Attackers, including nation-state actors, increasingly leverage legitimate cloud services for espionage operations, exploiting their low-profile and cost-effective nature. The services, such as Microsoft OneDrive and Google Drive, evade detection by masquerading as trusted entities, thereby enabling covert data exfiltration and tool development. Researchers discovered a novel Go-based backdoor, GoGra, deployed against a South Asian media […]
The post Hackers Leveraging OneDrive & Google Drive To Hide Malicious Traffic appeared first on Cyber Security News.
A critical vulnerability, designated as CVE-2024-42219, has been identified in 1Password 8 for Mac. This flaw allows malicious actors to exfiltrate vault items by bypassing the app’s platform security protections. Robinhood’s Red Team responsibly disclosed the issue following an independent security assessment of 1Password for Mac. CVE-2024-42219 – The Vulnerability The vulnerability affects the inter-process […]
The post 1Password Vulnerability Let Attackers Exfiltrate Vault Items appeared first on Cyber Security News.
Learn how to safeguard AD data risks and how to harden the AD attack surface to reduce the risk of a successful attack.
The post Defusing AD-Based Risks | Best Practices for Securing Modern Directory Services appeared first on SentinelOne.
A newly surfaced cybercampaign targeting Israeli users has thrust the sophisticated RHADAMANTHYS information stealer into the spotlight. Originating from Russian-speaking cybercriminals and offered as a Malware-as-a-Service, RHADAMANTHYS excels at data exfiltration. Recent samples and in-depth analysis reveal a complex infection chain and extensive payload capabilities, highlighting the evolving threat landscape and underscoring the need for […]
The post RHADAMANTHYS Stealer Weaponizing RAR Archive To Steal Login Credentials appeared first on Cyber Security News.
Deep learning models analyzing API sequences for Windows malware detection face challenges due to evolving malware variants. A group of researchers recently proposed the MME framework, which enhances the existing detectors by leveraging API knowledge graphs and system resource encodings. Utilizing contrastive learning, MME captures similar malicious semantics in evolved malware samples. MME Framework Experimental […]
The post Researchers Proposed MME Framework To Enhance API Sequence-Based Malware Detection appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News Platform.
The Apache CloudStack project has announced the release of long-term support (LTS) security updates, versions 4.18.2.3 and 4.19.1.1, which address two critical vulnerabilities, CVE-2024-42062 and CVE-2024-42222. These vulnerabilities pose significant risks to the integrity, confidentiality, and availability of CloudStack-managed infrastructure. CVE-2024-42062: User Key Exposure to Domain Admins CVE-2024-42062 is a critical vulnerability that affects Apache […]
The post Apache Cloudstack Vulnerability Exposes API & Secret Keys to Admin Accounts appeared first on Cyber Security News.