Category: Uncategorized
-
Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities [email protected] (The Hacker News)
Indian government entities and the defense sector have been targeted by a phishing campaign that’s engineered to drop Rust-based malware for intelligence gathering. The activity, first detected in October 2023, has been codenamed Operation RusticWeb by enterprise security firm SEQRITE. “New Rust-based payloads and encrypted PowerShell commands have been utilized to exfiltrateRead More
-
In Other News: Crypto Exchange Hack Guilty Plea, Rating AI Vulnerabilities, Intellexa Spyware SecurityWeek News
Noteworthy stories that might have slipped under the radar: Cryptocurrency exchange hacker pleads guilty, rating LLM vulnerabilities, Intellexa spyware analysis. The post In Other News: Crypto Exchange Hack Guilty Plea, Rating AI Vulnerabilities, Intellexa Spyware appeared first on SecurityWeek. Read More
-
Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware [email protected] (The Hacker News)
A new phishing campaign is leveraging decoy Microsoft Word documents as bait to deliver a backdoor written in the Nim programming language. “Malware written in uncommon programming languages puts the security community at a disadvantage as researchers and reverse engineers’ unfamiliarity can hamper their investigation,” Netskope researchers Ghanashyam Satpathy and Jan Michael Alcantara Read More
-
Iranian Hackers Targeting US Defense Industrial Base Entities With New Backdoor Ionut Arghire
Microsoft has observed Iranian state-sponsored hackers targeting employees at US DIB entities with the FalseFont backdoor. The post Iranian Hackers Targeting US Defense Industrial Base Entities With New Backdoor appeared first on SecurityWeek. Read More
-
Inmate, Staff Information Stolen in Rhode Island Prison Data Breach Ionut Arghire
The Donald W. Wyatt Detention Facility says the data of 2,000 inmates, staff, and vendors was stolen in a cyberattack. The post Inmate, Staff Information Stolen in Rhode Island Prison Data Breach appeared first on SecurityWeek. Read More
-
CISA Warns of FXC Router, QNAP NVR Vulnerabilities Exploited in the Wild Eduard Kovacs
CISA released ICS advisories for FXC router and QNAP NRV flaws and added them to its known exploited vulnerabilities catalog. The post CISA Warns of FXC Router, QNAP NVR Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. Read More
-
Malicious GPT Can Phish Credentials, Exfiltrate Them to External Server: Researcher Eduard Kovacs
A researcher has shown how malicious actors can create custom GPTs that can phish for credentials and exfiltrate them to external servers. The post Malicious GPT Can Phish Credentials, Exfiltrate Them to External Server: Researcher appeared first on SecurityWeek. Read More
-
UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware [email protected] (The Hacker News)
The threat actor known as UAC-0099 has been linked to continued attacks aimed at Ukraine, some of which leverage a high-severity flaw in the WinRAR software to deliver a malware strain called LONEPAGE. “The threat actor targets Ukrainian employees working for companies outside of Ukraine,” cybersecurity firm Deep Instinct said in a Thursday analysis. UAC-0099 was firstRead More
-
Microsoft Warns of New ‘FalseFont’ Backdoor Targeting the Defense Sector [email protected] (The Hacker News)
Organizations in the Defense Industrial Base (DIB) sector are in the crosshairs of an Iranian threat actor as part of a campaign designed to deliver a never-before-seen backdoor called FalseFont. The findings come from Microsoft, which is tracking the activity under its weather-themed moniker Peach Sandstorm (formerly Holmium), which is also known as APT33, Elfin, and Refined…
-
Cisco to Acquire Isovalent, Add eBPF Tech to Cloud Portfolio Ryan Naraine
Isovalent raised about 70 million in funding from prominent investors including Microsoft’s venture fund, Google, and Andreessen Horowitz. The post Cisco to Acquire Isovalent, Add eBPF Tech to Cloud Portfolio appeared first on SecurityWeek. Read More