Category: Uncategorized
-
Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices [email protected] (The Hacker News)
Cisco has warned of a new zero-day flaw in IOS XE that has been actively exploited by an unknown threat actor to deploy a malicious Lua-based implant on susceptible devices. Tracked as CVE-2023-20273 (CVSS score: 7.2), the issue relates to a privilege escalation flaw in the web UI feature and is said to have been used alongside CVE-2023-20198 as…
-
Okta Support System Hacked, Sensitive Customer Data Stolen Ryan Naraine
Okta warns that hackers broke into its support case management system and stole sensitive data that can be used to impersonate valid users. The post Okta Support System Hacked, Sensitive Customer Data Stolen appeared first on SecurityWeek. Read More
-
In Other News: Energy Services Firm Hacked, Tech CEO Gets Prison Time, X Glitch Leads to CIA Channel Hijack SecurityWeek News
Summary of notable cybersecurity news stories that may be top headlines, but are important for the week of October 16, 2023. The post In Other News: Energy Services Firm Hacked, Tech CEO Gets Prison Time, X Glitch Leads to CIA Channel Hijack appeared first on SecurityWeek. Read More
-
soft token
Post ContentRead More
-
Philippine Military Ordered to Stop Using Artificial Intelligence Apps Due to Security Risks Associated Press
The Philippine defense chief ordered the 163,000-member military to stop using applications that harness AI to generate personal portraits, saying they could pose security risks. The post Philippine Military Ordered to Stop Using Artificial Intelligence Apps Due to Security Risks appeared first on SecurityWeek. Read More
-
Authorities Seize Control of RagnarLocker Ransomware Dark Web Site Ionut Arghire
The RagnarLocker ransomware group’s dark web leak site has been seized in a coordinated law enforcement operation. The post Authorities Seize Control of RagnarLocker Ransomware Dark Web Site appeared first on SecurityWeek. Read More
-
Fraud Detection Firm Spec Raises $15 Million Ionut Arghire
Silicon Valley fraud detection startup attracts $15 million in new financing from SignalFire, Legion Capital and Rally Ventures. The post Fraud Detection Firm Spec Raises $15 Million appeared first on SecurityWeek. Read More
-
Malvertisers Using Google Ads to Target Users Searching for Popular Software [email protected] (The Hacker News)
Details have emerged about a malvertising campaign that leverages Google Ads to direct users searching for popular software to fictitious landing pages and distribute next-stage payloads. Malwarebytes, which discovered the activity, said it’s “unique in its way to fingerprint users and distribute time sensitive payloads.” The attack singles out users searching for Notepad++ and PDF converters toRead…
-
Vietnamese Hackers Target U.K., U.S., and India with DarkGate Malware [email protected] (The Hacker News)
Attacks leveraging the DarkGate commodity malware targeting entities in the U.K., the U.S., and India have been linked to Vietnamese actors associated with the use of the infamous Ducktail stealer. “The overlap of tools and campaigns is very likely due to the effects of a cybercrime marketplace,” WithSecure said in a report published today. “Threat actors are able…
-
Iranian Hackers Lurked for 8 Months in Government Network Ionut Arghire
Iran-linked hacking group Crambus spent eight months inside a compromised network of a Middle Eastern government, Broadcom’s Symantec cybersecurity unit reports. The post Iranian Hackers Lurked for 8 Months in Government Network appeared first on SecurityWeek. Read More