Latest Cybersecurity News and Articles
01 November 2023
The campaign, which targets high-profile organizations in the Middle East, has been using the LIONTAIL malware framework installed on Windows servers. LIONTAIL uses Windows HTTP stack driver HTTP.sys to load memory-resident payloads.
01 November 2023
The Russia-linked hacking crew known as Turla has been observed using an updated version of a known second-stage backdoor referred to as Kazuar.
The new findings come from Palo Alto Networks Unit 42, which is tracking the adversary under its constellation-themed moniker Pensive Ursa.
"As the code of the upgraded revision of Kazuar reveals, the authors put special emphasis on Kazuar's ability to
01 November 2023
F5 is warning of active abuse of a critical security flaw in BIG-IP less than a week after its public disclosure that could result in the execution of arbitrary system commands as part of an exploit chain.
Tracked as CVE-2023-46747 (CVSS score: 9.8), the vulnerability allows an unauthenticated attacker with network access to the BIG-IP system through the management port to achieve code execution
31 October 2023
Chief Information Security Officers (CISOs) were surveyed on their security programs and risk management strategies, including attack response times.
31 October 2023
The SEC's lawsuit against the CISO of SolarWinds is leaving CISOs across the industry spooked and reevaluating their roles.
The post Cybersecurity Leaders Spooked by SEC Lawsuit Against SolarWinds CISO appeared first on SecurityWeek.
31 October 2023
API security vulnerabilities in open authentication (OAuth), including user account information, were recently discovered by Salt Security.
31 October 2023
Palo Alto Networks has entered into a definitive agreement to acquire Dig Security, a provider of Data Security Posture Management (DSPM) technology.
The post Palo Alto Networks to Acquire Cloud Security Start-Up Dig Security appeared first on SecurityWeek.
31 October 2023
Atlassian warns that a critical vulnerability in Confluence Data Center and Server could lead to significant data loss if exploited.
The post Atlassian CISO Urges Quick Action to Protect Confluence Instances From Critical Vulnerability appeared first on SecurityWeek.
31 October 2023
The personal data of nearly 815 million citizens of India, including names, phone numbers, addresses, passport information, and Aadhaar card details, has been found for sale on the dark web.
31 October 2023
Cybersecurity firm ReversingLabs has discovered a coordinated and ongoing malicious campaign on the NuGet package manager. The campaign involves the publishing of hundreds of malicious packages since August.
31 October 2023
The perpetrator and his co-conspirators targeted dozens of victims, gaining access to their cryptocurrency accounts by hijacking their phone numbers and initiating password resets.
31 October 2023
The malware used by Arid Viper shares similarities with a non-malicious dating app called Skipped, indicating a possible connection between the APT group and the app's developers.
31 October 2023
A threat actor is reportedly harvesting IAM credentials from public GitHub repositories within five minutes of exposure.
The post IAM Credentials in Public GitHub Repositories Harvested in Minutes appeared first on SecurityWeek.
31 October 2023
The Russian government is developing its own malware scanning platform, Multiscanner, due to concerns that the U.S. government could access data from the popular VirusTotal service.
31 October 2023
Exploitation of a critical vulnerability (CVE-2023-46747) in F5’s BIG-IP product started less than five days after public disclosure and PoC exploit code was published.
The post Attackers Exploiting Critical F5 BIG-IP Vulnerability appeared first on SecurityWeek.
31 October 2023
A report found that one in five leaders have shared their work password with someone outside the company and 77% use easy-to-remember password hacks.
31 October 2023
Yesterday, the White House announced a sweeping executive order aimed to manage the risk of artificial intelligence (AI).
31 October 2023
The threat actor known as Arid Viper (aka APT-C-23, Desert Falcon, or TAG-63) has been attributed as behind an Android spyware campaign targeting Arabic-speaking users with a counterfeit dating app designed to harvest data from infected handsets.
"Arid Viper's Android malware has a number of features that enable the operators to surreptitiously collect sensitive information from victims' devices
31 October 2023
The incident affected a portion of the county's network. The county is currently investigating the incident after ransomware gang, Play, claimed responsibility and threatened to leak stolen data by November 3.
31 October 2023
Google Chrome's new feature, HTTPS-Upgrades, automatically upgrades insecure HTTP requests to HTTPS requests. This will help secure old links and prevent snooping on connections to steal sensitive data.