Tag: malicious
-
New Phishing Campaign Delivers Remote Access Trojans (RATs)
Sophisticated phishing campaign leverages public services, where remote access Trojans are being delivered via malicious Java downloader A new phishin… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/new-phishing-campaign-delivers-remote-access-trojans-rats/
-
BSAM: Open-source methodology for Bluetooth security assessment
Many wireless headsets using Bluetooth technology have vulnerabilities that may allow malicious individuals to covertly listen in on private conversat… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/13/bluetooth-security-assessment-methodology/
-
Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites
A new malware campaign is leveraging a high-severity security flaw in the Popup Builder plugin for WordPress to inject malicious JavaScript code.Accor… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/malware-campaign-exploits-popup-builder.html
-
Multiple QNAP Vulnerabilities Let Attackers Inject Malicious Codes
QNAP has disclosed a series of vulnerabilities within its operating systems and applications that could potentially allow attackers to compromise syst… First seen on gbhackers.com Jump to article: gbhackers.com/multiple-qnap-vulnerabilities/
-
Vulnerability in 16.5K+ VMware ESXi Instances Let Attackers Execute Code
VMware’s ESXi, Workstation, and Fusion products could allow attackers to execute malicious code on affected systems. Impacted VMware Products These vu… First seen on gbhackers.com Jump to article: gbhackers.com/vmware-esxi-vulnerability/
-
How to Ensure Open Source Packages Are Not Landmines
CISA and OpenSSF jointly published new guidance recommending technical controls to make it harder for developers to bring malicious software component… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/how-to-ensure-open-source-pckages-are-not-landmines
-
How to Ensure Open-Source Packages Are Not Landmines
CISA and OpenSSF jointly published new guidance recommending technical controls to make it harder for developers to bring in malicious software compon… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/how-to-ensure-open-source-pckages-are-not-landmines
-
How to Ensure Open-Source Packages Are Not Mines
CISA and OpenSSF jointly published new guidance recommending technical controls to make it harder for developers to bring in malicious software compon… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/untitled
-
100% Surge in Malicious Emails Bypassing Secure Email Gateways
The frequency of malicious emails successfully circumventing Secure Email Gateways (SEGs) has doubled in the past year. This surge highlights the evol… First seen on gbhackers.com Jump to article: gbhackers.com/surge-in-malicious-emails/
-
Immediate AI risks and tomorrow’s dangers
>>At the most basic level, AI has given malicious attackers superpowers,
-
Hacked WordPress Sites Abusing Visitors’ Browsers for Distributed Brute-Force Attacks
Threat actors are conducting brute-force attacks against WordPress sites by leveraging malicious JavaScript injections, new findings from Sucuri revea… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/hacked-wordpress-sites-abusing-visitors.html
-
Beware of New Snake Python Infostealer Attacking Facebook Messenger Users
A new menace has emerged targeting unsuspecting Facebook Messenger users. Dubbed the >>Python Infostealer,
-
New SSH-Snake Worm-Like Tool Threatens Network Security
The Sysdig Threat Research Team (TRT) discovered that a threat actor is leveraging an open-source network mapping tool called SSH-Snake for malicious … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/new-ssh-snake-worm-like-tool-threatens-network-security/
-
OpenNMS XSS Flaw Let Attackers Inject JavaScript Payload
A critical vulnerability in OpenNMS, a widely used network monitoring solution, has been identified, allowing attackers to inject malicious JavaScript… First seen on gbhackers.com Jump to article: gbhackers.com/opennms-xss-attackers-javascript/
-
Hackers Abuse QEMU Hardware Emulator for Stealthy C2 Communication
QEMU is an open-source platform that provides a secure and private virtualized space for trying out malicious codes, exploits, and attacks on their ow… First seen on gbhackers.com Jump to article: gbhackers.com/hackers-qemu-data-exfiltration/
-
Hackers Install macOS Malware Using Weaponised Calendar Invites
Hackers use weaponized calendar invites to exploit vulnerabilities in email systems, tricking users into clicking on malicious links or downloading ma… First seen on gbhackers.com Jump to article: gbhackers.com/malware-weaponized-calendar-invites/
-
RA World Ransomware Attack Windows Using Hacked Domain Control Anti-AV Tactics
Threat actors use hacked domain control to host malicious content by leveraging legitimate domains to evade detection by security measures. Anti… First seen on gbhackers.com Jump to article: gbhackers.com/ra-world-ransomware/
-
New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT
Ukrainian entities based in Finland have been targeted as part of a malicious campaign distributing a commercial remote access trojan known as Remcos … First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/new-idat-loader-attacks-using.html
-
Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks
A recently open-sourced network mapping tool called SSH-Snake has been repurposed by threat actors to conduct malicious activities.SSH-Snake… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/cybercriminals-weaponizing-open-source.html
-
North Korean Hackers Targeting Developers with Malicious npm Packages
A set of fake npm packages discovered on the Node.js repository has been found to share ties with North Korean state-sponsored actors, new findings fr… First seen on thehackernews.com Jump to article: thehackernews.com/2024/02/north-korean-hackers-targeting.html
-
Over 100 Malicious AI/ML Models Found on Hugging Face Platform
As many as 100 malicious artificial intelligence (AI)/machine learning (ML) models have been discovered in the Hugging Face platform.These include ins… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/over-100-malicious-aiml-models-found-on.html
-
Millions of Malicious Repositories Flood GitHub
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/millions-of-malicious-repositories-flood-github
-
Securing software repositories leads to better OSS security
Malicious software packages are found on public software repositories such as GitHub, PyPI and the npm registry seemingly every day. Attackers use a n… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/03/04/securing-software-repositories/
-
SafeBreach Coverage for AA24-060A (Phobos Ransomware) and AA24-060B (Ivanti Connect Secure)
CISA issued two separate advisories related to malicious behavior exhibited by threat actors. AA24-060A pertains to Phobos Ransomware and AA24-060B pe… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/safebreach-coverage-for-aa24-060a-phobos-ransomware-and-aa24-060b-ivanti-connect-secure/
-
BEAST AI Jailbreak Language Models Within 1 Minute With High Accuracy
Malicious hackers sometimes jailbreak language models (LMs) to exploit bugs in the systems so that they can perform a multitude of illicit activities…. First seen on gbhackers.com Jump to article: gbhackers.com/beast-ai-jailbreak/
-
Hugging Face AI Platform Riddled With 100 Malicious Code-Execution Models
First seen on darkreading.com Jump to article: www.darkreading.com/application-security/hugging-face-ai-platform-100-malicious-code-execution-models
-
GitHub Besieged By Millions Of Malicious Repositories In Ongoing Attack
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/35593/GitHub-Besieged-By-Millions-Of-Malicious-Repositories-In-Ongoing-Attack.html
-
Millions of GitHub Repos Found Infected with Malicious Code
Security researchers have uncovered a massive campaign of repository confusion attacks on GitHub, affecting over 100,000 repositories and potentially … First seen on gbhackers.com Jump to article: gbhackers.com/millions-of-github-repos-found-infected/
-
Malicious AI models on Hugging Face backdoor users’ machines
At least 100 instances of malicious AI ML models were found on the Hugging Face platform, some of which can execute code on the victim’s machine, givi… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/malicious-ai-models-on-hugging-face-backdoor-users-machines/
-
Japan warns of malicious PyPi packages created by North Korean hackers
Tags: computer, group, hacker, hacking, incident response, lazarus, malicious, north-korea, pypi, security-incidentJapan’s Computer Security Incident Response Team (JPCERT/CC) is warning that the notorious North Korean hacking group Lazarus has uploaded four malici… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/japan-warns-of-malicious-pypi-packages-created-by-north-korean-hackers/