Thursday, April 17, 2025

Cyber Security News

Chinese Hacker Group Mustang Panda Bypass EDR Detection

Chinese Hacker Group Mustang Panda Bypass EDR Detection With New Hacking Tools

0
The China-sponsored hacking group, Mustang Panda, has been uncovered by Zscaler ThreatLabz to employ new techniques and tools, including the updated backdoor ToneShell and...

CISA Warns of Potential Credential Exploits Linked to Oracle Cloud Hack

0
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a public warning following reports of possible unauthorized access to a legacy Oracle Cloud environment.While...
Agent Tesla Malware

Agent Tesla Malware Uses Multi-Stage Attacks with PowerShell Scripts

0
Researchers from Palo Alto Networks have uncovered a series of malicious spam campaigns leveraging the notorious Agent Tesla malware through intricate, multi-stage infection vectors.The...
Intel

Intel Sells 51% Stake in Altera to Silver Lake in $8.75 Billion Deal

0
Intel Corporation has announced the divestiture of a 51% stake in its Altera division to Silver Lake, valuing the programmable logic company at $8.75...

Critical Flaw in PHP’s extract() Function Enables Arbitrary Code Execution

0
A critical vulnerability in PHP’s extract() function has been uncovered, enabling attackers to execute arbitrary code by exploiting memory corruption flaws.The issue affects PHP versions 5.x,...

Hacker Leaks 33,000 Employee Records in Third-Party API Breach

0
A hacker has exposed the personal records of over 33,000 employees after discovering unrestricted endpoints belonging to a major technology service provider.The breach, first...

Google Removes 5.5 Billion Malicious Ads, Suspends 700,000+ Offending Advertisers

0
Google has announced the removal of 5.5 billion malicious advertisements and the suspension of over 700,000 offending advertiser accounts in 2024, according to its...
SIEM as a Service

Recent News

Tycoon 2FA

Tycoon 2FA Phishing Kit Uses Advanced Evasion Techniques to Bypass Endpoint Detection Systems

0
The notorious Tycoon 2FA phishing kit continues its evolution with new strategies designed to slip past endpoint detection systems.This development was highlighted in...
AI-Powered Bad Bots

AI-Powered Bad Bots Account for 51% of Traffic, Surpassing Human Traffic for the First...

0
Automated traffic generated by bad bots has for the first time surpassed human activity, accounting for 51% of all internet traffic in 2024, according...

CentreStack 0-Day Exploit Enables Remote Code Execution on Web Servers

0
A critical 0-day vulnerability has been disclosed in CentreStack, a popular enterprise cloud storage and collaboration platform, which could allow attackers to execute arbitrary...
Chinese Hacker Group Mustang Panda Bypass EDR Detection

Chinese Hacker Group Mustang Panda Bypass EDR Detection With New Hacking Tools

0
The China-sponsored hacking group, Mustang Panda, has been uncovered by Zscaler ThreatLabz to employ new techniques and tools, including the updated backdoor ToneShell and...
DOGE 'Big Balls' Ransomware

DOGE ‘Big Balls’ Ransomware Utilizes ZIP-Based LNK Shortcuts and BYOVD Techniques for Stealthy Attacks

0
A new and highly sophisticated ransomware campaign, dubbed “DOGE BIG BALLS Ransomware,” has recently come to light, demonstrating a blend of technical innovation and...
CISA Extends CVE Program

CISA Extends Support a Last Minute to CVE Program, Averting Global Cybersecurity Crisis

0
CISA announced an eleventh-hour contract extension with MITRE Corporation to maintain the Common Vulnerabilities and Exposures (CVE) program, narrowly avoiding a lapse in federal...

Slow Pisces Group Targets Developers Using Coding Challenges Laced with Python Malware

0
A North Korean state-sponsored threat group known as "Slow Pisces" has been orchestrating sophisticated cyberattacks targeting developers in the cryptocurrency sector using malware-laced coding...
ChatGPT Image Generator Abused

ChatGPT Image Generator Abused for Fake Passport Production

0
OpenAI's ChatGPT image generator has been exploited to create convincing fake passports in mere minutes, highlighting a significant vulnerability in current identity verification systems....

Galaxy S24 Vulnerability Poses Risk of Unauthorized File Access

0
A security flaw in Samsung’s Quick Share feature for the Galaxy S24 series has been disclosed, enabling attackers to create arbitrary files on vulnerable...

Chinese Hacker Group Mustang Panda Bypass EDR Detection With New Hacking Tools

The China-sponsored hacking group, Mustang Panda, has been uncovered by Zscaler ThreatLabz to employ new techniques and tools, including the updated backdoor ToneShell and...

How IT Professionals Maintain Efficiency with Brain Biohacking Techniques

In a world where code and coffee have become inseparable companions, IT professionals are constantly seeking new ways to stay at peak productivity. Have...

CISA Warns of Potential Credential Exploits Linked to Oracle Cloud Hack

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a public warning following reports of possible unauthorized access to a legacy Oracle Cloud environment.While...

Agent Tesla Malware Uses Multi-Stage Attacks with PowerShell Scripts

Researchers from Palo Alto Networks have uncovered a series of malicious spam campaigns leveraging the notorious Agent Tesla malware through intricate, multi-stage infection vectors.The...

Intel Sells 51% Stake in Altera to Silver Lake in $8.75 Billion Deal

Intel Corporation has announced the divestiture of a 51% stake in its Altera division to Silver Lake, valuing the programmable logic company at $8.75...

Critical Flaw in PHP’s extract() Function Enables Arbitrary Code Execution

A critical vulnerability in PHP’s extract() function has been uncovered, enabling attackers to execute arbitrary code by exploiting memory corruption flaws.The issue affects PHP versions 5.x,...

Hacker Leaks 33,000 Employee Records in Third-Party API Breach

A hacker has exposed the personal records of over 33,000 employees after discovering unrestricted endpoints belonging to a major technology service provider.The breach, first...

Google Removes 5.5 Billion Malicious Ads, Suspends 700,000+ Offending Advertisers

Google has announced the removal of 5.5 billion malicious advertisements and the suspension of over 700,000 offending advertiser accounts in 2024, according to its...

CISA Issues Alert on SonicWall Flaw Being Actively Exploited

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical security alert after confirming active exploitation of a SonicWall vulnerability.The flaw, documented as CVE-2021-20035,...

Glossary