Cyber News 71

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

A years-old high-severity flaw impacting AVTECH IP cameras has been weaponized by malicious actors as a zero-day to rope them…

Cyber Insight

How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back

Attackers are increasingly using new phishing toolkits (open-source, commercial, and criminal) to execute adversary-in-the-middle (AitM) attacks. AitM enables attackers to…

Cyber Insight

U.S. Agencies Warn of Iranian Hacking Group’s Ongoing Ransomware Attacks

U.S. cybersecurity and intelligence agencies have called out an Iranian hacking group for breaching multiple organizations across the country and…

Cyber Insight

French Authorities Charge Telegram CEO with Facilitating Criminal Activities on Platform

French prosecutors on Wednesday formally charged CEO Pavel Durov with facilitating a litany of criminal activity on the popular messaging…

Cyber Insight

South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

The most popular office software suite in China actually has two critical vulnerabilities, which allowed hackers the opportunity for remote…

Cyber Insight

When Get-Out-The-Vote Efforts Look Like Phishing

Multiple media reports this week warned Americans to be on guard against a new phishing scam that arrives in a…

Cyber Insight

BlackByte Targets ESXi Bug With Ransomware to Access Virtual Assets

The pivot is one of several changes the groups using the malware have used in recent attacks. The pivot is…

Cyber Insight

CCTV Zero-Day Exposes Critical Infrastructure to Mirai Botnet

CISA warned about the RCE zero-day vulnerability in AVTECH IP cameras in early August, and now vulnerable systems are being…

Cyber Insights

Breaking

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

2 Zero-Day Bugs in Microsoft’s Nov. Update Under Active Exploit

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Be Mindful of Social Media Privacy

Twitter CEO’s account hacked via SIM-card swap attack

No one is immune to phishing attack

Password – the Gate of Hell of the Digital Age

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

How AitM Phishing Attacks Bypass MFA and EDR—and How to Fight Back

U.S. Agencies Warn of Iranian Hacking Group’s Ongoing Ransomware Attacks

French Authorities Charge Telegram CEO with Facilitating Criminal Activities on Platform

South Korean APT Exploits 1-Click WPS Office Bug, Nabs Chinese Intel

When Get-Out-The-Vote Efforts Look Like Phishing

BlackByte Targets ESXi Bug With Ransomware to Access Virtual Assets

CCTV Zero-Day Exposes Critical Infrastructure to Mirai Botnet

You Missed

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting Ducks’ Attack Scheme

Flexible Structure of Zip Archives Exploited to Hide Malware Undetected

Microsoft Power Pages Leak Millions of Private Records