Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry,

A new botnet called Dark Frost has been observed launching distributed denial-of-service (DDoS) attacks against the gaming industry.
« The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices, » Akamai security researcher Allen West said in a new technical analysis shared with The Hacker News.
Targets include

,

A new botnet called Dark Frost has been observed launching distributed denial-of-service (DDoS) attacks against the gaming industry.
« The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices, » Akamai security researcher Allen West said in a new technical analysis shared with The Hacker News.
Targets include

, ,
https://thehackernews.com/2023/05/dark-frost-botnet-launches-devastating.html

Zyxel Issues Critical Security Patches for Firewall and VPN Products

Zyxel Issues Critical Security Patches for Firewall and VPN Products,

Zyxel has released software updates to address two critical security flaws affecting select firewall and VPN products that could be abused by remote attackers to achieve code execution.
Both the flaws – CVE-2023-33009 and CVE-2023-33010 – are buffer overflow vulnerabilities and are rated 9.8 out of 10 on the CVSS scoring system.
A brief description of the two issues is below –

CVE-2023-33009 –

,

Zyxel has released software updates to address two critical security flaws affecting select firewall and VPN products that could be abused by remote attackers to achieve code execution.
Both the flaws – CVE-2023-33009 and CVE-2023-33010 – are buffer overflow vulnerabilities and are rated 9.8 out of 10 on the CVSS scoring system.
A brief description of the two issues is below –

CVE-2023-33009 –

, ,
https://thehackernews.com/2023/05/zyxel-issues-critical-security-patches.html

Cynet Protects Hospital From Lethal Infection

Cynet Protects Hospital From Lethal Infection,

A hospital with 2,000 employees in the E.U. deployed Cynet protections across its environment. The hospital was in the process of upgrading several expensive imaging systems that were still supported by Windows XP and Windows 7 machines. Cynet protections were in place on most of the Windows XP and Windows 7 machines during the upgrade process, ensuring that legacy operating systems would not

,

A hospital with 2,000 employees in the E.U. deployed Cynet protections across its environment. The hospital was in the process of upgrading several expensive imaging systems that were still supported by Windows XP and Windows 7 machines. Cynet protections were in place on most of the Windows XP and Windows 7 machines during the upgrade process, ensuring that legacy operating systems would not

, ,
https://thehackernews.com/2023/05/cynet-protects-hospital-from-lethal.html

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government,

An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim’s Microsoft Exchange Server with a « simple yet effective » backdoor dubbed PowerExchange.
According to a new report from Fortinet FortiGuard Labs, the intrusion relied on email phishing as an initial access pathway, leading to the execution of a .NET

,

An unnamed government entity associated with the United Arab Emirates (U.A.E.) was targeted by a likely Iranian threat actor to breach the victim’s Microsoft Exchange Server with a « simple yet effective » backdoor dubbed PowerExchange.
According to a new report from Fortinet FortiGuard Labs, the intrusion relied on email phishing as an initial access pathway, leading to the execution of a .NET

, ,
https://thehackernews.com/2023/05/new-powerexchange-backdoor-used-in.html

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks,

A Brazilian threat actor is targeting more than 30 Portuguese financial institutions with information-stealing malware as part of a long-running campaign that commenced in 2021.
« The attackers can steal credentials and exfiltrate users’ data and personal information, which can be leveraged for malicious activities beyond financial gain, » SentinelOne researchers Aleksandar Milenkoski and Tom

,

A Brazilian threat actor is targeting more than 30 Portuguese financial institutions with information-stealing malware as part of a long-running campaign that commenced in 2021.
« The attackers can steal credentials and exfiltrate users’ data and personal information, which can be leveraged for malicious activities beyond financial gain, » SentinelOne researchers Aleksandar Milenkoski and Tom

, ,
https://thehackernews.com/2023/05/alert-brazilian-hackers-targeting-users.html

Des hackers chinois ont pénétré des infrastructures critiques des États-Unis… depuis 2021

Des hackers chinois ont pénétré des infrastructures critiques des États-Unis… depuis 2021,

hackers chinois usa espionnage

Les États-Unis accusent la Chine d’avoir mené une vaste cyberattaque contre ses infrastructures. Depuis deux ans, des hackers chinois ont infiltré différents secteurs, dont des bases militaires stratégiques…

,

hackers chinois usa espionnage

Les États-Unis accusent la Chine d’avoir mené une vaste cyberattaque contre ses infrastructures. Depuis deux ans, des hackers chinois ont infiltré différents secteurs, dont des bases militaires stratégiques…

, ,
https://www.01net.com/actualites/hackers-chinois-espionnent-etats-unis-depuis-2021.html

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

China’s Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

,

A stealthy China-based group managed to establish a persistent foothold into critical infrastructure organizations in the U.S. and Guam without being detected, Microsoft and the « Five Eyes » nations said on Wednesday.
The tech giant’s threat intelligence team is tracking the activity, which includes post-compromise credential access and network system discovery, under the name Volt Typhoon.
The

,

A stealthy China-based group managed to establish a persistent foothold into critical infrastructure organizations in the U.S. and Guam without being detected, Microsoft and the « Five Eyes » nations said on Wednesday.
The tech giant’s threat intelligence team is tracking the activity, which includes post-compromise credential access and network system discovery, under the name Volt Typhoon.
The

, ,
https://thehackernews.com/2023/05/chinas-stealthy-hackers-infiltrate-us.html

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware,

The Iranian threat actor known as Agrius is leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.
Agrius, also known as Pink Sandstorm (formerly Americium), has a track record of staging destructive data-wiping attacks aimed at Israel under the guise of ransomware infections.
Microsoft has attributed the threat actor to Iran’s Ministry of

,

The Iranian threat actor known as Agrius is leveraging a new ransomware strain called Moneybird in its attacks targeting Israeli organizations.
Agrius, also known as Pink Sandstorm (formerly Americium), has a track record of staging destructive data-wiping attacks aimed at Israel under the guise of ransomware infections.
Microsoft has attributed the threat actor to Iran’s Ministry of

, ,
https://thehackernews.com/2023/05/iranian-agrius-hackers-targeting.html

GUAC 0.1 Beta: Google’s Breakthrough Framework for Secure Software Supply Chains

GUAC 0.1 Beta: Google’s Breakthrough Framework for Secure Software Supply Chains

,

Google on Wednesday announced the 0.1 Beta version of GUAC (short for Graph for Understanding Artifact Composition) for organizations to secure their software supply chains.
To that end, the search giant is making available the open source framework as an API for developers to integrate their own tools and policy engines.
GUAC aims to aggregate software security metadata from different sources

,

Google on Wednesday announced the 0.1 Beta version of GUAC (short for Graph for Understanding Artifact Composition) for organizations to secure their software supply chains.
To that end, the search giant is making available the open source framework as an API for developers to integrate their own tools and policy engines.
GUAC aims to aggregate software security metadata from different sources

, ,
https://thehackernews.com/2023/05/guac-01-beta-googles-breakthrough.html

Quand l’IA sert à piéger des mineurs et créer des images pédopornographiques

Quand l’IA sert à piéger des mineurs et créer des images pédopornographiques,

enfant ecran

Les prédateurs sexuels exploitent les technologies d’IA générative pour partager sur des forums de fausses vidéos de violences sexuelles commises sur des enfants. Ils échangent aussi des astuces pour contourner les mesures de sécurité des IA, ou pour mieux piéger leurs victimes. Pour l’instant, il n’existe que peu de garde-fous pour limiter ce type de pratiques.

,

enfant ecran

Les prédateurs sexuels exploitent les technologies d’IA générative pour partager sur des forums de fausses vidéos de violences sexuelles commises sur des enfants. Ils échangent aussi des astuces pour contourner les mesures de sécurité des IA, ou pour mieux piéger leurs victimes. Pour l’instant, il n’existe que peu de garde-fous pour limiter ce type de pratiques.

, ,
https://www.01net.com/actualites/quand-lia-sert-a-pieger-des-mineurs-et-creer-des-images-pedopornographiques.html