Click Here Podcast

The Record-Centered.svg

Home

Subscribe to Cyber Daily®

CVE-2023-50164

The CVE-2023-50164 vulnerability in Apache Struts2 allows attackers to manipulate file upload parameters and execute remote code, posing a critical threat to affected systems.

LogoFAIL

LogoFAIL is a high-level security vulnerability that affects image analysis libraries used by most BIOS vendors, allowing attackers to replace legitimate logos with arbitrary code during the boot process, impacting Windows and Linux devices.

CVE-2023-41265

Recently, the CVE-2023-41265 vulnerability in Qlik Sense has been exploited by the Cactus ransomware group to gain initial access and escalate privileges.

LockBit Gang

LockBit ransomware group, known for exploiting the Citrix Bleed vulnerability, has been actively targeting organizations such as Boeing and China's ICBC, causing disruptions and demanding ransom payments.

CVE-2023-23397

The Russian APT28 group, also known as Fancy Bear or Strontium, has been actively exploiting the CVE-2023-23397 vulnerability in Microsoft Outlook to hijack Exchange email accounts and steal sensitive information.

CVE-2023-41266

The CVE-2023-41266 vulnerability in Qlik Sense allows remote attackers to send unauthorized HTTP requests, potentially leading to a breach by ransomware groups.

CVE-2023-4966

LockBit ransomware affiliates are actively exploiting the Citrix Bleed vulnerability (CVE-2023-4966) to breach systems, steal data, and encrypt files in large organizations.

ALPHV Ransomware Group

The ALPHV Ransomware Group, also known as BlackCat, has been linked to multiple cyberattacks, targeting various industries and organizations worldwide.

BlueDelta

BlueDelta, also known as APT28, has been involved in recent cyber attacks targeting organizations in Poland.

Cyber Av3ngers

The Iranian hacker group Cyber Av3ngers has recently targeted water facilities in Pennsylvania and other locations, compromising systems and defacing websites, with a focus on Israeli-made technology.

BlueCharlie

BlueCharlie, also known as Callisto Group or Star Blizzard, is a Russian cyber attacker group that has been involved in spear-phishing campaigns targeting military officials, government officials, think tanks, and journalists in the UK.

Kimsuky

Kimsuky, a prolific cyber espionage group also known as APT43, targets governments, nuclear organizations, and foreign relations entities to collect intelligence and further North Korea's interests.

Krasue

Krasue RAT, a Linux Remote Access Trojan, has been targeting telecommunications companies in Thailand, utilizing a kernel-level rootkit and potentially created by the same author as the XorDdos Trojan.

Hunters International

Hunters International is a ransomware group that has targeted various organizations worldwide, including schools, healthcare centers, and defense contractors, and has been linked to the Hive ransomware group.

Lockbit 3.0

LockBit 3.0 ransomware, exploiting the Citrix Bleed vulnerability (CVE-2023-4966), has been targeting various organizations, including Boeing and ICBC, by encrypting files and exfiltrating data.

Raccoon Stealer

The Raccoon Stealer malware has been widely used in cyberattacks targeting organizations in the Middle East, Africa, and the U.S., with different samples and variations indicating ongoing development by its authors.

Emotet

Emotet, one of the most prominent trojans in the cyber threat landscape, was disrupted by a coordinated international operation led by EUROPOL.

LummaC2

LummaC2 is a versatile stealer malware that has recently gained attention for its use of advanced anti-sandbox techniques, including trigonometry-based evasion and the ability to restore expired Google cookies for unauthorized access to user accounts.

US charges two Russians in hacks of government accounts

UK sanctions nine linked to cyber trafficking in Southeast Asia

As Meta rolls out end-to-end encryption, police warn keeping children safe ‘no longer possible’

Latest News

Briefs