From Cryptojacking to DDoS Attacks: Diicot Expands Tactics with Cayosin Botnet

Cybersecurity researchers have discovered previously undocumented payloads associated with a Romanian threat actor named Diicot, revealing its potential for launching distributed denial-of-service (DDoS) attacks. "The Diicot name is significant, as it's also the name of the Romanian organized crime and anti-terrorism policing unit," Cado Security said in a technical report. "In addition,
https://thehackernews.com/2023/06/from-cryptojacking-to-ddos-attacks.html?utm_source=dlvr.it&utm_medium=blogger

Fake security researchers push malware files on GitHub

Categories: News Tags: GitHub Tags: malware Tags: repository Tags: security researcher Tags: fake Tags: download Tags: scam Tags: twitter Tags: social We take a look at reports of fake security researchers offering up malware downloads via GitHub repositories. (Read more…)… Read more → The post Fake security researchers push malware files on GitHub first appeared on IT Security News.
https://www.itsecuritynews.info/fake-security-researchers-push-malware-files-on-github/?utm_source=dlvr.it&utm_medium=blogger

Chinese Hackers Employed DNS-over-HTTPS for Linux Malware Communication

ChamelGang, a sophisticated threat actor believed to be based in China, has been using different tools for intrusions, as identified by the security researchers at Stairwell Threat Research in their recent investigation. While apart from this, the Threat Research team of Stairwell also found new tools for Linux intrusions that are developed by the group. […] The post Chinese Hackers Employed DNS-over-HTTPS for Linux Malware Communication appeared first on Cyber Security News.
https://cybersecuritynews.com/hackers-employed-dns-over-https/?utm_source=dlvr.it&utm_medium=blogger

Cyber debt levels reach tipping point

The tension between difficult economic conditions and the pace of technology innovation, including the evolution of AI, is influencing the growth of identity-led cybersecurity exposure, according to CyberArk. The CyberArk’s report details how these issues – allied to an expected… Read more → The post Cyber debt levels reach tipping point first appeared on IT Security News.
https://www.itsecuritynews.info/cyber-debt-levels-reach-tipping-point/?utm_source=dlvr.it&utm_medium=blogger

Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange Hack

The U.S. Department of Justice (DoJ) has charged two Russian nationals in connection with masterminding the 2014 digital heist of the now-defunct cryptocurrency exchange Mt. Gox. According to unsealed indictments released last week, Alexey Bilyuchenko, 43, and Aleksandr Verner, 29, have been accused of conspiring to launder approximately 647,000 bitcoins stolen from September 2011 through at
https://thehackernews.com/2023/06/two-russian-nationals-charged-for.html?utm_source=dlvr.it&utm_medium=blogger

Critical FortiOS and FortiProxy Vulnerability Likely Exploited - Patch Now!

Fortinet on Monday disclosed that a newly patched critical flaw impacting FortiOS and FortiProxy may have been "exploited in a limited number of cases" in attacks targeting government, manufacturing, and critical infrastructure sectors. The vulnerability, tracked as CVE-2023-27997 (CVSS score: 9.2), concerns a heap-based buffer overflow vulnerability in FortiOS and FortiProxy SSL-VPN that could
https://thehackernews.com/2023/06/critical-fortios-and-fortiproxy.html?utm_source=dlvr.it&utm_medium=blogger

China’s cyber now aimed at infrastructure, warns CISA boss

Resilience against threats needs a boost China’s cyber-ops against the US have shifted from espionage activities to targeting infrastructure and societal disruption, the director of the Cybersecurity and Infrastructure Security Agency (CISA) Jen Easterly told an Aspen Institute event on… Read more → The post China’s cyber now aimed at infrastructure, warns CISA boss first appeared on IT Security News.
https://www.itsecuritynews.info/chinas-cyber-now-aimed-at-infrastructure-warns-cisa-boss/?utm_source=dlvr.it&utm_medium=blogger

Apple’s Safari Private Browsing Now Automatically Removes Tracking Parameters in URLs

Apple is introducing major updates to Safari Private Browsing, offering users better protections against third-party trackers as they browse the web. “Advanced tracking and fingerprinting protections go even further to help prevent websites from using the latest techniques to track or… Read more → The post Apple’s Safari Private Browsing Now Automatically Removes Tracking Parameters in URLs first appeared on IT Security News.
https://www.itsecuritynews.info/apples-safari-private-browsing-now-automatically-removes-tracking-parameters-in-urls/?utm_source=dlvr.it&utm_medium=blogger

What is SYN Attack? How Does the Attack Works ?

TCP SYN Flood attacks are the most popular ones among DDOS attacks. Here we will discuss, in detail, the basis of the TCP SYN attack and to stop it before it reaches those servers. It’s been more than two decades since the first DDOS attack was attempted at the University of Minnesota, knocking it down […] The post What is SYN Attack? How Does the Attack Works ? appeared first on Cyber Security News.
https://cybersecuritynews.com/syn-attack/?utm_source=dlvr.it&utm_medium=blogger

Update your Cisco System Secure Client now to fix this AnyConnect bug

Categories: Exploits and vulnerabilities Categories: News Tags: Cisco Tags: anyconnect Tags: system secure client Tags: VPN Tags: bug Tags: patch Tags: update Tags: vulnerability Tags: SYSTEM We take a look at a recent update for Cisco Secure System Client and… Read more → The post Update your Cisco System Secure Client now to fix this AnyConnect bug first appeared on IT Security News.
https://www.itsecuritynews.info/update-your-cisco-system-secure-client-now-to-fix-this-anyconnect-bug/?utm_source=dlvr.it&utm_medium=blogger