GitHub's Secret Scanning Feature Now Covers AWS, Microsoft, Google, and Slack

GitHub has announced an improvement to its secret scanning feature that extends validity checks to popular services such as Amazon Web Services (AWS), Microsoft, Google, and Slack.
Validity checks, introduced by the Microsoft subsidiary earlier this year, alert users whether exposed tokens found by secret scanning are active, thereby allowing for effective remediation measures. It was first


https://thehackernews.com/2023/10/githubs-secret-scanning-feature-now.html?utm_source=dlvr.it&utm_medium=blogger

Businesses Beware: Essential Cybersecurity Best Practices

Cybersecurity is an increasingly important consideration for businesses of all sizes. It is essential to understand and implement the best practices to ensure that data… The post Businesses Beware: Essential Cybersecurity Best Practices appeared first on Security Zap. This article…


Read more →
The post Businesses Beware: Essential Cybersecurity Best Practices first appeared on IT Security News.


https://www.itsecuritynews.info/businesses-beware-essential-cybersecurity-best-practices/?utm_source=dlvr.it&utm_medium=blogger

BlackByte Ransomware Victim: Meridian Cooperative

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating… This article has been indexed from RedPacket Security Read the original article: BlackByte Ransomware Victim: Meridian Cooperative


Read more →
The post BlackByte Ransomware Victim: Meridian Cooperative first appeared on IT Security News.


https://www.itsecuritynews.info/blackbyte-ransomware-victim-meridian-cooperative/?utm_source=dlvr.it&utm_medium=blogger

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions

A new Linux security vulnerability dubbed Looney Tunables has been discovered in the GNU C library's ld.so dynamic loader that, if successfully exploited, could lead to a local privilege escalation and allow a threat actor to gain root privileges.
Tracked as CVE-2023-4911 (CVSS score: 7.8), the issue is a buffer overflow that resides in the dynamic loader's processing of the GLIBC_TUNABLES


https://thehackernews.com/2023/10/looney-tunables-new-linux-flaw-enables.html?utm_source=dlvr.it&utm_medium=blogger

Researcher Reveals New Techniques to Bypass Cloudflare's Firewall and DDoS Protection

Firewall and distributed denial-of-service (DDoS) attack prevention mechanisms in Cloudflare can be circumvented by exploiting gaps in cross-tenant security controls, defeating the very purpose of these safeguards, it has emerged.
"Attackers can utilize their own Cloudflare accounts to abuse the per-design trust-relationship between Cloudflare and the customers' websites, rendering the


https://thehackernews.com/2023/10/researcher-reveal-new-technique-to.html?utm_source=dlvr.it&utm_medium=blogger

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Provider (IDP) as initial access into an environment with the goal of stealing Intellectual Property (IP) for extortion. LUCR-3 targets Fortune 2000 companies across various sectors, including but not limited to Software, Retail, Hospitality,


https://thehackernews.com/2023/10/lucr-3-scattered-spider-getting-saas-y.html?utm_source=dlvr.it&utm_medium=blogger

Silent Skimmer: A Year-Long Web Skimming Campaign Targeting Online Payment Businesses

A financially motivated campaign has been targeting online payment businesses in the Asia Pacific, North America, and Latin America with web skimmers for more than a year.
The BlackBerry Research and Intelligence Team is tracking the activity under the name Silent Skimmer, attributing it to an actor who is knowledgeable in the Chinese language. Prominent victims include online businesses and


https://thehackernews.com/2023/10/silent-skimmer-year-long-web-skimming.html?utm_source=dlvr.it&utm_medium=blogger

OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code

A high-severity security flaw has been disclosed in the open-source OpenRefine data cleanup and transformation tool that could result in arbitrary code execution on affected systems.
Tracked as CVE-2023-37476 (CVSS score: 7.8), the vulnerability is a Zip Slip vulnerability that could have adverse impacts when importing a specially crafted project in versions 3.7.3 and below.
"Although OpenRefine


https://thehackernews.com/2023/10/openrefines-zip-slip-vulnerability.html?utm_source=dlvr.it&utm_medium=blogger

Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users

An emerging Android banking trojan called Zanubis is now masquerading as a Peruvian government app to trick unsuspecting users into installing the malware.
"Zanubis's main infection path is through impersonating legitimate Peruvian Android applications and then tricking the user into enabling the Accessibility permissions in order to take full control of the device," Kaspersky said in an


https://thehackernews.com/2023/10/zanubis-android-banking-trojan-poses-as.html?utm_source=dlvr.it&utm_medium=blogger

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

Sophisticated cyber actors backed by Iran known as OilRig have been linked to a spear-phishing campaign that infects victims with a new strain of malware called Menorah.
"The malware was designed for cyberespionage, capable of identifying the machine, reading and uploading files from the machine, and downloading another file or malware," Trend Micro researchers Mohamed Fahmy and Mahmoud Zohdy 


https://thehackernews.com/2023/09/iranian-apt-group-oilrig-using-new.html?utm_source=dlvr.it&utm_medium=blogger