DanaBot malware has reemerged with a new version, six months after law enforcement efforts disrupted its operations. The cybercriminals behind DanaBot continue to adapt using Tor domains and cryptocurrency addresses to facilitate illegal activities. #DanaBot #OperationEndgame
Category: Cyber Security News
Microsoft has enhanced Windows 11 with native support for third-party passkey managers, improving passwordless authentication. This update, integrating standards like FIDO2/WebAuthn, increases security and convenience for users using platforms such as 1Password and Bitwarden. #Passkeys #Windows11Security
Microsoft has released a fix for a bug caused by the Windows 11 KB5067036 update, which prevented users from fully closing the Task Manager. The issue led to multiple lingering processes that degraded device performance. #Windows11Update #TaskManagerBug
A ransomware attack on Synnovis in June 2024 led to the theft of patient data and disrupted services across several NHS hospitals in London. The incident was linked to the Qilin ransomware group, and affected organizations are now working to assess the impact of the breach. #Qilin #Synnovis #NHS #ransomwareattack
An advanced threat actor exploited critical zero-day vulnerabilities in NetScaler ADC, Gateway, and Cisco ISE to deploy custom malware, prior to public disclosure and patch availability. Amazon’s threat intelligence tracked these exploits through honeypot data, revealing sophisticated hacking techniques and indiscriminate targeting. #CitrixBleed2 #CISCOISEExploit
The UK has implemented new legislation to strengthen cybersecurity protections for critical sectors such as hospitals, energy, water, and transport, aiming to prevent costly cyberattacks. The Cyber Security and Resilience Bill updates existing regulations, mandates cybersecurity standards, and enhances response capabilities for organizations involved in essential services. #UKCyberBill #CriticalInfrastructure #NHS #WaterSecurity #EnergyProtection
A vulnerability in Zoom Workplace VDI Client for Windows allows attackers with local access to escalate privileges, posing a high security risk. Users should urgently update to the latest versions to prevent potential exploitation and safeguard sensitive data. #ZoomVulnerabilities #PrivilegeEscalation…
A large-scale phishing campaign exploits Facebook’s Business Suite infrastructure to deliver convincing fraudulent notifications, targeting over 5,000 businesses worldwide. This method leverages trusted Meta domains and features to deceive organizations, highlighting the evolving tactics of cyber threat actors. #MetaBusiness #FacebookPhishing…
North Korean cyber espionage group KONNI has exploited Google’s “Find Hub” service to remotely wipe South Korean targets’ Android devices, erasing crucial evidence of their activities. This campaign highlights the increasing sophistication of North Korean cyber operations using legitimate cloud features for malicious purposes. #KONNI #GoogleFindHub…
Cybersecurity researchers have identified a rise in ransomware incidents linked to the Qilin group, which exploits vulnerabilities like unpatched VPNs and lacks MFA. Most victims are small-to-medium-sized businesses, and the group is increasingly collaborating with other cybercrime entities such as Scattered Spider. #Qilin #ScatteredSpider…
Zimperium researchers have identified Fantasy Hub, a Russian Android RAT offered as Malware-as-a-Service, capable of device control, spying, and data theft through Telegram. This sophisticated MaaS platform targets banks and enterprise users, leveraging native droppers, WebRTC streaming, and SMS abuse to evade detection. #FantasyHub #RussianThreatActors #BankingTrojan…
A new phishing-as-a-service platform called “Quantum Route Redirect” automates large-scale credential theft across 90 countries, simplifying complex phishing campaigns for cybercriminals. Experts warn that its features, such as traffic routing and victim analytics, make it highly effective against security defenses. #QuantumRouteRedirect #PhaaS #Microsoft365…
A sophisticated phishing campaign targets email users with fake security alert notifications appearing to come from their own organization’s domain. This attack uses social engineering and replica login pages to steal credentials, posing significant security risks for organizations and individuals. #BusinessEmailCompromise #PhishingTactics…
Microsoft has issued patches for 63 vulnerabilities, including a actively exploited privilege escalation flaw in Windows Kernel. The updates address critical bugs across various components, emphasizing the importance of timely application to prevent exploits. #WindowsKernelVulnerability #PrivilegeEscalation #MicrosoftPatch…
Active Directory is a critical security component for Fortune 1000 companies, but its complexity and vulnerabilities make it a prime target for attackers. Protecting AD requires a layered approach including strong password policies, privileged access management, zero-trust principles, and continuous monitoring. #ActiveDirectory #CyberThreats…