December 2024 – Page 38

Hackers Target Uyghurs and Tibetans with MOONSHINE Exploit and DarkNimbus Backdoor

A previously undocumented threat activity cluster dubbed Earth Minotaur is leveraging the MOONSHINE exploit kit and an unreported Android-cum-Windows backdoor called DarkNimbus to facilitate long-term surveillance operations targeting Tibetans and Uyghurs.
“Earth Minotaur uses MOONSHINE to deliver the DarkNimbus backdoor to Android and Windows devices, targeting WeChat, and possibly making it a

Bootloader Vulnerability Impacts Over 100 Cisco Switches

More than 100 Cisco products are affected by an NX-OS vulnerability that allows attackers to bypass image signature verification.

The post Bootloader Vulnerability Impacts Over 100 Cisco Switches appeared first on SecurityWeek.

Chemonics International Data Breach Impacts 260,000 Individuals

Development firm Chemonics International has disclosed a year-old data breach impacting over 260,000 people.

The post Chemonics International Data Breach Impacts 260,000 Individuals appeared first on SecurityWeek.

Want to Grow Vulnerability Management into Exposure Management? Start Here!

Vulnerability Management (VM) has long been a cornerstone of organizational cybersecurity. Nearly as old as the discipline of cybersecurity itself, it aims to help organizations identify and address potential security issues before they become serious problems. Yet, in recent years, the limitations of this approach have become increasingly evident.
At its core, Vulnerability Management

System Two Security Emerges From Stealth With Detection Engineering Solution

System Two Security has emerged from stealth mode with a threat detection engineering solution and $7 million in seed funding.

The post System Two Security Emerges From Stealth With Detection Engineering Solution appeared first on SecurityWeek.

Mitel MiCollab zero-day flaw gets proof-of-concept exploit

Researchers have uncovered an arbitrary file read zero-day in the Mitel MiCollab collaboration platform, allowing attackers to access files on a server’s filesystem. […]

Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese Hackers

A suspected Chinese threat actor targeted a large U.S. organization earlier this year as part of a four-month-long intrusion.
According to Broadcom-owned Symantec, the first evidence of the malicious activity was detected on April 11, 2024 and continued until August. However, the company doesn’t rule out the possibility that the intrusion may have occurred earlier.
“The attackers moved laterally

White House Says at Least 8 US Telecom Firms, Dozens of Nations Impacted by China Hacking Campaign

A top White House official said at least eight U.S. telecom firms and dozens of nations have been impacted by a Chinese hacking campaign.

The post White House Says at Least 8 US Telecom Firms, Dozens of Nations Impacted by China Hacking Campaign appeared first on SecurityWeek.

BT Investigating Hack After Ransomware Group Claims Theft of Sensitive Data

UK telecoms company BT has launched an investigation after the Black Basta ransomware group claimed the theft of 500 Gb of data.

The post BT Investigating Hack After Ransomware Group Claims Theft of Sensitive Data appeared first on SecurityWeek.

ANEL and NOOPDOOR Backdoors Weaponized in New MirrorFace Campaign Against Japan

The China-linked threat actor known as MirrorFace has been attributed to a new spear-phishing campaign mainly targeting individuals and organizations in Japan since June 2024.
The aim of the campaign is to deliver backdoors known as NOOPDOOR (aka HiddenFace) and ANEL (aka UPPERCUT), Trend Micro said in a technical analysis.
“An interesting aspect of this campaign is the comeback of a backdoor

Month: December 2024