Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

Cybersecurity researchers have disclosed details of a threat actor known as Sticky Werewolf that has been linked to cyber attacks targeting entities in Russia and Belarus.
The phishing attacks were aimed at a pharmaceutical company, a Russian research institute dealing with microbiology and vaccine development, and the aviation sector, expanding beyond their initial focus of government


https://thehackernews.com/2024/06/sticky-werewolf-expands-cyber-attack.html?utm_source=dlvr.it&utm_medium=blogger

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution

Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances.
The vulnerability, tracked as CVE-2024-4577, has been described as a CGI argument injection vulnerability affecting all versions of PHP installed on the Windows operating system.
According to DEVCORE security researchers, the shortcoming


https://thehackernews.com/2024/06/new-php-vulnerability-exposes-windows.html?utm_source=dlvr.it&utm_medium=blogger

Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings

Popular enterprise services provider Zoom has announced the rollout of post-quantum end-to-end encryption (E2EE) for Zoom Meetings, with support for Zoom Phone and Zoom Rooms coming in the future.
"As adversarial threats become more sophisticated, so does the need to safeguard user data," the company said in a statement. "With the launch of post-quantum E2EE, we are doubling down on


https://thehackernews.com/2024/05/zoom-adopts-nist-approved-post-quantum.html?utm_source=dlvr.it&utm_medium=blogger

Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

GitHub has rolled out fixes to address a maximum severity flaw in the GitHub Enterprise Server (GHES) that could allow an attacker to bypass authentication protections.
Tracked as CVE-2024-4985 (CVSS score: 10.0), the issue could permit unauthorized access to an instance without requiring prior authentication.
"On instances that use SAML single sign-on (SSO) authentication with the


https://thehackernews.com/2024/05/critical-github-enterprise-server-flaw.html?utm_source=dlvr.it&utm_medium=blogger

Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

A new attack campaign dubbed CLOUD#REVERSER has been observed leveraging legitimate cloud storage services like Google Drive and Dropbox to stage malicious payloads.
"The VBScript and PowerShell scripts in the CLOUD#REVERSER inherently involves command-and-control-like activities by using Google Drive and Dropbox as staging platforms to manage file uploads and downloads," Securonix


https://thehackernews.com/2024/05/malware-delivery-via-cloud-services.html?utm_source=dlvr.it&utm_medium=blogger

New Windows AI Feature Records All Your PC Activities

The development of AI is massively changing personal computing. AI algorithms are playing a role in computer operating systems and applications, from intelligent virtual assistants to task automation improvements. So, this blend results in better user experiences, increased productivity, and new territories for personalized human-computer intuitive interactions. Microsoft recently unveiled a new AI-powered feature dubbed […]


The post New Windows AI Feature Records All Your PC Activities appeared first on Cyber Security News.


https://cybersecuritynews.com/windows-ai-recall-feature/?utm_source=dlvr.it&utm_medium=blogger

Beware of BlackPlague Malware That Steals Discord Token & Telegram Sessions

Cybersecurity experts have identified a new strain of malware named “BlackPlague” that targets explicitly popular communication platforms Discord and Telegram. This sophisticated malware is designed to steal user tokens and session data, posing a significant threat to the privacy and security of millions of users worldwide. The Rise of BlackPlague Malware According to a report […]


The post Beware of BlackPlague Malware That Steals Discord Token & Telegram Sessions appeared first on Cyber Security News.


https://cybersecuritynews.com/beware-of-blackplague-malware/?utm_source=dlvr.it&utm_medium=blogger

"Linguistic Lumberjack" Vulnerability Discovered in Popular Logging Utility Fluent Bit

Cybersecurity researchers have discovered a critical security flaw in a popular logging and metrics utility called Fluent Bit that could be exploited to achieve denial-of-service (DoS), information disclosure, or remote code execution.
The vulnerability, tracked as CVE-2024-4323, has been codenamed Linguistic Lumberjack by Tenable Research. It impacts versions from 2.0.7 through


https://thehackernews.com/2024/05/linguistic-lumberjack-vulnerability.html?utm_source=dlvr.it&utm_medium=blogger

Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel

An Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS) has been attributed as behind destructive wiping attacks targeting Albania and Israel under the personas Homeland Justice and Karma, respectively.
Cybersecurity firm Check Point is tracking the activity under the moniker Void Manticore, which is also known as Storm-0842 (formerly DEV-0842) by


https://thehackernews.com/2024/05/iranian-mois-linked-hackers-behind.html?utm_source=dlvr.it&utm_medium=blogger

Samstealer Attacking Windows Systems To Steal Sensitive Data

Hackers mainly aim at Windows systems as they are widely adopted and dominate the market, consequently, threat actors will achieve maximum financial gain or theft of data from them compared to other operating systems. In addition, the presence of numerous entry points due to the complexity of the Windows operating system and the diversity of […]


The post Samstealer Attacking Windows Systems To Steal Sensitive Data appeared first on Cyber Security News.


https://cybersecuritynews.com/samstealer-windows-data-theft/?utm_source=dlvr.it&utm_medium=blogger