QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord

QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord,

A new remote access trojan (RAT) called QwixxRAT is being advertised for sale by its threat actor through Telegram and Discord platforms.
« Once installed on the victim’s Windows platform machines, the RAT stealthily collects sensitive data, which is then sent to the attacker’s Telegram bot, providing them with unauthorized access to the victim’s sensitive information, » Uptycs said in a new

,

A new remote access trojan (RAT) called QwixxRAT is being advertised for sale by its threat actor through Telegram and Discord platforms.
« Once installed on the victim’s Windows platform machines, the RAT stealthily collects sensitive data, which is then sent to the attacker’s Telegram bot, providing them with unauthorized access to the victim’s sensitive information, » Uptycs said in a new

, ,
https://thehackernews.com/2023/08/qwixxrat-new-remote-access-trojan.html

Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability

Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability,

E-commerce sites using Adobe’s Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023.
The attacks, dubbed Xurum by Akamai, leverage a now-patched critical security flaw (CVE-2022-24086, CVSS score: 9.8) in Adobe Commerce and Magento Open Source that, if successfully exploited, could lead to arbitrary code execution.
« The attacker seems to be

,

E-commerce sites using Adobe’s Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023.
The attacks, dubbed Xurum by Akamai, leverage a now-patched critical security flaw (CVE-2022-24086, CVSS score: 9.8) in Adobe Commerce and Magento Open Source that, if successfully exploited, could lead to arbitrary code execution.
« The attacker seems to be

, ,
https://thehackernews.com/2023/08/ongoing-xurum-attacks-on-e-commerce.html

Identity Threat Detection and Response: Rips in Your Identity Fabric

Identity Threat Detection and Response: Rips in Your Identity Fabric,

Why SaaS Security Is a Challenge
In today’s digital landscape, organizations are increasingly relying on Software-as-a-Service (SaaS) applications to drive their operations. However, this widespread adoption has also opened the doors to new security risks and vulnerabilities.
The SaaS security attack surface continues to widen. It started with managing misconfigurations and now requires a

,

Why SaaS Security Is a Challenge
In today’s digital landscape, organizations are increasingly relying on Software-as-a-Service (SaaS) applications to drive their operations. However, this widespread adoption has also opened the doors to new security risks and vulnerabilities.
The SaaS security attack surface continues to widen. It started with managing misconfigurations and now requires a

, ,
https://thehackernews.com/2023/08/identity-threat-detection-and-response.html

Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks

Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks,

Germany’s Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in the country since the end of 2022.
« The cyber attacks were mainly directed against dissident organizations and individuals – such as lawyers, journalists, or human rights activists – inside and outside Iran, » the agency said in an advisory.
The

,

Germany’s Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in the country since the end of 2022.
« The cyber attacks were mainly directed against dissident organizations and individuals – such as lawyers, journalists, or human rights activists – inside and outside Iran, » the agency said in an advisory.
The

, ,
https://thehackernews.com/2023/08/charming-kitten-targets-iranian.html

New Financial Malware ‘JanelaRAT’ Targets Latin American Users

New Financial Malware ‘JanelaRAT’ Targets Latin American Users

,

Users in Latin America (LATAM) are the target of a financial malware called JanelaRAT that’s capable of capturing sensitive information from compromised Microsoft Windows systems.
« JanelaRAT mainly targets financial and cryptocurrency data from LATAM bank and financial institutions, » Zscaler ThreatLabz researchers Gaetano Pellegrino and Sudeep Singh said, adding it « abuses DLL side-loading

,

Users in Latin America (LATAM) are the target of a financial malware called JanelaRAT that’s capable of capturing sensitive information from compromised Microsoft Windows systems.
« JanelaRAT mainly targets financial and cryptocurrency data from LATAM bank and financial institutions, » Zscaler ThreatLabz researchers Gaetano Pellegrino and Sudeep Singh said, adding it « abuses DLL side-loading

, ,
https://thehackernews.com/2023/08/new-financial-malware-janelarat-targets.html

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users’ Privacy First

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users’ Privacy First

,

The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill (DPDPB) after it was unanimously passed by both houses of the parliament last week, marking a significant step towards securing people’s information.
« The Bill provides for the processing of digital personal data in a manner that recognizes both the rights of the individuals to protect their

,

The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill (DPDPB) after it was unanimously passed by both houses of the parliament last week, marking a significant step towards securing people’s information.
« The Bill provides for the processing of digital personal data in a manner that recognizes both the rights of the individuals to protect their

, ,
https://thehackernews.com/2023/08/india-passes-new-digital-personal-data.html

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk,

Multiple security vulnerabilities impacting CyberPower’s PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe’s iBoot Power Distribution Unit (PDU) could be potentially exploited to gain unauthenticated access to these systems and inflict catastrophic damage in target environments.
The nine vulnerabilities, from CVE-2023-3259 through CVE-2023-3267, carry

,

Multiple security vulnerabilities impacting CyberPower’s PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe’s iBoot Power Distribution Unit (PDU) could be potentially exploited to gain unauthenticated access to these systems and inflict catastrophic damage in target environments.
The nine vulnerabilities, from CVE-2023-3259 through CVE-2023-3267, carry

, ,
https://thehackernews.com/2023/08/multiple-flaws-in-cyberpower-and.html

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

,

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom’s Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks.
« An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.’s desk phones and Zoom’s Zero Touch Provisioning feature can gain full remote control of the devices, »

,

Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom’s Zero Touch Provisioning (ZTP) that could be potentially exploited by a malicious attacker to conduct remote attacks.
« An external attacker who leverages the vulnerabilities discovered in AudioCodes Ltd.’s desk phones and Zoom’s Zero Touch Provisioning feature can gain full remote control of the devices, »

, ,
https://thehackernews.com/2023/08/zoom-ztp-audiocodes-phones-flaws.html

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested,

European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider called Lolek Hosted, which cybercriminals have used to launch cyber-attacks across the globe.
« Five of its administrators were arrested, and all of its servers seized, rendering LolekHosted.net no longer available, » Europol said in a statement.
« The service facilitated the

,

European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider called Lolek Hosted, which cybercriminals have used to launch cyber-attacks across the globe.
« Five of its administrators were arrested, and all of its servers seized, rendering LolekHosted.net no longer available, » Europol said in a statement.
« The service facilitated the

, ,
https://thehackernews.com/2023/08/lolek-bulletproof-hosting-servers.html

New Python URL Parsing Flaw Enables Command Injection Attacks

New Python URL Parsing Flaw Enables Command Injection Attacks,

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution.
« urlparse has a parsing problem when the entire URL starts with blank characters, » the CERT Coordination Center (CERT/CC) said in a Friday

,

A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain or protocol filtering methods implemented with a blocklist, ultimately resulting in arbitrary file reads and command execution.
« urlparse has a parsing problem when the entire URL starts with blank characters, » the CERT Coordination Center (CERT/CC) said in a Friday

, ,
https://thehackernews.com/2023/08/new-python-url-parsing-flaw-enables.html