Adobe ColdFusion Vulnerability Exploited in the Wild
Mar 16, 2023Ravie LakshmananZero-Day / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on March 15 added a security vulnerability impacting Adobe ColdFusion to…
Category: TheHackerNews
YoroTrooper Stealing Credentials and Information from Government and Energy Organizations
Mar 15, 2023Ravie LakshmananCyber Espionage / Data Security A previously undocumented threat actor dubbed YoroTrooper has been targeting government, energy, and international organizations across Europe…
The Different Methods and Stages of Penetration Testing
Mar 15, 2023The Hacker NewsPenetration Testing / Cyber Security The stakes could not be higher for cyber defenders. With the vast amounts of sensitive information,…
New Cryptojacking Operation Targeting Kubernetes Clusters for Dero Mining
Mar 15, 2023Ravie LakshmananServer Security / Cryptocurrency Cybersecurity researchers have discovered the first-ever illicit cryptocurrency mining campaign used to mint Dero since the start of…
Tick APT Targeted High-Value Customers of East Asian Data-Loss Prevention Company
Mar 15, 2023Ravie LakshmananCyber Attack / Data Safety A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an…
Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack
Mar 15, 2023Ravie LakshmananPatch Tuesday / Software Update Microsoft’s Patch Tuesday update for March 2023 is rolling out with remediations for a set of 80…
The Prolificacy of LockBit Ransomware
Today, the LockBit ransomware is the most active and successful cybercrime organization in the world. Attributed to a Russian Threat Actor, LockBit has stepped out…
New Golang-Based Malware Breaches Web Servers Via Brute-Force Attacks
Mar 14, 2023Ravie LakshmananNetwork Security / Botnet A new Golang-based malware dubbed GoBruteforcer has been found targeting web servers running phpMyAdmin, MySQL, FTP, and Postgres…
Microsoft Warns of Large-Scale Use of Phishing Kits to Send Millions of Emails Daily
Mar 14, 2023Ravie LakshmananThreat Intelligence / Cyber Attack An open source adversary-in-the-middle (AiTM) phishing kit has found a number of takers in the cybercrime world…
Fortinet FortiOS Flaw Exploited in Targeted Cyberattacks on Government Entities
Mar 14, 2023Ravie LakshmananNetwork Security / Cyber Attack Government entities and large organizations have been targeted by an unknown threat actor by exploiting a security…
AI-generated YouTube Video Tutorials Spreading Infostealer Malware
Mar 13, 2023Ravie LakshmananCyber Threat / Social Engineering Threat actors have been increasingly observed using AI-generated YouTube Videos to spread a variety of stealer malware…
Large-scale Cyber Attack Hijacks East Asian Websites for Adult Content Redirects
Mar 13, 2023Ravie LakshmananWeb Security / Cyber Threat A widespread malicious cyber operation has hijacked thousands of websites aimed at East Asian audiences to redirect…