TechKranti

Cisco patches IOS XE vulnerabilities actively being exploited Cisco has released patches for two vulnerabilities, CVE-2023-20198 and CVE-2023-20273, that were actively exploited by hackers to compromise IOS XE devices. The vulnerabilities allow remote attackers to

‘Grandoreiro’ Trojan Targets Global Banking Customers The Brazilian banking malware known as ‘Grandoreiro’ has expanded its campaign to target customers in Spain, in addition to Brazil and Mexico. The malware is delivered through phishing emails

Iranian Hacker Group ‘CyberAvengers’ Claims Responsibility for Power Outages in Israel The Iranian hacker collective known as ‘CyberAvengers’ has claimed responsibility for recent power outages in Yavneh, Israel. While Israeli authorities have not confirmed a

Iran-Linked APT34 Targets Saudis with Menorah Malware APT34, a notorious advanced persistent threat group linked to Iran, is conducting a phishing campaign targeting users in the Middle East. The campaign utilizes a custom tool called

New Android Malware ‘Zanubis’ Disguises Itself as a Governmental Organization A recent study by Securelist reveals the emergence of new versions of Lumma stealer and Zanubis Android banking malware. ASMCrypt, a cryptor/loader variant associated with

Budworm APT Group Strikes Again with Enhanced Malware Toolkit The Budworm APT group has been identified using an updated version of their SysUpdate backdoor to target a Middle Eastern telecommunications organization and an Asian government.

WordPress Simple Membership Plugin Vulnerabilities Enable Account Hijacking Two security vulnerabilities have been discovered in the Simple Membership plugin for WordPress, allowing for privilege escalation and account takeover. The first vulnerability allows unauthenticated users to

MOVEit Flaw Leads to 900 University Data Breaches National Student Clearinghouse, a nonprofit serving thousands of universities, has suffered a data breach due to a flaw in its MOVEit environment. The breach impacted nearly 900

Hackers Given Access to Voting Equipment for Security Testing Election machine manufacturers in the US have allowed ethical hackers to test their voting equipment in an effort to improve security ahead of the 2020 Presidential