Cyber News, Author at CyberConvoy Blog

Akira ransomware targets Cisco VPNs to breach organizations

Akira has been using compromised Cisco VPN accounts to breach corporate networks without needing to drop additional backdoors

26 August

Microsoft PowerShell Gallery vulnerable to spoofing, supply chain attacks

Users of the PS Gallery repository are advised to adopt policies that allow execution of only signed scripts

26 August

Raccoon Stealer malware returns with new stealthier version

08/26/2023
Cyber News
Exploit, Malware

The malware steals data from over 60 applications, including login credentials, credit card information, browsing history, cookies, and cryptocurrency wallet accounts

26 August

Almost 2,000 Citrix NetScaler servers backdoored in hacking campaign

08/26/2023
Cyber News
Breach, Hacking

More than 1,200 servers were backdoored before administrators installed the patch for the vulnerability

26 August

CISA: New Whirlpool backdoor used in Barracuda ESG hacks

CVE-2023-2868 is a critical severity (CVSS v3: 9.8) remote command injection vulnerability impacting Barracuda ESG versions 5.1.3.001 through 9.2.0.006

12 August

Rhysida ransomware behind recent attacks on healthcare

They primarily attack education, government, manufacturing, and technology and managed service provider sectors

12 August

Dell Compellent hardcoded key exposes VMware vCenter admin creds

This AES encryption key is used to encrypt the CITV configuration file containing the program's settings, including the entered vCenter admin credentials

12 August

Malicious extensions can abuse VS Code flaw to steal auth tokens

08/12/2023
Cyber News
0day, Security

Any extension running in VS Code, even malicious ones, can gain access to the Secret Storage and abuse Keytar to retrieve any stored tokens

12 August

Microsoft August 2023 Patch Tuesday warns of 2 zero-days, 87 flaws

This month's Patch Tuesday fixes two zero-day vulnerabilities, with both exploited in attacks and one of them publicly disclosed

8 August

Malicious npm Packages Found Exfiltrating Sensitive Data from Developers

The harvested data, which could also contain credentials and valuable intellectual property, is ultimately transmitted to the server in the form of a ZIP archive file

4 August

Cyber News, Author at CyberConvoy Blog - Page 3 of 30