XSS Vulnerabilities in Azure Led to Unauthorized Access to User Sessions
Two cross-site scripting (XSS) vulnerabilities in Azure Bastion and Azure Container Registry (ACR) could have led to unauthorized access to user sessions, data tampering, and…
Latest Cybersecurity News — Page 6447
View all →
Russia-linked APT Gamaredon update TTPs in recent attacks against UkraineSecurity Affairs
Russia-linked APT group Gamaredon is using a new toolset in attacks aimed at critical organizations in Ukraine. The Gamaredon APT group (aka Shuckworm, Actinium, Armageddon, Primitive Bear, UAC-0010, and Trident Ursa)…
Russian hackers use PowerShell USB malware to drop backdoors
The Russian state-sponsored hacking group Gamaredon (aka Armageddon or Shuckworm) continues to target critical organizations in Ukraine’s military and security intelligence sectors, employing a refreshed toolset…
New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries
Jun 15, 2023Ravie LakshmananSoftware Supply Chain In what’s a new kind of software supply chain attack aimed at open source projects, it has emerged that…
BBFC taps into AWS AI portfolio to speed up content classification
The British Board of Film Classification (BBFC) is working with Amazon Web Services (AWS) to explore how artificial intelligence (AI) technologies could be deployed to…
US Organizations Paid $91 Million to LockBit Ransomware Gang
The LockBit ransomware gang has launched roughly 1,700 attacks in the United States and received approximately $91 million in ransom payments, the US government says.…
Barracuda ESG zero-day attacks linked to suspected Chinese hackers
A suspected pro-China hacker group tracked by Mandiant as UNC4841 has been linked to data-theft attacks on Barracuda ESG (Email Security Gateway) appliances using a…
GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files
Jun 15, 2023Ravie LakshmananMobile Security / Privacy An updated version of an Android remote access trojan dubbed GravityRAT has been found masquerading as messaging apps…
Clop begins naming alleged MOVEit victims
As it had previously threatened, the Clop cyber crime cartel has started publicly naming victims allegedly compromised via a SQL injection flaw in Progress Software’s…
Barracuda Zero-Day Attacks Attributed to Chinese Cyberespionage Group
The recent attacks exploiting a zero-day vulnerability in a Barracuda Networks email security appliance have been attributed by Mandiant to a Chinese cyberespionage group. The…
Microsoft sued for alleged misuse of stolen Dark Web credentials
Microsoft denies these allegations, claiming that Hold Security is mischaracterizing the agreement and dismissing the claims made by the cybersecurity firm in the lawsuit. The…
6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT
Jun 15, 2023The Hacker NewsBrowser Security / Data Security The revolutionary technology of GenAI tools, such as ChatGPT, has brought significant risks to organizations’ sensitive…