Category: Uncategorized
-
Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide [email protected] (The Hacker News)
An analysis of a nascent ransomware strain called RansomHub has revealed it to be an updated and rebranded version of Knight ransomware, itself an evolution of another ransomware known as Cyclops. Knight (aka Cyclops 2.0) ransomware first arrived in May 2023, employing double extortion tactics to steal and encrypt victims’ data for financial gain. It’s…
-
Cisco Patches Webex Bugs Following Exposure of German Government Meetings Eduard Kovacs
Cisco has released a security advisory after researchers discovered that the German government’s Webex meetings were exposed. The post Cisco Patches Webex Bugs Following Exposure of German Government Meetings appeared first on SecurityWeek. Read More
-
London Hospitals Cancel Operations and Appointments After Being Hit in Ransomware Attack Associated Press
Several hospitals in London have canceled operations and appointments after being hit in a ransomware attack. The post London Hospitals Cancel Operations and Appointments After Being Hit in Ransomware Attack appeared first on SecurityWeek. Read More
-
Ransomware Gang Leaks Data From Australian Mining Company Ionut Arghire
The BianLian ransomware gang has leaked data allegedly stolen from Australian mining company Northern Minerals. The post Ransomware Gang Leaks Data From Australian Mining Company appeared first on SecurityWeek. Read More
-
Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models [email protected] (The Hacker News)
Zyxel has released security updates to address critical flaws impacting two of its network-attached storage (NAS) devices that have currently reached end-of-life (EoL) status. Successful exploitation of three of the five vulnerabilities could permit an unauthenticated attacker to execute operating system (OS) commands and arbitrary code on affected installations. Impacted models include NAS326Read More
-
Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs [email protected] (The Hacker News)
Popular video-sharing platform TikTok has acknowledged a security issue that has been exploited by threat actors to take control of high-profile accounts on the platform. The development was first reported by Semafor and Forbes, which detailed a zero-click account takeover campaign that allows malware propagated via direct messages to compromise brand and celebrity accounts without…
-
Former OpenAI Employees Lead Push to Protect Whistleblowers Flagging Artificial Intelligence Risks Associated Press
A group of OpenAI’s current and former workers is calling for AI firms to protect whistleblowing employees who flag safety risks about AI technology. The post Former OpenAI Employees Lead Push to Protect Whistleblowers Flagging Artificial Intelligence Risks appeared first on SecurityWeek. Read More
-
Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan [email protected] (The Hacker News)
Russian organizations are at the receiving end of cyber attacks that have been found to deliver a Windows version of a malware called Decoy Dog. Cybersecurity company Positive Technologies is tracking the activity cluster under the name Operation Lahat, attributing it to an advanced persistent threat (APT) group called HellHounds. “The Hellhounds group compromises organizations…
-
Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts [email protected] (The Hacker News)
Progress Software has rolled out updates to address a critical security flaw impacting the Telerik Report Server that could be potentially exploited by a remote attacker to bypass authentication and create rogue administrator users. The issue, tracked as CVE-2024-4358, carries a CVSS score of 9.8 out of a maximum of 10.0. “In Progress Telerik Report…
-
Details of Atlassian Confluence RCE Vulnerability Disclosed Ionut Arghire
SonicWall has shared technical details on a recently addressed high-severity remote code execution flaw in Confluence. The post Details of Atlassian Confluence RCE Vulnerability Disclosed appeared first on SecurityWeek. Read More