Category Security

July 1, 2023Ravi LakshmananEndpoint security/malware Researchers have pulled back the curtain on an updated version of Apple macOS malware. rusty bucket It comes with improved features for establishing persistence and avoiding detection by security software. “This variant of Rustbucket, a…

July 1, 2023Ravi LakshmananWebsite Security / Cyber ​​Threats 200,000 WordPress websites are at risk of ongoing attacks exploiting critical unpatched security vulnerabilities in the Ultimate Member plugin. This flaw is tracked as CVE-2023-3460 (CVSS score: 9.8) and affects all versions…

8Base ransomware has emerged as a prominent player in the cybercriminal world, according to new blog posts by VMware Carbon Black’s TAU (Threat Analysis Unit) and MDR-POC (Managed Detection and Response Proof of Concept) teams . The company said 8Base…

A recent adversary simulation conducted by the MDSec ActiveBreach Red Team discovered a critical vulnerability in the ArcServe UDP Backup software. This flaw, tracked as CVE-2023-26258, affects versions 7.0 through 9.0 of the software, allows remote code execution (RCE), and…

The Swiss Federal Intelligence Service (FIS) released its latest situation report on Tuesday, highlighting the continuing impact of Russia’s aggression on Ukraine on national and international security. The report stressed that escalating conflicts between the great powers had a major…

June 30, 2023hacker newsCyber ​​espionage/malware Charming Kitten, a nation-state activist affiliated with Iran’s Islamic Revolutionary Guard Corps (IRGC), was allegedly involved in a bespoke spear-phishing campaign distributing an updated version of a full-featured PowerShell backdoor called POWERSTAR. Volexity researchers Ankur…

The National Cyber ​​Security Center (NCSC) has revealed that the UK’s Signals Intelligence Agency was under cyber espionage at the hands of a state agency 20 years ago. Cyber ​​experts at the Communications-Electronics Security Group (CESG), an information assurance agency,…

June 30, 2023hacker newsSaaS Security/Artificial Intelligence, In today’s fast-paced digital environment, the proliferation of artificial intelligence (AI) tools is changing the way organizations operate. From chatbots to generative AI models, these SaaS-based applications offer many benefits, from increased productivity to…

The US government has released a list of the most “common and influential” software weaknesses of the past two years. The CWE Top 25 list was published by the Homeland Security Systems Engineering and Development Laboratory, sponsored by the Department…

June 30, 2023Ravi LakshmananServer Security/Cyber ​​Threat A lucrative campaign is actively targeting vulnerable SSH servers and secretly enclosing them in proxy networks. “This is an active campaign in which attackers leverage SSH for remote access and run malicious scripts that…