New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages

New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages,

A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks.
« Greatness, for now, is only focused on Microsoft 365 phishing pages, providing its affiliates with an attachment and link builder that creates

,

A new phishing-as-a-service (PhaaS or PaaS) platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks.
« Greatness, for now, is only focused on Microsoft 365 phishing pages, providing its affiliates with an attachment and link builder that creates

, ,
https://thehackernews.com/2023/05/new-phishing-as-service-platform-lets.html

Guerre en Ukraine et fake news : comment la propagande russe opère…

Guerre en Ukraine et fake news : comment la propagande russe opère…,

fake news russie

La Russie a une arme secrète pour déstabiliser l’Ukraine : les fake news. Depuis les prémices du conflit, la propagande russe s’appuie sur des campagnes de désinformation pour tenter d’influer sur l’issue de la guerre…

,

fake news russie

La Russie a une arme secrète pour déstabiliser l’Ukraine : les fake news. Depuis les prémices du conflit, la propagande russe s’appuie sur des campagnes de désinformation pour tenter d’influer sur l’issue de la guerre…

, ,
https://www.01net.com/actualites/guerre-ukraine-fake-news-mode-operatoire-propagande-russe.html

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks

XWorm Malware Exploits Follina Vulnerability in New Wave of Attacks,

Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems.
Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing firms and healthcare clinics located in Germany.
« The attack campaign has been leveraging rather

,

Cybersecurity researchers have discovered an ongoing phishing campaign that makes use of a unique attack chain to deliver the XWorm malware on targeted systems.
Securonix, which is tracking the activity cluster under the name MEME#4CHAN, said some of the attacks have primarily targeted manufacturing firms and healthcare clinics located in Germany.
« The attack campaign has been leveraging rather

, ,
https://thehackernews.com/2023/05/xworm-malware-exploits-follina.html

Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance

Netgear Routers’ Flaws Expose Users to Malware, Remote Attacks, and Surveillance

,

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.
« Successful exploits could allow attackers to monitor users’ internet activity, hijack internet connections, and redirect traffic to malicious websites or inject malware into network traffic, » Claroty security researcher Uri Katz said in a

,

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution.
« Successful exploits could allow attackers to monitor users’ internet activity, hijack internet connections, and redirect traffic to malicious websites or inject malware into network traffic, » Claroty security researcher Uri Katz said in a

, ,
https://thehackernews.com/2023/05/netgear-routers-flaws-expose-users-to.html

New Stealthy Variant of Linux Backdoor BPFDoor Emerges from the Shadows

New Stealthy Variant of Linux Backdoor BPFDoor Emerges from the Shadows,

A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week.
« BPFDoor retains its reputation as an extremely stealthy and difficult-to-detect malware with this latest iteration, » security researchers Shaul Vilkomir-Preisman and Eliran Nissan said.
BPFDoor (

,

A previously undocumented and mostly undetected variant of a Linux backdoor called BPFDoor has been spotted in the wild, cybersecurity firm Deep Instinct said in a technical report published this week.
« BPFDoor retains its reputation as an extremely stealthy and difficult-to-detect malware with this latest iteration, » security researchers Shaul Vilkomir-Preisman and Eliran Nissan said.
BPFDoor (

, ,
https://thehackernews.com/2023/05/new-variant-of-linux-backdoor-bpfdoor.html

Solving Your Teams Secure Collaboration Challenges

Solving Your Teams Secure Collaboration Challenges,

In today’s interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains secure, organisations need to take steps to protect their data.
Since collaborating is essential for

,

In today’s interconnected world, where organisations regularly exchange sensitive information with customers, partners and employees, secure collaboration has become increasingly vital. However, collaboration can pose a security risk if not managed properly. To ensure that collaboration remains secure, organisations need to take steps to protect their data.
Since collaborating is essential for

, ,
https://thehackernews.com/2023/05/solving-your-teams-secure-collaboration.html

Ransomware : un nouveau gang de hackers fait des ravages

Ransomware : un nouveau gang de hackers fait des ravages,

hackers royal

De nouveaux hackers déploient des attaques par ransomware à l’encontre des entreprises. En l’espace de quelques mois, ils se sont imposés parmi les cybercriminels les plus actifs du milieu…

,

hackers royal

De nouveaux hackers déploient des attaques par ransomware à l’encontre des entreprises. En l’espace de quelques mois, ils se sont imposés parmi les cybercriminels les plus actifs du milieu…

, ,
https://www.01net.com/actualites/ransomware-nouveau-gang-hackers-ravages.html

Apple aurait réussi à piéger la taupe qui faisait fuiter ses innovations

Apple aurait réussi à piéger la taupe qui faisait fuiter ses innovations,

Le logo Apple et son effet miroir est la seule fioriture esthétique de ce design ultra-minimaliste.

Une source mystérieuse, un plan d’infiltration en plusieurs étapes, et une salariée licenciée : Apple aurait réussi à mettre fin à la fuite de données très confidentielles sur ses fonctionnalités en développement.

,

Le logo Apple et son effet miroir est la seule fioriture esthétique de ce design ultra-minimaliste.

Une source mystérieuse, un plan d’infiltration en plusieurs étapes, et une salariée licenciée : Apple aurait réussi à mettre fin à la fuite de données très confidentielles sur ses fonctionnalités en développement.

, ,
https://www.01net.com/actualites/apple-aurait-reussi-a-pieger-la-taupe-qui-faisait-fuiter-ses-innovations.html

Bl00dy Ransomware Gang Strikes Education Sector with Critical PaperCut Vulnerability

Bl00dy Ransomware Gang Strikes Education Sector with Critical PaperCut Vulnerability,

U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as the Bl00dy Ransomware Gang that attempt to exploit vulnerable PaperCut servers against the education facilities sector in the country.
The attacks took place in early May 2023, the Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) said in a

,

U.S. cybersecurity and intelligence agencies have warned of attacks carried out by a threat actor known as the Bl00dy Ransomware Gang that attempt to exploit vulnerable PaperCut servers against the education facilities sector in the country.
The attacks took place in early May 2023, the Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) said in a

, ,
https://thehackernews.com/2023/05/bl00dy-ransomware-gang-strikes.html

New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation

New Flaw in WordPress Plugin Used by Over a Million Sites Under Active Exploitation,

A security vulnerability has been disclosed in the popular WordPress plugin Essential Addons for Elementor that could be potentially exploited to achieve elevated privileges on affected sites.
The issue, tracked as CVE-2023-32243, has been addressed by the plugin maintainers in version 5.7.2 that was shipped on May 11, 2023. Essential Addons for Elementor has over one million active

,

A security vulnerability has been disclosed in the popular WordPress plugin Essential Addons for Elementor that could be potentially exploited to achieve elevated privileges on affected sites.
The issue, tracked as CVE-2023-32243, has been addressed by the plugin maintainers in version 5.7.2 that was shipped on May 11, 2023. Essential Addons for Elementor has over one million active

, ,
https://thehackernews.com/2023/05/severe-security-flaw-exposes-over.html