Tag: security
Cybercriminals launch new malware that can completely wipe out your antivirus
Cybercriminals have been spotted using a new piece of malware designed to completely wipe out any antivirus programs the victim might have installed on their endpoint and infect them with ransomware. Researchers from Sophos have reported encountering a new utility tool designed to kill EDRs (Endpoint Detection and Response), which…
Read More
Thousands of Oracle NetSuite ERP websites found leaking private customer information
Researchers have discovered a vulnerability in Oracle Netsuite’s SuiteCommerce ecommerce platform that could allow threat actors to steal sensitive data from websites. A report from AppOmni revealed the vulnerability comes from misconfigured access controls in SuiteCommerce instances, specifically within custom record types (CRTs) – tables created by the SuiteCommerce enterprise…
Read More
This crafty ransomware uses an unusual social-engineering tactic to gain access to victim systems
Cybersecurity researchers from the Sophos X-Ops Incident Response team have observed hackers deploying an unusual social engineering tactic to gain access to victim systems and steal sensitive data. The team outlined how a new ransomware player called Mad Liberator emerged in mid-July 2024, mostly focused on data exfiltration (rather than…
Read More
GitHub rolls out new tool to fix code errors even before you see them
GitHub has announced the general availability of Copilot Autofix within its GitHub Advanced Security (GHAS) suite, designed to prevent new vulnerabilities from entering code before you even see them. The tool, announced by Chief Security Officer Mike Hanley in a blog post, will also tackle existing vulnerabilities in code, which…
Read More
It’s not just X — DDoS attacks really are hitting more victims
DDoS attacks hit the headlines recently after X was reportedly hit by one such issue when hosting an interview between Donald Trump and Elon Mus but it’s hardly the only target, new research has claimed. A new Gcore Radar Report says both the number, and the severity, of Distributed Denial…
Read More
This new phishing attack uses a sneaky infostealer to cause maximum damage
Security researchers have observed a new infostealing malware campaign that grabs an unusually large and diverse set of files. In its report, Barracuda noted the infostealer is rather unusual since it grabs more files than other infostealers go for. Besides the regular browser information, cookies, saved passwords, credit card information,…
Read More