Latest Cybersecurity News and Articles
Progress Patches Critical Security Flaw CVE-2024-8015 (CVSS 9.1) in Telerik Report Server
Progress Software has issued a security advisory regarding four new vulnerabilities in the Telerik Report Server. These flaws, designated as CVE-2024-7292, CVE-2024-7293, CVE-2024-7294, and CVE-2024-8015, impact versions before 2024 Q3 (10.2.24.924).
Malware by the (Bit)Bucket: Uncovering AsyncRAT
G DATA Security Lab discovered a malware campaign using Bitbucket to deploy AsyncRAT, a remote access trojan. The attackers employed multi-stage attacks to host and distribute malicious payloads, hiding their activities with Base64 encoding.
Fog and Akira Ransomware Exploit Critical Veeam RCE Flaw After PoC Release
Sophos X-Ops MDR and Incident Response warned of rising ransomware attacks exploiting Veeam Backup & Replication flaw CVE-2024-40711, allowing unauthorized account creation for ransomware deployments like Fog and Akira.
Telekopye Transitions to Targeting Tourists via Hotel Booking Scam
ESET researchers revealed that the Telekopye scam toolkit, previously known for targeting online marketplace users, has now turned its focus towards exploiting tourists via accommodation booking platforms like Booking.com and Airbnb.
CISA Warns of F5 BIG-IP Cookie Exploitation
The CISA has issued an urgent alert warning organizations about a vulnerability involving unencrypted persistent cookies in the F5 BIG-IP Local Traffic Manager (LTM) module, which could be exploited by cyber threat actors.
CISA Warns of Critical Fortinet Flaw as Palo Alto Networks Issues Urgent Security Patches
The CISA warned of a critical Fortinet flaw that allows remote code execution impacting FortiOS, FortiPAM, FortiProxy, and FortiWeb. Federal agencies must apply mitigations by October 30, 2024.
Trojan.AutoIt.1443 Hits 28,000 Users via Game Cheats, Office Tool
The malware executes tasks to establish network access with Ncat, manipulates the system registry using IFEO, and controls system functions. It conducts cryptomining using SilentCryptoMiner and steals funds by swapping crypto wallet addresses.
Critical Flaw Exposes Schneider Electric Industrial PCs to Attack
The flaw, tracked as CVE-2024-8884, allows unauthorized actors to access sensitive information over an insecure HTTP connection, posing risks of DoS attacks, data leaks, and operational failures.
Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries
Researchers have discovered significant security vulnerabilities in industrial systems using the Manufacturing Message Specification (MMS) protocol that could have serious consequences if exploited.
Tax Extension Malware Campaign Exploits Trusted GitHub Repositories to Deliver Remcos RAT
A recent phishing campaign exploited GitHub links, targeting victims with promises of tax extension assistance. The emails urged recipients to download a password-protected archive from trusted repositories associated with tax organizations.
Defend Against Threats with Cyber Fusion
Cyware is the leading provider of cyber fusion solutions that power threat intelligence sharing , end-to-end automation and 360-degree threat response.
Learn More
Trending Tags
