Category: Cyber Security News & Updates

LOLBAS in the Wild: 11 Living-Off-The-Land Binaries That Could Be Used for Malicious Purposes Cybersecurity researchers have discovered 11 living-off-the-land binaries-and-scripts (LOLBAS) that could be used by threat actors for post-exploitation activities. These binaries and

Colorado Dept. of Higher Education Hit With Massive Data Breach The Colorado Department of Higher Education (CDHE) experienced a data breach in June due to a ransomware incident. The breach exposed private and sensitive data,

Cyberattack Suspends Operations at Hawaii’s Gemini North Observatory The National Science Foundation’s National Optical-Infrared Astronomy Research Laboratory (NOIRLab) detected an attempted cyberattack on its computer systems, leading to the suspension of observations at Gemini North

Russian Hackers Launch Targeted Microsoft Teams Attacks The Russian state-sponsored hacking group known as Midnight Blizzard, or Nobelium, has been launching highly targeted phishing attacks using compromised Microsoft 365 tenants and the Microsoft Teams application.

Hot Topic Faces Credential-Stuffing Attack Resulting in Cracked Accounts and Data Exposure Hot Topic, an American retailer, has notified its customers about multiple credential-stuffing cyberattacks that occurred between February and June. The attacks resulted in

China’s Volt Typhoon APT Threatens US Critical Infrastructure The Volt Typhoon malware, driven by a Chinese Advanced Persistent Threat (APT) group, is more widespread than initially thought, targeting networks controlling US military bases’ communications, power,

AVRecon Botnet Leveraging Compromised Routers for Illegal Proxy Service The AVRecon botnet has been using compromised small office/home office (SOHO) routers to fuel an illegal proxy service. The botnet, which has been active since at

Hackers Exploit Windows Search Feature to Install Remote Access Trojans Malicious actors are taking advantage of a legitimate Windows search feature to download and install remote access trojans (RATs) such as AsyncRAT and Remcos RAT.

Cloud Networks Vulnerable: Ubuntu Linux Faces Rampant Root Takeovers Researchers from Wiz have discovered two vulnerabilities, named “GameOverlay,” in Ubuntu Linux that allow attackers to execute code with root privileges on 40% of Ubuntu Linux

Realst Infostealer Targets Apple macOS Users’ Cryptocurrency Wallets A new malware family called Realst, written in the Rust programming language, is targeting Apple macOS systems, including macOS 14 Sonoma. The malware is distributed through fake