New hacking group uses custom cobalt strike loaders.
Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents. Accessed on 09 November 2022, 2015 UTC. Content provided by email subscription to "Bleepingcomputer.com: Latest Articles."
Source: https://www.bleepingcomputer.com/
Please click link or scroll down to read your selections. Thanks for joining us today.
Russ Roberts (https://www.hawaiicybersecurityjournal.net and https://paper.li/RussellRoberts).
New hacking group uses custom 'Symatic' Cobalt Strike loaders
A previously unknown Chinese APT (advanced persistent threat) hacking group dubbed 'Earth Longzhi' targets organizations in East Asia, Southeast Asia, and Ukraine.
- NOVEMBER 09, 2022
- 02:15 PM
0
Get certified in Amazon Web Services with this course bundle deal
Understanding Amazon Web Services can boost your career and make your work substantially easier. These six courses show you how for $59, 96% off the $1770 MSRP.
- NOVEMBER 09, 2022
- 02:05 PM
- 0
15,000 sites hacked for massive Google SEO poisoning campaign
Hackers are conducting a massive black hat search engine optimization (SEO) campaign by compromising almost 15,000 websites to redirect visitors to fake Q&A discussion forums.
- NOVEMBER 09, 2022
- 01:08 PM
- 0
Medibank warns customers their data was leaked by ransomware gang
Australian health insurance giant Medibank has warned customers that the ransomware group behind last month's breach has started to leak data stolen from its systems.
- NOVEMBER 09, 2022
- 11:43 AM
- 0
Get the most out of your documents with 76% off this PDF editor
Right now, you can get a lifetime license to PDF Agile for $69, more than 75% off the MSRP. And since security is a big concern these days, you can protect your documents in a number of ways with password prompts and e-signature verification.
- NOVEMBER 09, 2022
- 11:30 AM
- 0
Lenovo fixes flaws that can be used to disable UEFI Secure Boot
Lenovo has fixed two high-severity vulnerabilities impacting various ThinkBook, IdeaPad, and Yoga laptop models that could allow an attacker to deactivate UEFI Secure Boot.
- NOVEMBER 09, 2022
- 11:03 AM
- 0
LockBit affiliate uses Amadey Bot malware to deploy ransomware
A LockBit 3.0 ransomware affiliate is using phishing emails that install the Amadey Bot to take control of a device and encrypt devices.
- NOVEMBER 08, 2022
- 05:56 PM
- 0
Malicious extension lets attackers control Google Chrome remotely
A new Chrome browser botnet named 'Cloud9' has been discovered in the wild using malicious extensions to steal online accounts, log keystrokes, inject ads and malicious JS code, and enlist the victim's browser in DDoS attacks.
- NOVEMBER 08, 2022
- 04:37 PM
- 1
VMware fixes three critical auth bypass bugs in remote access tool
VMware has released security updates to address three critical severity vulnerabilities in the Workspace ONE Assist solution that enable remote attackers to bypass authentication and elevate privileges to admin.
- NOVEMBER 08, 2022
- 03:24 PM
- 0
Microsoft: Windows 10 21H1 reaches end of service next month
Microsoft has reminded customers today that all editions of Windows 10 21H1 (also known as the May 2021 Update) are reaching the end of service (EOS) next month.
- NOVEMBER 08, 2022
- 02:49 PM
- 0
Windows 11 KB5019980 and KB5019961 cumulative updates released
Microsoft has released the Windows 11 KB5019980 and KB5019961 cumulative updates for versions 22H2 and 21H2 to fix security vulnerabilities and resolve thirty-one bugs and performance issues.
- NOVEMBER 08, 2022
- 02:33 PM
- 0
Learn practical ethical hacking skills with this certification bundle
While computer science can feel abstract, the impacts of bad code are anything but. This ten-course bundle teaches you how to find and fix practical security issues for $34.99, 98% off the $2000 MSRP.
- NOVEMBER 08, 2022
- 02:06 PM
- 0
Windows 10 KB5019959 and KB5019966 updates released
Microsoft has released the Windows 10 KB5019959 and KB5019966 cumulative updates for versions 22H2, version 21H2, version 21H1, and 1809 to fix security vulnerabilities and resolve nineteen bugs and performance issues.
- NOVEMBER 08, 2022
- 01:56 PM
- 3
Microsoft fixes ProxyNotShell Exchange zero-days exploited in attacks
Microsoft has released security updates to address two high-severity Microsoft Exchange zero-day vulnerabilities collectively known as ProxyNotShell and exploited in the wild.
- NOVEMBER 08, 2022
- 01:41 PM
- 0
Microsoft November 2022 Patch Tuesday fixes 6 exploited zero-days, 68 flaws
Today is Microsoft's November 2022 Patch Tuesday, and with it comes fixes for six actively exploited Windows vulnerabilities and a total of 68 flaws.
- NOVEMBER 08, 2022
- 01:39 PM
- 2
Citrix urges admins to patch critical ADC, Gateway auth bypass
Citrix is urging customers to install security updates for a critical authentication bypass vulnerability in Citrix ADC and Citrix Gateway.
- NOVEMBER 08, 2022
- 12:03 PM
- 0
Influencer 'Hushpuppi' gets 11 years in prison for cyber fraud
An Instagram influencer known as 'Hushpuppi' has been sentenced to 11 years in prison for conspiring to launder tens of millions of USD from business email compromise (BEC) scams and various cyber schemes.
- NOVEMBER 08, 2022
- 09:39 AM
- 1
Enhance your privacy with this second phone number app deal
Protecting your privacy while staying in touch can be a difficult problem to solve. This second-phone app helps you solve it with a lifetime subscription for $24.99, 83% off the $150 MSRP.
- NOVEMBER 08, 2022
- 07:21 AM
- 0
Azov Ransomware is a wiper, destroying data 666 bytes at a time
The Azov Ransomware continues to be heavily distributed worldwide, now proven to be a data wiper that intentionally destroys victims' data and infects other programs.
- NOVEMBER 07, 2022
- 06:13 PM
- 0
Microsoft is showing ads in the Windows 11 sign-out menu
Microsoft is now promoting some of its products in the sign-out flyout menu that shows up when clicking the user icon in the Windows 11 start menu.
- NOVEMBER 07, 2022
- 04:55 PM
- 10
