How Fileless Malware Operates Without Leaving A Trace
Threat actors are always developing new and more effective approaches to system breaches in the perpetually shifting field of cybersecurity. From basic computer viruses to…
Latest Cybersecurity News — Page 3842
View all →
New “DoubleClickjacking” Exploit Bypasses Clickjacking Protections on Major Websites
Jan 01, 2025Ravie LakshmananWeb Security / Vulnerability Threat hunters have disclosed a new “widespread timing-based vulnerability class” that leverages a double-click sequence to facilitate clickjacking…
U.S. Treasury sanctions Russian and Iranian entities for interfering in the presidential election
U.S. Treasury sanctions Russian and Iranian entities for interfering in the presidential election Pierluigi Paganini January 01, 2025 The U.S. Treasury sanctioned entities for disinformation…
New Stealthy Malware Leveraging SSH Over TOR Attacking Ukrainian Military
Researchers recently discovered a malicious campaign targeting Ukrainian military personnel through fake “Army+” application websites, which host a malicious installer that, upon execution, extracts the…
DrayTek Devices Vulnerability Let Attackers Arbitrary Commands Remotely
The DrayTek Gateway devices, more specifically the Vigor2960 and Vigor300B models, are susceptible to a critical command injection vulnerability. Exploitable via the /cgi-bin/mainfunction.cgi/apmcfgupload endpoint, attackers…
How To Navigate Certification Authority Distrust: Preventing Critical Incidents by Switching To A New Vendor
In the ever-evolving landscape of digital security, maintaining trust is paramount. When a Certification Authority (CA) is no longer trusted by browsers like Google, as…
Iranian and Russian Entities Sanctioned for Election Interference Using AI and Cyber Tactics
Jan 01, 2025Ravie LakshmananGenerative AI / Election Interference The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) on Tuesday leveled sanctions against two entities…
Hey, Maybe It’s Time to Delete Some Old Chat Histories
If you’re worried about possible expansions of government surveillance and access to your information, or simply want to do some digital purging so you’re not…
FortiGuard Labs Links New EC2 Grouper Hackers to AWS Credential Exploits
SUMMARY EC2 Grouper Identified: Researchers found EC2 Grouper exploiting AWS credentials and tools using distinct patterns like “ec2group12345.” Credential Compromise: They primarily obtain credentials from…
“Double-Click” Attack to Hack Websites & Take over Accounts
In a concerning development for internet security, a new variation of a long-standing cyberattack technique known as “DoubleClickjacking,” has been discovered, threatening the security of…
The Evolution of Ransomware: From the 1970s to 2024
Ransomware has evolved significantly since its inception in the 1970s, growing from simple, isolated incidents to a complex, global threat that costs billions of dollars…
35 Google Chrome Extensions Hacked to Inject Malicious Code
A massive phishing campaign has compromised at least 35 Google Chrome extensions, collectively used by approximately 2.6 million users, injecting malicious code to steal sensitive…