Category: Uncategorized
-
Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems [email protected] (The Hacker News)
Threat actors are using an open-source rootkit called Reptile to target Linux systems in South Korea. “Unlike other rootkit malware that typically only provide concealment capabilities, Reptile goes a step further by offering a reverse shell, allowing threat actors to easily take control of systems,” the AhnLab Security Emergency Response Center (ASEC) said in a report published this week.…
-
Microsoft Addresses Critical Power Platform Flaw After Delays and Criticism [email protected] (The Hacker News)
Microsoft on Friday disclosed that it has addressed a critical security flaw impacting Power Platform, but not before it came under criticism for its failure to swiftly act on it. “The vulnerability could lead to unauthorized access to Custom Code functions used for Power Platform custom connectors,” the tech giant said. “The potential impact could be…
-
Researchers Uncover New High-Severity Vulnerability in PaperCut Software [email protected] (The Hacker News)
Cybersecurity researchers have discovered a new high-severity security flaw in PaperCut print management software for Windows that could result in remote code execution under specific circumstances. Tracked as CVE-2023-39143 (CVSS score: 8.4), the flaw impacts PaperCut NG/MF prior to version 22.1.3. It has been described as a combination of a path traversal and file upload vulnerability. “Read…
-
A Cyberattack Has Disrupted Hospitals and Health Care in Five States Associated Press
A cyberattack has disrupted hospital computer systems in several states, forcing some emergency rooms to close and ambulances to be diverted. The post A Cyberattack Has Disrupted Hospitals and Health Care in Five States appeared first on SecurityWeek. Read More
-
In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability SecurityWeek News
Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 31, 2023. The post In Other News: Cybersecurity Funding Rebounds, Cloud Threats, BeyondTrust Vulnerability appeared first on SecurityWeek. Read More
-
Threat Actors Abuse Cloudflare Tunnel for Persistent Access, Data Theft Ionut Arghire
Threat actors have been observed abusing the open source Cloudflare Tunnel tool Cloudflared to maintain stealthy, persistent access to compromised systems. The post Threat Actors Abuse Cloudflare Tunnel for Persistent Access, Data Theft appeared first on SecurityWeek. Read More
-
Microsoft Criticized Over Handling of Critical Power Platform Vulnerability Eduard Kovacs
A critical Microsoft Power Platform vulnerability exposed authentication data and other secrets, but the tech giant has been accused of handling it poorly. The post Microsoft Criticized Over Handling of Critical Power Platform Vulnerability appeared first on SecurityWeek. Read More
-
NYC Couple Pleads Guilty to Money Laundering in $3.6 Billion Bitfinex Hack [email protected] (The Hacker News)
A married couple from New York City has pleaded guilty to money laundering charges in connection with the 2016 hack of cryptocurrency stock exchange Bitfinex, resulting in the theft of about 120,000 bitcoin. The development comes more than a year after Ilya Lichtenstein, 35, and his wife, Heather Morgan, 33, were arrested in February 2022, following…
-
Points.com Vulnerabilities Allowed Customer Data Theft, Rewards Program Hacking Ionut Arghire
Multiple vulnerabilities in the airline and hotel rewards platform points.com could have led to personal information theft and unauthorized administrative access. The post Points.com Vulnerabilities Allowed Customer Data Theft, Rewards Program Hacking appeared first on SecurityWeek. Read More
-
New York Couple Plead Guilty to Bitcoin Laundering AFP
A married couple from New York dubbed “Bitcoin Bonnie and Crypto Clyde” pleaded guilty to laundering billions of dollars in stolen bitcoin. The post New York Couple Plead Guilty to Bitcoin Laundering appeared first on SecurityWeek. Read More