September 24, 2024 | Cybernews Summaries
China-linked Flax Typhoon dismantles Raptor Train botnet, North Korea’s Lazarus Group targets energy and aerospace sectors with MISTPEN malware, Europol dismantles criminal network using Ghost phishing platform, Iranian UNC1860 provides initial access for hacking groups, Apple drops lawsuit against NSO Group, new wave of phishing attacks exploit HTTP headers, Sandvine exits “non-democratic” countries, sensitive data leaks due to ServiceNow misconfigurations, Google Cloud addresses Document AI flaw, Microsoft plans to end kernel access for EDR software
September 24, 2024 | Cybernews Summaries
German authorities collaborate to seize servers and gather crucial user information in crackdown on cybercrime exchanges.
September 24, 2024 | Cybernews Summaries
Mallox Linux 1.0, derived from leaked Kryptina ransomware code, demonstrates adaptability of ransomware operations in cyber threat landscape.
September 24, 2024 | Cybernews Summaries
Kaspersky has replaced its anti-malware software with UltraAV for 1 million US customers, leading to frustration over missing settings and file deletions.
September 24, 2024 | Cybernews Summaries
Two critical security vulnerabilities, CVE-2024-22303 and CVE-2024-21743, were found in the Houzez WordPress theme and its Login Register plugin, allowing unauthorized users to escalate privileges and potentially compromise WordPress sites.
September 24, 2024 | Cybernews Summaries
Earth Baxia, a Chinese APT group, is exploiting a critical GeoServer flaw to deploy EAGLEDOOR malware targeting government and energy sectors in the Asia-Pacific region.