The Hacker News

AUGUST 31, 2024

A recently patched security flaw in Google Chrome and other Chromium web browsers was exploited as a zero-day by North Korean actors in a campaign designed to deliver the FudModule rootkit. The development is indicative of the persistent efforts made by the nation-state adversary, which had made a habit of incorporating rafts of Windows zero-day exploits into its arsenal in recent months.

139

139

Security Affairs

AUGUST 31, 2024

North Korea-linked APT exploited the recently patched Google Chrome zero-day CVE-2024-7971 to deploy the FudModule rootkit. North Korea-linked group Citrine Sleet (aka AppleJeus , Labyrinth Chollima , UNC4736, Hidden Cobra ) have exploited the recently patched Google Chrome zero-day CVE-2024-7971 (CVSS score 8.8) to deploy the FudModule rootkit , states Microsoft.

Social Engineering 132

Social Engineering Cryptocurrency Malware Engineering 132

Security Boulevard

AUGUST 31, 2024

Why GRC strategies are often not as effective as they could be, and specific practices businesses can adopt to improve GRC operations. The post 4 Tips for Optimizing Your GRC Strategy appeared first on Security Boulevard.

Risk 124

Risk Government Cybersecurity 124

Penetration Testing

AUGUST 31, 2024

Cybersecurity researchers at eSentire’s Threat Response Unit (TRU) have uncovered a sophisticated phishing campaign distributing the AsyncRAT remote access trojan (RAT) coupled with the Infostealer plugin. The attack employs deceptive... The post Evasive Phishing Campaign Delivers AsyncRAT and Infostealer appeared first on Cybersecurity News.

Phishing 80

Phishing Cybersecurity Malware 80

Advertisement

Many cybersecurity awareness platforms offer massive content libraries, yet they fail to enhance employees’ cyber resilience. Without structured, engaging, and personalized training, employees struggle to retain and apply key cybersecurity principles. Phished.io explains why organizations should focus on interactive, scenario-based learning rather than overwhelming employees with excessive content.

Cyber threats

Security Boulevard

AUGUST 31, 2024

The widespread adoption of IoT devices has created new cybersecurity challenges, including those related to external attack surface management. The post Modern Strategies for IoT Device Fingerprinting appeared first on Security Boulevard.

IoT 117

IoT Cybersecurity Security Awareness 117

WIRED Threat Level

AUGUST 31, 2024

Plus: China-linked hackers infiltrate US internet providers, authorities crack down on a major piracy operation, and a ransomware gang claims attacks during the Paris Olympics.

Internet 69

Internet Internet Ransomware Hacking 69

Penetration Testing

AUGUST 31, 2024

Cyble Research & Intelligence Labs (CRIL) has uncovered the release of a new malware-as-a-service (MaaS) tool known as ManticoraLoader. The service, announced by the notorious threat actors behind the infamous... The post ManticoraLoader: The New Malware-as-a-Service Threat appeared first on Cybersecurity News.

Malware 63

Malware Cybersecurity Ransomware 63

Security Boulevard

AUGUST 31, 2024

Permalink The post Happy United States Labor Day Weekend 2024 / Feliz Fin de Semana del Día del Trabajo de Estados Unidos 2024 / Joyeux Fin de Semaine de la Fête du Travail aux États-Unis 2024 appeared first on Security Boulevard.

64

64

Troy Hunt

AUGUST 31, 2024

I still find the reactions to the Telegram situation with Durov's arrest odd. There are no doubt all sorts of politics surrounding it, but even putting all that aside for a moment, the assertion that a platform provider should not be held accountable for moderating content on the platform is just nuts. As I say in this week's video, there's lots of content that you can put in the "grey" bucket (free speech versus hate speech, for example) and there are valid arguments to b

Accountability 277

Accountability Encryption 277