Category: Uncategorized
-
HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability [email protected] (The Hacker News)
Cybersecurity researchers are warning of suspected exploitation of a recently disclosed critical security flaw in the Apache ActiveMQ open-source message broker service that could result in remote code execution. “In both instances, the adversary attempted to deploy ransomware binaries on target systems in an effort to ransom the victim organizations,” cybersecurity firm Rapid7 disclosed in aRead More
-
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
What is Citrix NetScaler ADC and NetScaler Gateway? Citrix NetScaler ADC, previously known as Citrix ADC, is an Application Delivery Controller (ADC) designed to achieve secure and optimized network traffic. Citrix NetScaler Gateway, previously known as Citrix Gateway, is an SSL-VPN solution designed to provide secure and optimized remote access. What is the Attack? According…
-
Countries at a UK Summit Pledge to Tackle AI’s Potentially ‘Catastrophic’ Risks Associated Press
Delegates from 28 nations agreed to work together to contain the potentially “catastrophic” risks posed by galloping advances in artificial intelligence. The post Countries at a UK Summit Pledge to Tackle AI’s Potentially ‘Catastrophic’ Risks appeared first on SecurityWeek. Read More
-
Risk & Repeat: Breaking down SEC charges against SolarWinds
Post ContentRead More
-
Mozi Botnet Likely Killed by Its Creators Eduard Kovacs
The recent shutdown of the Mozi botnet is believed to have been carried out by its creators, possibly forced by Chinese authorities. The post Mozi Botnet Likely Killed by Its Creators appeared first on SecurityWeek. Read More
-
Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges Eduard Kovacs
VMware’s Threat Analysis Unit finds 34 new vulnerable kernel drivers that can be exploited to alter or erase firmware and escalate privileges. The post Dozens of Kernel Drivers Allow Attackers to Alter Firmware, Escalate Privileges appeared first on SecurityWeek. Read More
-
Researchers Expose Prolific Puma’s Underground Link Shortening Service [email protected] (The Hacker News)
A threat actor known as Prolific Puma has been maintaining a low profile and operating an underground link shortening service that’s offered to other threat actors for at least over the past four years. Prolific Puma creates “domain names with an RDGA [registered domain generation algorithm] and use these domains to provide a link shortening service to other malicious…
-
Supply Chain Startup Chainguard Scores $61 Million Series B Ryan Naraine
Washington startup Chainguard banks $61 million in new financing as investors make hefty wagers on software supply chain security companies. The post Supply Chain Startup Chainguard Scores $61 Million Series B appeared first on SecurityWeek. Read More
-
Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks Ionut Arghire
Check Point reports that an Iranian APT has been observed using a new malware framework in targeted attacks in the Middle East. The post Iranian Cyber Spies Use ‘LionTail’ Malware in Latest Attacks appeared first on SecurityWeek. Read More
-
Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway Ionut Arghire
Multiple threat actors are exploiting CVE-2023-4966, aka Citrix Bleed, a critical vulnerability in NetScaler ADC and Gateway. The post Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway appeared first on SecurityWeek. Read More