A cyberespionage and hacking campaign tracked as ‘RedClouds’ uses the custom ‘RDStealer’ malware to automatically steal data from drives shared through Remote Desktop connections. […] Read More
BleepingComputer
Related Posts
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
[[{“value”:”Ivanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication.
The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system.
"An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti”}]] Read More
The Hacker News | #1 Trusted Cybersecurity News Site
A week in security (November 27 – December 3)
A week in security (November 27 – December 3)
Last week on Malwarebytes Labs:
Will ChatGPT write ransomware? Yes.
Associated Press, ESPN, CBS among top sites serving fake virus alerts
Meta sued over forcing users to pay to stop tracking
Update now! Chrome fixes actively exploited zero-day vulnerability
Many major websites allow users to have weak passwords
Ransomware gangs and Living Off the Land (LOTL) attacks: A deep dive
ownCloud vulnerability can be used to extract admin passwords
Stay safe!
Our business solutions remove all remnants of ransomware and prevent you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.
Malwarebytes
CISA and OpenSSF Release Framework for Package Repository Security
CISA and OpenSSF Release Framework for Package Repository Security
[[{“value”:”The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced that it’s partnering with the Open Source Security Foundation (OpenSSF) Securing Software Repositories Working Group to publish a new framework to secure package repositories.
Called the Principles for Package Repository Security, the framework aims to establish a set of foundational rules for package”}]] Read More
The Hacker News | #1 Trusted Cybersecurity News Site