Category: Uncategorized
-
QEMU Emulator Exploited as Tunneling Tool to Breach Company Network [email protected] (The Hacker News)
Threat actors have been observed leveraging the QEMU open-source hardware emulator as tunneling software during a cyber attack targeting an unnamed “large company” to connect to their infrastructure. While a number of legitimate tunneling tools like Chisel, FRP, ligolo, ngrok, and Plink have been used by adversaries to their advantage, the development marks the first QEMU that…
-
CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability [email protected] (The Hacker News)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting JetBrains TeamCity On-Premises software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2024-27198 (CVSS score: 9.8), refers to an authentication bypass bug that allows for a completeRead More
-
Cryptography Firm Zama Raises $73 Million for FHE Solution Eduard Kovacs
Zama raises $73 million in Series A funding for a fully homomorphic encryption (FHE) solution for AI and blockchain applications. The post Cryptography Firm Zama Raises $73 Million for FHE Solution appeared first on SecurityWeek. Read More
-
FBI: Cybercrime Losses Exceeded $12.5 Billion in 2023 Eduard Kovacs
FBI’s IC3 publishes its 2023 Internet Crime Report, which reveals a 10% increase in the number of cybercrime complaints compared to 2022. The post FBI: Cybercrime Losses Exceeded $12.5 Billion in 2023 appeared first on SecurityWeek. Read More
-
Cayosoft Raises $22.5 Million for Microsoft AD Recovery Tech SecurityWeek News
Ohio security vendor Cayosoft banks new capital to fuel growth of its flagship Active Directory forest recovery product suite. The post Cayosoft Raises $22.5 Million for Microsoft AD Recovery Tech appeared first on SecurityWeek. Read More
-
Nigerian BEC Scammer Pleads Guilty in US Court Ionut Arghire
Henry Echefu admitted in a US courtroom to participating in a $200,000 business email compromise fraud scheme. The post Nigerian BEC Scammer Pleads Guilty in US Court appeared first on SecurityWeek. Read More
-
Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks [email protected] (The Hacker News)
Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri reveal. The attacks, which take the form of distributed brute-force attacks, “target WordPress websites from the browsers of completely innocent and unsuspecting site visitors,” security researcher Denis Sinegubko said. The activity is part of a&Read More
-
Cisco Patches High-Severity Vulnerabilities in VPN Product Ionut Arghire
High-severity flaws in Cisco Secure Client could lead to code execution and unauthorized remote access VPN sessions. The post Cisco Patches High-Severity Vulnerabilities in VPN Product appeared first on SecurityWeek. Read More
-
Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks Ionut Arghire
Threat actor tracked as TA4903 spoofing US government entities in phishing and fraud campaigns. The post Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks appeared first on SecurityWeek. Read More
-
Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks [email protected] (The Hacker News)
The China-linked threat actor known as Evasive Panda orchestrated both watering hole and supply chain attacks targeting Tibetan users at least since September 2023. The end of the attacks is to deliver malicious downloaders for Windows and macOS that deploy a known backdoor called MgBot and a previously undocumented Windows implant known as Nightdoor. The findings come…