Blog – Page 1156 – Cyber Mike

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution (RCE)
The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators to capture user activity, and record keyboard and mouse input, along with a video stream of the

New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns

Cybersecurity researchers are calling attention to a new sophisticated tool called GoIssue that can be used to send phishing messages at scale targeting GitHub users.
The program, first marketed by a threat actor named cyberdluffy (aka Cyber D’ Luffy) on the Runion forum earlier this August, is advertised as a tool that allows criminal actors to extract email addresses from public GitHub

Ahold Delhaize Cybersecurity Incident Impacts Giant Food, Hannaford

Cybersecurity incident impacts Giant Food, Hannaford, and other Ahold Delhaize USA brands, including pharmacies and e-commerce services.

The post Ahold Delhaize Cybersecurity Incident Impacts Giant Food, Hannaford appeared first on SecurityWeek.

SAP Patches High-Severity Vulnerability in Web Dispatcher

SAP has released eight new security notes on November 2024 patch day, including one addressing a high-severity vulnerability in Web Dispatcher.

The post SAP Patches High-Severity Vulnerability in Web Dispatcher appeared first on SecurityWeek.

North Korean hackers create Flutter apps to bypass macOS security

North Korean threat actors target Apple macOS systems using trojanized Notepad apps and minesweeper games created with Flutter, which are signed and notarized by legitimate Apple developer IDs. […]

North Korean Hackers Target macOS Using Flutter-Embedded Malware

Threat actors with ties to the Democratic People’s Republic of Korea (DPRK aka North Korea) have been found embedding malware within Flutter applications, marking the first time this tactic has been adopted by the adversary to infect Apple macOS devices.
Jamf Threat Labs, which made the discovery based on artifacts uploaded to the VirusTotal platform earlier this month, said the Flutter-built

Form I-9 Compliance Data Breach Impacts Over 190,000 People

The impact of a data breach suffered by Form I-9 Compliance is growing, with the number of affected individuals reaching 190,000.

The post Form I-9 Compliance Data Breach Impacts Over 190,000 People appeared first on SecurityWeek.

Millions of Hot Topic Customers Impacted by Data Breach

Hot Topic has suffered a data breach impacting approximately 57 million unique email addresses and the personal information of roughly 25 million.

The post Millions of Hot Topic Customers Impacted by Data Breach appeared first on SecurityWeek.

Amazon Employee Data Leaked by Hacker

Amazon has confirmed that some employee data was compromised as a result of a MOVEit hack last year.

The post Amazon Employee Data Leaked by Hacker appeared first on SecurityWeek.

5 Ways Behavioral Analytics is Revolutionizing Incident Response

Behavioral analytics, long associated with threat detection (i.e. UEBA or UBA), is experiencing a renaissance. Once primarily used to identify suspicious activity, it’s now being reimagined as a powerful post-detection technology that enhances incident response processes. By leveraging behavioral insights during alert triage and investigation, SOCs can transform their workflows to become more

Cyber News