Uncategorized

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms 2024-12-11 at 16:48 By Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel for command-and-control (C2) communications, indicating that the threat actors are continuing to refine the tool after resurfacing a year ago. “Zloader […]

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts 2024-12-11 at 16:48 By Cybersecurity researchers have flagged a “critical” security vulnerability in Microsoft’s multi-factor authentication (MFA) implementation that allows an attacker to trivially sidestep the protection and gain unauthorized access to a victim’s account. “The bypass was simple: it took around an hour to

Cruise robotaxis parked forever, as GM decides it can’t compete and wants to cut costs 2024-12-11 at 15:48 By Iain Thomson The Register stumbles upon the place self-driving cabs appear to be rusting away into history Pictures  General Motors is winding up its autonomous taxi biz Cruise.… This article is an excerpt from The Register

Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia 2024-12-11 at 14:33 By A suspected China-based threat actor has been linked to a series of cyber attacks targeting high-profile organizations in Southeast Asia since at least October 2023. The espionage campaign targeted organizations in various sectors spanning government ministries in two different countries,

What is Nudge Security and How Does it Work? 2024-12-11 at 14:33 By In today’s highly distributed workplace, every employee has the ability to act as their own CIO, adopting new cloud and SaaS technologies whenever and wherever they need. While this has been a critical boon to productivity and innovation in the digital enterprise,

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017 2024-12-11 at 14:33 By Cybersecurity researchers have discovered a novel surveillance program that’s suspected to be used by Chinese police departments as a lawful intercept tool to gather a wide range of information from mobile devices. The Android tool, codenamed EagleMsgSpy by Lookout, has been operational

Three more vulns spotted in Ivanti CSA, all critical, one 10/10 2024-12-11 at 14:18 By Connor Jones Patch up, everyone – that admin portal is mighty attractive to your friendly cyberattacker Ivanti just put out a security advisory warning of three critical vulnerabilities in its Cloud Services Application (CSA), including a perfect 10.… This article

Likely China-based Attackers Target High-profile Organizations in Southeast Asia 2024-12-11 at 13:16 By Threat Hunter Team Espionage campaign targeted organizations in various sectors, including government, aviation, telecommunications, and more. This article is an excerpt from Broadcom Software Blogs View Original Source

Likely China-based Attackers Target High-profile Organizations in Southeast Asia 2024-12-11 at 13:16 By Threat Hunter Team Espionage campaign targeted organizations in various sectors, including government, aviation, telecommunications, and more. This article is an excerpt from Broadcom Software Blogs View Original Source

Likely China-based Attackers Target High-profile Organizations in Southeast Asia 2024-12-11 at 13:16 By Threat Hunter Team Espionage campaign targeted organizations in various sectors, including government, aviation, telecommunications, and more. This article is an excerpt from Broadcom Software Blogs View Original Source

A decade on from maiden flight, NASA’s Orion is still waiting for its Moon moment 2024-12-11 at 12:33 By Richard Speed Hopefully it won’t be another 10 years before the capsule is troubled by a crew It is ten years since NASA sent the Orion spacecraft into space on the Exploration Flight Test-1 mission.… This

FTC prohibits data brokers from selling Americans’ location data 2024-12-11 at 12:03 By Two data brokers have been banned from collecting and selling the sensitive, private location data of Americans.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Linux 6.12 is the new long term supported kernel 2024-12-11 at 11:07 By Liam Proven Mid-November release will be maintained for ‘several years’ Last month’s new version of the Linux kernel, 6.12, has been confirmed as the newest LTS release… which also marks the end of the line for kernel 4.19.… This article is an

Blue Origin’s New Glenn will launch any day now – but it better hurry up 2024-12-11 at 09:37 By Richard Speed 2025 looming large as Blue Ring pathfinder prepped for liftoff Blue Origin has confirmed its New Glenn rocket is on track for launch before the end of 2024.… This article is an excerpt from

Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability 2024-12-11 at 09:37 By Microsoft closed out its Patch Tuesday updates for 2024 with fixes for a total of 72 security flaws spanning its software portfolio, including one that it said has been exploited in the wild. Of the 72 flaws, 17 are rated

U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls 2024-12-11 at 08:53 By The U.S. government on Tuesday unsealed charges against a Chinese national for allegedly breaking into thousands of Sophos firewall devices globally in 2020. Guan Tianfeng (aka gbigmao and gxiaomao), who is said to have worked at Sichuan Silence Information Technology

Doctor Who theme added to national sound archive to honor innovation, longevity 2024-12-11 at 08:33 By Simon Sharwood Australia’s archive, that is – it was an Aussie who wrote it The theme music to iconic British sci-fi TV show Doctor Who has been immortalized by Australia’s National Film and Sound Archive.… This article is an

US names Chinese national it alleges was behind 2020 attack on Sophos firewalls 2024-12-11 at 07:27 By Simon Sharwood Also sanctions his employer – an outfit called Sichuan Silence linked to Ragnarok ransomware The US Departments of Treasury and Justice have named a Chinese business and one of its employees as the actors behind the

Healthcare Organizations Report Ransomware Payments Over $500,000 2024-12-11 at 07:27 By Healthcare faced extensive cyberattack costs. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source