Unpatched Remote Hacking Flaw Disclosed in Fortinet’s FortiWeb WAF
Details have emerged about a new unpatched security vulnerability in Fortinet’s web application firewall (WAF) appliances that could be abused by a remote, authenticated attacker to…
News
Threats, incidents and advisories
What is happening in cybersecurity, with a close eye on OT and critical infrastructure.
- All news
- OT/ICS
- Vulnerabilities
- Cybercrime
- Cybersecurity Trends and Emerging Threats
- Hacking Attacks
- Data Breaches
- Malware and Ransomware
- Cybersecurity Solutions
- Cybersecurity Regulations and Compliance
Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents
Cybersecurity researchers have disclosed two new attack techniques on certified PDF documents that could potentially enable an attacker to alter a document’s visible content by displaying…
Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
Cyber operatives affiliated with the Russian Foreign Intelligence Service (SVR) have switched up their tactics in response to previous public disclosures of their attack methods, according to a new…
Ransomware Cyber Attack Forced the Largest U.S. Fuel Pipeline to Shut Down
Colonial Pipeline, which carries 45% of the fuel consumed on the U.S. East Coast, on Saturday said it halted operations due to a ransomware attack, once again…
Ransomware attack on top US Healthcare agencies
Two of the big healthcare agencies was hit by a cyber attack out of which one has been confirmed to have been hit by a ransomware…
Researchers Uncover Iranian State-Sponsored Ransomware Operation
A second spreadsheet validated by Flashpoint explicitly spelled out the project’s financial motivations, with plans to launch the ransomware operations in late 2020 for a period…
A Rust-based Buer Malware Variant Has Been Spotted in the Wild
Cybersecurity researchers on Monday disclosed a new malspam campaign distributing a fresh variant of a malware loader called “Buer” written in Rust, illustrating how adversaries are…
Update Your Chrome Browser ASAP to Patch a Week Old Public Exploit
Source : https://thehackernews.com/ Author: Ravie Lakshmanan
Cybercriminals Using Telegram Messenger to Control ToxicEye Malware
Adversaries are increasingly abusing Telegram as a “command-and-control” system to distribute malware into organizations that could then be used to capture sensitive information from targeted systems.…
Pulse Secure Critical Zero-Day Security Bug Under Active Exploit
CVE-2021-22893 allows remote code-execution (RCE) and is being used in the wild by nation-state cyberattackers to compromise VPN appliances in defense, finance and government orgs. A…
Lazarus APT Hackers are now using BMP images to hide RAT malware
A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap (.BMP)…
NitroRansomware Asks for $9.99 Discord Gift Codes, Steals Access Tokens
The malware seems like a silly coding lark at first, but further exploration shows it can wreak serious damage in follow-on attacks. The NitroRansomware malware strain…