2024-03-31 14:35
Security researchers have observed Red Hat and Ubuntu systems being attacked by a Linux version of the DinodasRAT (also known as XDealer) that may have been operating since 2022 Read More
Blog Directory > Technology Blogs > NetmanageIT CTO Corner technology Blog >
Netmanageit Cto Corner Blog
blog.netmanageit.com
Tags:
red hat
vultur banking
malicious
tool
banking
major linux distros
google
linux
secret backdoor
lock
Musings and Howto Articles from an MSP owner and IT industry veteran. Security news, useful free tools, articles on how to install awesome Open Source tools, expert industry commentary!
2024-03-31 11:38
Generative AI services like Midjourney and OpenAI's DALL-E can deliver the unimaginable when it comes to stunning artifacts produced from simple text prompts. Sketching comple… Read More
2024-03-30 16:52
AT&T has finally confirmed it is impacted by a data breach affecting 73 million customers after initially denying data leaked on a hacking forum originated from them Read More
2024-03-30 15:56
Security researchers found a new version of the Vultur banking trojan for Android that includes more advanced remote control capabilities and an improved evasion mechanism Read More
2024-03-30 07:16
Malicious ads and fake websites are spreading dangerous malware that can steal your passwords, cryptocurrency, and other sensitive data Read More
2024-03-30 05:23
Secret backdoor found in XZ Utils compression library used by major Linux distros, like Fedora, Kali Linux, and openSUSE Read More
2024-03-29 20:25
An infostealer malware campaign has reportedly collected millions of logins from users of various gaming websites, including players that use cheats, pay-to-cheat services Read More
2024-03-29 17:50
Today, Red Hat warned users to immediately stop using systems running Fedora development versions because of a backdoor found in the latest XZ data compression tools and libraries Read More
2024-03-29 15:03
U.S. users have just a few more days to make the transition from Google Podcasts as the company moves forward with the process of discontinuing the service globally Read More
2024-03-29 14:54
Security flaws found in Dormakaba's Saflok RFID locks used in hotels could turn your keycard into a master key Read More
2024-03-29 12:12
TheMoon botnet, previously thought to be inactive, is back. Over 40,000 routers & IoT devices hijacked to power Faceless - a criminal proxy service Read More
2024-03-29 11:19
Traditional pen testing: costly & infrequent. But with automation and AI, businesses can now affordably assess network security regularly Read More
2024-03-29 10:49
A new Linux vulnerability puts user passwords at risk. It exploits the "wall" command to potentially leak passwords on Ubuntu & Debian systems Read More
2024-03-29 05:37
PyPI temporarily shut down new user sign-ups and project creation to combat a malicious malware upload campaign Read More
2024-03-28 21:03
A vulnerability has been discovered in the 'util-linux' library that could allow unprivileged users to put arbitrary text on other users' terminals using the 'wall' command Read More
2024-03-28 19:04
American retailer Hot Topic disclosed that two waves of credential stuffing attacks in November exposed affected customers' personal information and partial payment data Read More
2024-03-28 18:03
The Python Package Index (PyPI) has temporarily suspended user registration and the creation of new projects to deal with an ongoing malware campaign Read More
2024-03-28 17:02
Linux users, beware. A nasty piece of malware named DinodasRAT is on the loose, targeting China, Taiwan, Turkey, and Uzbekistan Read More
2024-03-28 16:50
Finland's Parliament was hacked! Police officially blame China's notorious APT31 cyber espionage group Read More
2024-03-28 16:37
Cisco has shared a set of recommendations for customers to mitigate password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall… Read More
2024-03-28 14:43
Beware of Darcula, a Phishing-as-a-Service platform targeting 100+ countries with over 20,000 fake domains Read More
2024-03-28 14:01
Penetration testing plays a critical role in finding application vulnerabilities before they can be exploited. Learn more from Outpost24 on the costs of Penetration-Testing-as-a-Service vs c… Read More
2024-03-28 12:43
oin us for an exclusive webinar with experts from F5 DevCentral, OPSWAT, and THN. Dive deep into the current security landscape, compliance, threat de Read More
2024-03-28 11:00
he rush to release features often leads to shortcuts in security, exposing vulnerabilities through practices like hard-coding secrets Read More
2024-03-28 10:55
Researchers at ETH Zurich have cracked AMD Zen 2 & Zen 3 defenses against RowHammer attacks, naming their technique "ZenHammer" Read More
2024-03-28 08:07
Telegram's new Peer-to-Peer Login (P2PL) feature offers free premium membership but in exchange for using your phone number as a relay to send OTPs Read More
2024-03-27 22:12
A new phishing-as-a-service (PhaaS) named 'Darcula' uses 20,000 domains to spoof brands and steal credentials from Android and iPhone users in more than 100 countries Read More
2024-03-27 20:44
Microsoft reminded customers today that the Windows 11 22H2 Home and Pro editions will continue to receive non-security preview updates until June 26 Read More
2024-03-27 18:44
Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition Read More
2024-03-27 17:59
The INC Ransom extortion gang is threatening to publish three terabytes of data allegedly stolen after breaching the National Health Service (NHS) of Scotland Read More
2024-03-27 16:24
CISA warns that attackers are now exploiting a Microsoft SharePoint code injection vulnerability that can be chained with a critical privilege escalation flaw for pre-auth remote code e… Read More
2024-03-27 15:24
Indian government & energy sectors under attack. Hackers used phishing emails, weaponized 'HackBrowserData' malware to steal sensitive data Read More
2024-03-27 14:08
The U.S. Department of Justice (DoJ) has charged global cryptocurrency exchange KuCoin and two of its founders for failing to adhere to anti-money laundering (AML) requirements, allowing thr… Read More
2024-03-27 14:02
Ransomware is quickly changing in 2024, with massive disruptions and large gangs shutting down. Learn from Flare how affiliate competition is changing in 2024, and what might come next Read More
2024-03-27 13:15
CISA flags critical Microsoft SharePoint Server vulnerability under active attack. Patch immediately to protect your systems Read More
2024-03-27 13:00
Google's Threat Analysis Group (TAG) and Google subsidiary Mandiant said they've observed a significant increase in the number of zero-day vulnerabilities exploited in attacks in 2023, many… Read More
2024-03-27 12:54
A now-patched vulnerability in Microsoft Edge could have allowed attackers to covertly install browser extensions without user consent Read More
2024-03-27 10:56
Despite SASE's strengths, it falls short against threats like phishing and malicious extensions. Learn why secure browser extensions are crucial for c Read More
2024-03-27 10:39
Researchers uncover active exploitation of a critical flaw in Anyscale Ray, a popular AI platform Read More
2024-03-27 07:56
New phishing campaign uncovered by Trustwave SpiderLabs uses novel malware to deploy Agent Tesla, a notorious information stealer and keylogger Read More
2024-03-27 04:20
Latest Cybersecurity reports unveil two China-linked APT groups targeting ASEAN nations in cyberespionage campaign over the past 3 months Read More
2024-03-26 22:28
Microsoft has released the March 2024 non-security KB5035942 preview update for Windows 11 23H2, which enables Moment 5 features by default and fixes 18 known issues Read More
2024-03-26 22:19
Microsoft has released the optional KB5035941 preview cumulative update for Windows 10 22H2, introducing widgets on the lock screen, Windows Spotlight on the desktop, and 21 other fixes or c… Read More
2024-03-26 21:23
The Finnish Police confirmed on Tuesday that the APT31 hacking group linked to the Chinese Ministry of State Security (MSS) was behind a breach of the country's parliament disclosed in March… Read More
2024-03-26 20:40
Cybercriminals are selling custom Raspberry Pi software called 'GEOBOX' on Telegram, which allows inexperienced hackers to convert the mini-computers into anonymous cyberattack tools Read More
2024-03-26 19:21
The German national cybersecurity authority warned on Tuesday that it found at least 17,000 Microsoft Exchange servers in Germany exposed online and vulnerable to one or more critical securi… Read More
2024-03-26 18:51
A new hacking campaign dubbed "ShadowRay" targets an unpatched vulnerability in Ray, a popular open-source AI framework, to hijack computing power and leak sensitive data from thousands of c… Read More
2024-03-26 16:54
Suspicious NuGet package 'SqzrFramework480' discovered, potentially targeting devs using Chinese industrial tech. Package may be linked to industrial Read More
2024-03-26 16:33
Over 15 free VPN apps on Google Play were found using a malicious software development kit that turned Android devices into unwitting residential proxies, likely used for cybercrime and shop… Read More
2024-03-26 15:00
A new variant of "TheMoon" malware botnet has been spotted infecting thousands of outdated small office and home office (SOHO) routers and IoT devices in 88 countries Read More
2024-03-26 12:06
U.S. Department of Justice has unveiled indictments against seven Chinese nationals linked to the hacking group APT31 Read More
2024-03-26 11:29
Minecraft faces a growing threat from DDoS attacks, impacting over 500 million registered users. Learn how these attacks disrupt gameplay and what you Read More
2024-03-26 08:31
US Treasury cracks down on cryptocurrency exchanges aiding Russia's sanctions evasion. Bitpapa, Crypto Explorer, and others sanctioned for facilitatin Read More
2024-03-26 04:54
CISA adds 3 security flaws to its Known Exploited Vulnerabilities catalog, citing active exploitation evidence Read More
2024-03-25 23:28
A U.S. federal court has issued a $9,918,000 penalty and an injunction against an individual named Scott Rhodes for making thousands of "spoofed" robocalls to consumers across the country Read More
2024-03-25 23:18
Since Saturday, U.S. food chain giant Panera Bread has been experiencing a nationwide outage that has impacted its IT systems, including online ordering, POS systems, phones, and various int… Read More
2024-03-25 22:19
OpenAI's ChatGPT is down for many people worldwide, with users facing multiple problems, including being unable to access their accounts, having their chat history come up empty, and the cha… Read More
2024-03-25 22:19
The famous ChatGPT is down for thousands of users on March 25 Read More
2024-03-25 21:20
The U.S. Treasury Department's Office of Foreign Assets Control (OFAC) has sanctioned two cryptocurrency exchanges for working with OFAC-designated Russian dark web markets and banks Read More
2024-03-25 18:26
CISA and the FBI urged executives of technology manufacturing companies to prompt formal reviews of their organizations' software and implement mitigations to eliminate SQL injecti… Read More
2024-03-25 18:00
A new supply chain attack has impacted the top gg Discord bot developers community on GitHub, which has over 170,000 members, with data-stealing malware Read More
2024-03-25 16:56
Cybercriminals have been increasingly using a new phishing-as-a-service (PhaaS) platform named 'Tycoon 2FA' to target Microsoft 365 and Gmail accounts and bypass two-factor authenticati… Read More
2024-03-25 16:06
The U.S. Treasury Department has sanctioned a Wuhan-based company used by the Chinese Ministry of State Security (MSS) as cover in attacks against U.S. critical infrastructure… Read More
2024-03-25 16:00
Academic researchers developed ZenHammer, the first variant of the Rowhammer DRAM attack that works on CPUs based on recent AMD Zen microarchitecture that map physical ad… Read More
2024-03-25 11:58
Sophisticated attack targets Discord bot site Top.gg + devs. Attackers stole browser cookies, pushed malicious code, and created fake Python packages Read More
2024-03-25 11:37
Russian state-backed hackers infiltrated Microsoft using a simple password spray attack. This breach highlights a major security lesson Read More
2024-03-25 11:32
Google's new AI-powered 'Search Generative Experience' algorithms recommend scam sites that redirect visitors to unwanted Chrome extensions, fake iPhone giveaways, browser spam subscriptions… Read More
2024-03-25 09:02
Researchers uncover "GoFetch" vulnerability in Apple M-series chips, potentially allowing attackers to extract secret cryptographic keys Read More
2024-03-25 07:37
Iran-linked hackers, MuddyWater, launch new phishing attacks against Israeli organizations Read More
2024-03-24 05:38
Kimsuky shifts tactics, now using CHM files to deliver malware, targeting sensitive data globally Read More
2024-03-24 05:24
German authorities shut down Nemesis Market, an underground marketplace for drugs, stolen data, and cybercrime services Read More
2024-03-23 16:59
Opera has reported a substantial 164% increase in new European Union users on iOS devices after Apple introduced a new feature to comply with the EU's Digital Markets Act (DMA) Read More
2024-03-23 14:14
Microsoft plans to limit access to over fifty cloud products for Russian organizations by the end of March as part of the sanctions requirements against the country issued by EU regulators l… Read More
2024-03-23 06:03
ybersecurity firm Mandiant links recent cyber attacks on diplomatic entities to Midnight Blizzard, a group with ties to Russia's SVR Read More
2024-03-22 22:12
Microsoft has released emergency out-of-band (OOB) updates to fix a known issue causing Windows domain controllers to crash after installing the March 2024 Windows Server security updates Read More
2024-03-22 19:27
Researchers are warning that a notorious hacking group linked to Russia's Foreign Intelligence Service (SVR) is targeting political parties in Germany for the first time, shifting their focu… Read More
2024-03-22 17:45
Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition Read More
2024-03-22 16:12
The German police have seized infrastructure for the darknet Nemesis Market cybercrime marketplace in Germany and Lithuania, disrupting the site's operation Read More
2024-03-22 15:01
A new side-channel attack called "GoFetch" impacts Apple M1, M2, and M3 processors and can be used to steal secret cryptographic keys from data in the CPU's cache Read More
2024-03-22 14:08
Researchers at Palo Alto Networks Unit 42 uncover a new wave of phishing attacks delivering StrelaStealer malware, impacting over 100 organizations in Read More
2024-03-22 13:45
A now-patched vulnerability in AWS Managed Workflows for Apache Airflow (MWAA) could have allowed attackers to hijack sessions & execute code remotely Read More
2024-03-22 11:28
China-linked threat group aggressively exploits software flaws in Connectwise ScreenConnect & F5 BIG-IP Read More
2024-03-22 11:27
Over 39,000 WordPress sites have fallen victim to the Sign1 malware campaign in just 6 months, redirecting unsuspecting users to scam sites through ma Read More
2024-03-22 11:15
Introducing the ThreatLocker® Zero Trust Endpoint Protection Platform: Elevate your organization's cyber defense with policy-based controls Read More
2024-03-22 06:14
U.S. Department of Justice and 16 state AGs have filed a lawsuit against Apple, accusing it of maintaining an illegal smartphone monopoly Read More
2024-03-22 05:13
Pwn2Own Vancouver 2024 has ended with security researchers collecting $1,132,500 after demoing 29 zero-days (and some bug collisions) Read More
2024-03-22 03:06
AcidPour malware targets four telecom providers in Ukraine, linked to AcidRain and Russian military intelligence operations Read More
2024-03-21 20:07
Microsoft continues to add new features to the Windows Notepad, today announcing a preview release with built-in spellchecking and an autocorrect feature Read More
2024-03-21 19:05
On Wednesday, the KDE team warned Linux users to exercise "extreme caution" when installing global themes, even from the official KDE Store, because these themes run arbitrary code on device… Read More
2024-03-21 18:14
Security vulnerabilities in over 3 million Saflok electronic RFID locks deployed in 13,000 hotels and homes worldwide allowed researchers to easily unlock any door in a hotel by forging a pa… Read More
2024-03-21 16:03
Russian threat group Turla strikes again! NGO in Europe hit with TinyTurla-NG backdoor Read More
2024-03-21 15:56
A previously unknown malware campaign called Sign1 has infected over 39,000 websites over the past six months, causing visitors to see unwanted redirects and popup ads Read More
2024-03-21 15:17
Security researchers have released a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet's FortiClient Enterprise Management Server (EMS) software, which is now actively… Read More
2024-03-21 14:26
New report reveals 800+ packages in the npm registry contain hidden code discrepancies Read More
2024-03-21 14:02
Recent ransomware attacks have shared valuable lessons on how to limit risk to your own networks. Learn from Blink Ops about how organizations can limit their ransomware risk Read More
2024-03-21 12:48
Researchers uncover AndroxGh0st, a tool targeting Laravel apps to steal sensitive data from .env files, affecting AWS & Twilio accounts Read More
2024-03-21 12:27
Microsoft confirmed that a memory leak introduced with the March 2024 Windows Server security updates is behind a widespread issue causing Windows domain controllers to crash Read More
2024-03-21 12:11
The Syslog message format is used by many applications and is associated with the Linux operating system. Discover the best free Syslog servers Read More
2024-03-21 11:30
With the explosion of SaaS applications in the modern workplace, IT and security teams often struggle to keep up with vendor risk assessments Read More
2024-03-21 11:26
Discover the best network monitoring tools. Find a system that provides both network device monitoring and traffic analysis Read More
Subscribe to Netmanageit Cto Corner
Get updates delivered right to your inbox!