December 2024 – Page 28

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

Cybersecurity researchers have discovered a new version of the ZLoader malware that employs a Domain Name System (DNS) tunnel for command-and-control (C2) communications, indicating that the threat actors are continuing to refine the tool after resurfacing a year ago.
“Zloader 2.9.4.0 adds notable improvements including a custom DNS tunnel protocol for C2 communications and an interactive shell

Atlassian, Splunk Patch High-Severity Vulnerabilities

Atlassian and Splunk on Tuesday announced patches for over two dozen vulnerabilities, including high-severity flaws.

The post Atlassian, Splunk Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

Cleo Vulnerability Exploitation Linked to Termite Ransomware Group

Exploitation of a vulnerability affecting Cleo file transfer tools has been linked to the new Termite ransomware group.

The post Cleo Vulnerability Exploitation Linked to Termite Ransomware Group appeared first on SecurityWeek.

Google’s Willow Chip Signals the Urgency of Post-Quantum Cryptography Migration

Google’s Willow quantum chip marks a transformative moment in quantum computing development.

The post Google’s Willow Chip Signals the Urgency of Post-Quantum Cryptography Migration appeared first on SecurityWeek.

446,000 Impacted by Center for Vein Restoration Data Breach

Center for Vein Restoration discloses data breach impacting the personal, medical, and financial information of 446,000 individuals.

The post 446,000 Impacted by Center for Vein Restoration Data Breach appeared first on SecurityWeek.

ICS Patch Tuesday: Security Advisories Released by Siemens, Schneider, CISA, Others

December 2024 ICS Patch Tuesday brings advisories from CISA, as well as several major industrial automation companies.

The post ICS Patch Tuesday: Security Advisories Released by Siemens, Schneider, CISA, Others appeared first on SecurityWeek.

Ivanti Patches Critical Flaws in Connect Secure, Cloud Services Application

Ivanti has released patches for critical vulnerabilities in Cloud Services Application, Connect Secure, and Policy Secure.

The post Ivanti Patches Critical Flaws in Connect Secure, Cloud Services Application appeared first on SecurityWeek.

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

Cybersecurity researchers have discovered a novel surveillance program that’s suspected to be used by Chinese police departments as a lawful intercept tool to gather a wide range of information from mobile devices.
The Android tool, codenamed EagleMsgSpy by Lookout, has been operational since at least 2017, with artifacts uploaded to the VirusTotal malware scanning platform as recently as

US Charges, Sanctions Chinese Man Accused of Sophos Firewall Hacking

The US government announced charges, sanctions and a reward for Guan Tianfeng, a Chinese national accused of involvement in Sophos firewall hacks.

The post US Charges, Sanctions Chinese Man Accused of Sophos Firewall Hacking appeared first on SecurityWeek.

Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability

Microsoft closed out its Patch Tuesday updates for 2024 with fixes for a total of 72 security flaws spanning its software portfolio, including one that it said has been exploited in the wild.
Of the 72 flaws, 17 are rated Critical, 54 are rated Important, and one is rated Moderate in severity. Thirty-one of the vulnerabilities are remote code execution flaws, and 27 of them allow for the

Month: December 2024