,…
New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools
Microsoft on Thursday disclosed that it found a new version of the BlackCat ransomware (aka ALPHV and Noberus) that embeds tools like Impacket and RemCom…
Google Chrome’s New Feature Alerts Users About Auto-Removal of Malicious Extensions
Aug 18, 2023THNBrowser Security / Malware Google has announced plans to add a new feature in the upcoming version of its Chrome web browser to…
Sneaky Privilege Escalation Method Bypasses Windows Security
Aug 17, 2023THNEndpoint Security / Vulnerability A previously undetected attack method called NoFilter has been found to abuse the Windows Filtering Platform (WFP) to achieve…
China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons
Aug 17, 2023THNCyber Attack / Malware An ongoing cyber attack campaign originating from China is targeting the Southeast Asian gambling sector to deploy Cobalt Strike…
New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode
Aug 17, 2023THNMobile Security / Vulnerability Cybersecurity researchers have documented a novel post-exploit persistence technique on iOS 16 that could be abused to fly under…
New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities
Aug 17, 2023THNCryptojacking / Proxyjacking A new, financially motivated operation dubbed LABRAT has been observed weaponizing a now-patched critical flaw in GitLab as part of…
Why You Need Continuous Network Monitoring?
Changes in the way we work have had significant implications for cybersecurity, not least in network monitoring. Workers no longer sit safely side-by-side on a…
Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks
Aug 17, 2023THNCyber Espionage / Malware An ongoing campaign targeting ministries of foreign affairs of NATO-aligned countries points to the involvement of Russian threat actors.…
CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks
Aug 17, 2023THNVulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw in Citrix ShareFile storage zones…