The Hacker News

AUGUST 31, 2024

A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign designed to deliver the FudModule rootkit. The development is indicative of the persistent efforts made by the nation-state adversary, which had made a habit of incorporating rafts of Windows zero-day exploits into its arsenal in recent months.

143

143

Security Affairs

AUGUST 31, 2024

North Korea-linked APT exploited the recently patched Google Chrome zero-day CVE-2024-7971 to deploy the FudModule rootkit. North Korea-linked group Citrine Sleet (aka AppleJeus , Labyrinth Chollima , UNC4736, Hidden Cobra ) have exploited the recently patched Google Chrome zero-day CVE-2024-7971 (CVSS score 8.8) to deploy the FudModule rootkit , states Microsoft.

Social Engineering 137

Social Engineering Cryptocurrency Malware Engineering 137

WIRED Threat Level

AUGUST 31, 2024

Plus: China-linked hackers infiltrate US internet providers, authorities crack down on a major piracy operation, and a ransomware gang claims attacks during the Paris Olympics.

Internet 126

Internet Internet Ransomware Hacking 126

Security Boulevard

AUGUST 31, 2024

Why GRC strategies are often not as effective as they could be, and specific practices businesses can adopt to improve GRC operations. The post 4 Tips for Optimizing Your GRC Strategy appeared first on Security Boulevard.

Risk 124

Risk Government Cybersecurity 124

Advertisement

Keeper Security is transforming cybersecurity for people and organizations around the world. Keeper’s affordable and easy-to-use solutions are built on a foundation of zero-trust and zero-knowledge security to protect every user on every device. Our next-generation privileged access management solution deploys in minutes and seamlessly integrates with any tech stack to prevent breaches, reduce help desk costs and ensure compliance.

Passwords

Penetration Testing

AUGUST 31, 2024

Cybersecurity researchers at eSentire’s Threat Response Unit (TRU) have uncovered a sophisticated phishing campaign distributing the AsyncRAT remote access trojan (RAT) coupled with the Infostealer plugin. The attack employs deceptive... The post Evasive Phishing Campaign Delivers AsyncRAT and Infostealer appeared first on Cybersecurity News.

Phishing 78

Phishing Cybersecurity Malware 78

Security Boulevard

AUGUST 31, 2024

The widespread adoption of IoT devices has created new cybersecurity challenges, including those related to external attack surface management. The post Modern Strategies for IoT Device Fingerprinting appeared first on Security Boulevard.

IoT 117

IoT Cybersecurity Security Awareness 117

Security Boulevard

AUGUST 31, 2024

An estimated 2.7 billion personal records were stolen from National Public Data (NPD), a Florida-based data broker company that collects and sells personal data for background checks. The post Missing Guardrails, a Troubling Trend in Data Protection appeared first on Security Boulevard.

Data privacy 110

Data privacy Data breaches Cybersecurity 110

Troy Hunt

AUGUST 31, 2024

I still find the reactions to the Telegram situation with Durov's arrest odd. There are no doubt all sorts of politics surrounding it, but even putting all that aside for a moment, the assertion that a platform provider should not be held accountable for moderating content on the platform is just nuts. As I say in this week's video, there's lots of content that you can put in the "grey" bucket (free speech versus hate speech, for example) and there are valid arguments to b

Accountability 258

Accountability Encryption 258

Security Boulevard

AUGUST 31, 2024

Permalink The post Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

64

64