CyberNews Malicious Actors Exploit ScreenConnect, AsyncRAT for Massively Scalable Attacks A disturbing trend has emerged, where software sites compromised with search engine optimization (SEO) poisoning techniques are leveraging ScreenConnect and AsyncRAT malware to carry out large-scale attacks. The affected parties include a significant number of small to medium-sized businesses (SMBs), whose websites have been hijacked for … Read more
A teenage suspect, allegedly involved in high-profile hacking cases, has been extradited from Singapore to face federal charges in the United States. The 19-year-old’s extradition marks a significant development in the ongoing cat-and-mouse game between cyber attackers and law enforcement agencies. The individual, who used the alias “Spider,” is believed to have orchestrated an array … Read more
A Critical Vulnerability in Argo CD’s Repository Server Exposes Kubernetes Clusters to Remote Takeover Attacks A severe, unpatched vulnerability in the repository server component of popular Kubernetes application delivery tool Argo CD has been uncovered, putting millions of users at risk. The flaw, discovered by security researchers and not publicly disclosed until now, allows attackers … Read more
A new form of browser-based ransomware, leveraging artificial intelligence (AI) and Chromium API vulnerabilities on Windows and Android devices, has been spotted in the wild. This malicious software uses AI-generated phishing campaigns to spread its payload, making it a particularly challenging threat for security teams to contain. The ransomware, which has not been named by … Read more
A critical vulnerability in Progress Kemp LoadMaster, a load balancing solution used by many organizations worldwide, is being actively exploited by attackers. The pre-authentication remote code execution (RCE) flaw, discovered by researchers at CyberNews, can be exploited without requiring any credentials or authentication, making it particularly concerning. The vulnerability, tracked as CVE-2023-3837, affects Kemp LoadMaster … Read more
A Critical Weakness in Browser Cursors Exposes Systems to Remote Code Execution Cybersecurity researchers have uncovered a disturbing vulnerability in popular browser cursor libraries, allowing attackers to inject malicious code that can evade sandboxing and execute system commands remotely. The critical flaw affects multiple browsers, including Google Chrome, Mozilla Firefox, and Microsoft Edge, putting millions … Read more
Adobe’s latest security update addresses seven critical vulnerabilities, all with a maximum CVSS (Common Vulnerability Scoring System) score of 10.0, affecting its ColdFusion and Campaign Classic products. These flaws were discovered by an AI-powered tool used to scan for weaknesses in Adobe’s software. The vulnerabilities, which range from arbitrary code execution to information disclosure, were … Read more
A New Banking Trojan Emerges, Targeting Iberian Bank Users with Deceptive PDF Lures Cybersecurity researchers have identified a new banking trojan called Ousaban that’s specifically designed to target users of Spanish and Portuguese banks. This sophisticated malware uses fake PDF files to trick victims into installing the malicious software on their devices. The Ousaban banking … Read more
A new and sophisticated form of browser ransomware, known as “ChromaRansom,” has been spotted in the wild, leveraging AI-generated code to exploit vulnerabilities in Chromium-based browsers on both Windows and Android platforms. This malware is particularly worrying due to its ability to bypass traditional security measures, making it a significant threat to individuals and organizations … Read more
A Critical Flaw in Kemp LoadMaster Appliances is Being Actively Exploited, Putting Thousands of Organizations at Risk A severe pre-authentication remote code execution (RCE) vulnerability in Kemp LoadMaster appliances has been discovered and is currently being exploited by attackers. The flaw, which affects versions 7.2.x and earlier, allows unauthenticated hackers to execute arbitrary code on … Read more