News

Mon 19 Aug 202454 articles

1. 06:23

   Researchers Found a New Technique to Defend Cache Side Channel Attacks

   Researchers from the University of Rochester have unveiled a novel technique to defend against cache side-channel attacks, a prevalent threat in modern computing systems. The new method, named RollingCache, promises to enhance the security of shared systems…

   gbhackers.com
2. 05:43

   Researchers Uncover New Infrastructure Tied to FIN7 Cybercrime Group

   Cybersecurity researchers have discovered new infrastructure linked to a financially motivated threat actor known as FIN7. The two clusters of potential FIN7 activity "indicate communications inbound to FIN7 infrastructure from IP addresses assigned to Post…

   The Hacker News
3. 04:29

   BeaverTail Malware Attacking Windows Users Via Weaponized Games

   Researchers uncovered a new malware campaign dubbed BeaverTail, a North Korean cyber espionage malware family primarily focusing on job seekers. Initially identified as a JavaScript-based info stealer, it has since morphed into a native macOS version that…

   gbhackers.com
4. 03:02

   Debian 11 ‘Bullseye’ Enters LTS: What You Need to Know

   Debian 11, codenamed Bullseye and released on August 14, 2021, has now reached the end of its three-year regular security support period. Consequently, the Debian LTS team has taken over...

   SecurityOnline
5. 01:47

   Beware of Fake PoC Exploits for 0-Click RCE CVE-2024-38063 on GitHub

   Security researchers have discovered a series of fake proof-of-concept (PoC) exploit codes for the critical CVE-2024-38063 vulnerability affecting Windows systems. These fraudulent exploits, which have appeared on GitHub, are not...

   SecurityOnline
6. 01:40

   CVE-2024-7646: A Threat to Kubernetes Clusters Running ingress-nginx

   A newly discovered security vulnerability, CVE-2024-7646, has been identified in the widely used ingress-nginx controller for Kubernetes, posing a severe threat to multi-tenant environments. With a CVSS score of 8.8,...

   SecurityOnline
7. 01:36

   French Police Crack Down on $14.4 Million Holograph Hack

   French authorities have arrested several suspects in connection with the devastating hacking attack on the Holograph platform, which resulted in the theft of tokens worth $14.4 million. The perpetrators exploited...

   SecurityOnline
8. 01:35

   Ransomware Attacks Surge: $459 Million Paid in First Half of 2024

   According to a new report, ransomware victims paid over $459 million to attackers in the first half of 2024. This staggering figure underscores the escalating cybersecurity crisis affecting organizations of...

   SecurityOnline
9. 01:33

   Cloud Attack: Extortionists Breach AWS, Expose 90,000 Variables

   Palo Alto Networks has uncovered a large-scale ransomware campaign that has impacted over 100,000 domains. The perpetrators exploited misconfigured ENV files in AWS to gain access to data stored in...

   SecurityOnline
10. 01:30

    BANSHEE Stealer: $3,000/Month macOS Malware Targets Apple Users

    Security researchers warn of a new macOS malware, BANSHEE Stealer, which has recently emerged in underground forums. Developed by Russian threat actors and introduced on an underground forum, this malware...

    SecurityOnline
11. 01:26

    Shimano Di2 Wireless Protocol: Critical Vulnerabilities Uncovered

    Researchers from the University of California, San Diego, and Northeastern University have uncovered a potential vulnerability in wireless gear-shifting tools used by professional cyclists. This flaw could allow hackers to...

    SecurityOnline
12. 01:25

    Gafgyt Botnet: Now Exploiting GPU Power in Cloud-Native Environments

    Researchers at Aqua Nautilus have identified a new variant of the Gafgyt botnet that represents a significant evolution in malware targeting strategies. Originally known for infecting IoT devices to conduct...

    SecurityOnline
13. 00:37

    Cyclops: Iranian APT 35 Hackers’ Latest Tool for Network Infiltration

    Researchers have uncovered a new piece of malware named Cyclops, likely developed by the “Charming Kitten” group (APT 35). This malware first emerged in December 2023 and by 2024 had...

    SecurityOnline
14. 00:00

    The Mad Liberator ransomware group uses social-engineering techniques

    New cybercrime group Mad Liberator is targeting AnyDesk users and runs a fake Microsoft Windows update screen to conceal data exfiltrating. The Sophos X-Ops Incident Response team warned that a new ransomware group called Mad Liberator is exploiting the…

    Security Affairs