2024-04-26 07:29
Following a recent phishing attack that affected over two dozen employees, the Los Angeles County Department of Health Services revealed a data breach involving patient personal and health i… Read More
Blog Directory > Technology Blogs > 10 Free Sources To Learn Ethical Hacking technology Blog >
10 Free Sources To Learn Ethical Hacking Blog
reconbee.com
Tags:
exploiting wpautomatic plugin
hackers hijack antivirus
mechanism exploited
cookie deprecation amid
charges samourai cryptomixer
south korean defense
ssload cobalt strike
postpones thirdparty cookie
samourai cryptomixer
hijacking systems
If you're interested in studying ethical hacking and seeking the best resources like tutorials and online training courses, you've landed in the right spot. We've previously shared our list of the best cybersecurity courses, and now we have an excellent recommendation for the top resource to help you learn about ethical hacking.
2024-04-26 07:16
Google has reiterated its intention to remove third-party monitoring cookies from its Chrome browser in an effort to allay ongoing competition concerns raised by UK regulators regarding its… Read More
2024-04-26 07:12
In summer 2023, the North Korea-affiliated threat actor Lazarus Group used its tried-and-true fake job lures to distribute a new remote access trojan named Kaolin RAT as part of attacks dire… Read More
2024-04-26 07:08
A serious security vulnerability in the WordPress plugin WP-Automatic is being actively targeted by threat actors, with the potential to enable site takeovers.
The vulnerability, identifi… Read More
2024-04-25 05:13
The U.S. Department of Justice has charged Keonne Rodriguez and William Lonergan Hill with laundering over $100 million from different criminal businesses via their nearly ten-year-long bitc… Read More
2024-04-25 05:06
Google is updating the client-side encryption mechanism for Google Meet to allow external participants, including those without Google accounts, to join encrypted calls.
Client-side encry… Read More
2024-04-25 05:00
Via a persistent threat nicknamed GuptiMiner that targets major corporate networks, a new malware campaign has been distributing backdoors and cryptocurrency miners like XMRig by taking adva… Read More
2024-04-25 04:53
Researchers studying cybersecurity have uncovered a persistent campaign of attacks that uses phishing emails to spread malware known as SSLoad.
Securonix has dubbed the campaign FROZEN#SH… Read More
2024-04-24 05:50
Using the eScan antivirus’s update system, North Korean hackers have been able to install backdoors on large corporate networks and distribute the GuptiMiner malware, which is used to… Read More
2024-04-24 05:27
An urgent warning about North Korean hacking gangs targeting military industry firms to steal critical technology secrets was issued today by the National Police Agency in South Korea.
Th… Read More
2024-04-19 07:11
Following a recent intrusion by a cybercrime gang that compromised parts of its IT systems, American telecom company Frontier Communications is currently working to restore service.
Front… Read More
2024-04-19 07:02
A malware known as OfflRouter has persisted in infecting certain government networks in Ukraine since 2015.
Based on an examination of more than 100 private documents infected with the VB… Read More
2024-04-19 06:57
Anunak, also known as Carbanak, is a known backdoor that was delivered in a spear-phishing effort directed towards the U.S. automotive industry by the notorious cybercrime group known as FIN… Read More
2024-04-19 06:50
Middle Eastern governments have been singled out in an as-yet-undisclosed campaign to introduce a new backdoor known as CR4T.
The activity was found in February 2024, according to Russian… Read More
2024-04-18 07:17
Attackers use serious vulnerabilities related to remote code execution and authentication to target OpenMetadata workloads in an ongoing Kubernetes cryptomining operation.
Data scientists… Read More
2024-04-18 07:09
Threat actors are using unpatched Atlassian servers as a means of distributing the Linux version of the Cerber ransomware, also known as C3RB3R.
The attacks take use of a significant secu… Read More
2024-04-18 06:57
From at least mid-2022, a hitherto unreported “flexible” backdoor known as Kapeka has been “sporadically” seen in cyberattacks directed towards Eastern Europe, partic… Read More
2024-04-18 06:53
A fresh Google malvertising effort is using a collection of domains that seem like authentic IP scanner software to spread a backdoor called MadMxShell that was not previously disclosed… Read More
2024-04-17 07:37
Users are being notified by the developers of the PuTTY Secure Shell (SSH) and Telnet client about a serious flaw that affects versions 0.68 through 0.80 and has the potential to be used to… Read More
2024-04-17 06:47
The telehealth company Cerebral and the U.S. Federal Trade Commission have struck a settlement in which Cerebral will pay $7,000,000 to resolve charges that it mishandled patients’ pri… Read More
2024-04-17 06:38
The threat actor identified as TA558 has been seen to distribute a variety of malware, including Agent Tesla, FormBook, Remcos RAT, LokiBot, GuLoader, Snake Keylogger, and XWorm, among other… Read More
2024-04-17 06:31
Similar to the recently discovered intrusion directed towards the open-source XZ Utils project, security experts have discovered a “credible” takeover attempt targeting the OpenJ… Read More
2024-04-16 10:54
Vulnerabilities in cybersecurity frequently originate from design flaws rather than simple code faults and are hidden beneath the surface. The widely recognized “Insecure Design,&rdquo&hell…Read More
2024-04-16 06:57
The TA558 hacker gang is employing steganography to hide harmful code inside photos in order to infect targeted systems with multiple malware tools.
Steganography is the process of concea… Read More
2024-04-16 06:49
In what has been a protracted and complicated extortion process for the organization, the RansomHub gang has started to publish what they claim is corporate and patient data seized from Unit… Read More
2024-04-16 06:42
Researchers studying cybersecurity have uncovered a “renewed” cyber espionage effort that targets South Asian users in an attempt to implant the Apple iOS spyware program LightSp… Read More
2024-04-16 06:34
In an attempt to steal sensitive data, the threat actor known as Muddled Libra has been seen aggressively attacking cloud service provider (CSP) environments and software-as-a-service (SaaS)… Read More
2024-04-15 07:26
Two people are allegedly responsible for creating and disseminating the “Firebird” remote access trojan (RAT), which was then renamed as “Hive.” The arrest and charge… Read More
2024-04-11 06:39
A new Workspace feature from Google needs multiple administrators to approve changes to high-risk settings to avoid unauthorized or inadvertent changes that could compromise security.
A c… Read More
2024-04-11 06:33
A serious security vulnerability in the Rust standard library might be used to launch command injection attacks against Windows users.
The vulnerability, identified by the tracking number… Read More
2024-04-11 06:29
Researchers in cybersecurity claim to have unveiled the “first native Spectre v2 exploit” against the Linux kernel on Intel-powered computers, which allows for the possible readi… Read More
2024-04-11 06:23
Users in South Asia, especially those in India and Pakistan, have been the main target of an ongoing Android malware campaign called eXotic Visit. The virus is spread through specialized web… Read More
2024-04-09 09:51
Web applications are essential in today’s digital world for several things, including banking, online shopping, and more. However, these programs’ accessibility and convenience c… Read More
2024-04-09 02:43
Fake NFT and discount pop-ups are already appearing on around 2,000 compromised WordPress websites, tricking users into connecting their wallets to cryptocurrency drainers that automatically… Read More
2024-04-09 02:34
A recent phishing attempt targeting Windows systems has its sights set on the Latin American region.
According to Karla Agregado, a researcher at Trustwave SpiderLabs, the phishing email… Read More
2024-04-09 02:28
Under the pretense of offering larger profits, Google has filed a lawsuit against two app developers for participating in a “international online consumer investment fraud scheme&rdquo&hell…Read More
2024-04-09 02:24
To address memory corruption issues, Google has announced support for the so-called V8 Sandbox in the Chrome web browser.
Samuel Groß, the technical lead for V8 Security, states tha… Read More
2024-04-08 03:20
Hackers are increasingly employing social engineering techniques to target IT help desks in the Healthcare and Public Health (HPH) industry, according to a warning from the U.S. Department o… Read More
2024-04-08 03:05
Byakugan is a new multifunctional malware that is being distributed using fake Adobe Acrobat Reader installs.
The attack begins with a Portuguese-language PDF file that, when opened, disp… Read More
2024-04-08 02:59
The Middle East and North Africa (MENA) and Asia-Pacific (APAC) financial institutions are the target of JSOutProx, a new “evolving threat” variant.
In a technical paper relea… Read More
2024-04-08 02:54
It has been discovered that malicious actors are using a serious weakness in Magento to introduce a persistent backdoor into e-commerce websites.According to Adobe, the attack makes use of C… Read More
2024-04-05 02:41
Visa is alerting users to an increase in JsOutProx malware detections, which is aimed at financial institutions and their clients.
Visa’s Payment Fraud Disruption (PDF) team sent a… Read More
2024-04-05 02:33
Latrodectus is a relatively recent malware that has been observed in malicious email campaigns since November 2023. It is thought to be a development of the IcedID loader.
Researchers fro… Read More
2024-04-05 02:24
Phishing efforts targeting the oil and gas industry are using a new version of the Rhadamanthys virus, which steals information.
According to Cofense researcher Dylan Duncan, the phishing… Read More
2024-04-05 02:19
Since at least May 2023, a suspected threat actor of Vietnamese ancestry has been seen using malware to target individuals in several Asian and Southeast Asian nations in an attempt to obtai… Read More
2024-04-04 14:46
Following the Tuesday outage of several county services due to a ransomware assault, Jackson County, Missouri, has declared a state of emergency.
According to the Missouri county, Jackson… Read More
2024-04-04 14:40
Microsoft has come under fire from the U.S. Cyber Safety Review Board (CSRB) for a string of security failings that allowed a nation-state group named Storm-0558, based in China, to compromi… Read More
2024-04-04 14:35
The banking trojan known as Mispadu now targets users in Italy, Poland, and Sweden in addition to Latin America (LATAM) and Spanish-speaking people.
According to Morphisec, the campaign&r&hell…Read More
2024-04-04 14:01
Denial-of-service (DoS) attacks can be carried out by taking advantage of the HTTP/2 protocol’s CONTINUATION frame, according to recent study.
Security researcher Bartek Nowotarski… Read More
2024-04-03 09:24
A free web scanner has been made available by firmware security company Binarly to identify Linux executables affected by the XZ Utils supply chain exploit, which is known as CVE-2024-3094… Read More
2024-04-03 09:18
As part of the settlement of a class action lawsuit, Google has agreed to delete billions of data records that show users’ browsing activity without their knowledge or consent while us… Read More
2024-03-22 19:01
Over 39,000 WordPress websites have been infiltrated by a huge malware operation known as Sign1 in the last six months. Sign1 uses malicious JavaScript injections to divert users to scam web… Read More
2024-03-22 18:57
Along with sixteen other state and district attorneys general, the U.S. Department of Justice (DoJ) charged Apple on Thursday with unlawfully holding a monopoly over smartphones, compromisin… Read More
2024-03-22 18:52
Researchers studying cybersecurity have disclosed information about a security flaw that has since been fixed in Amazon Web Services (AWS) Managed Workflows for Apache Airflow (MWAA). This f… Read More
2024-03-22 18:49
Researchers studying cybersecurity have discovered a fresh wave of phishing attempts that purport to distribute StrelaStealer, an information stealer that is always changing.
In a new ana… Read More
2024-03-21 07:21
It has been discovered that an innovative denial-of-service (DoS) attack vector targets User Datagram Protocol (UDP)-based application-layer protocols, potentially endangering hundreds of th… Read More
2024-03-21 07:13
Three people have been detained by the Ukrainian Cyber Police on suspicion of stealing over 100 million Instagram accounts and emails from users worldwide.
The suspects, who range in age… Read More
2024-03-21 07:08
Researchers studying cybersecurity have found an upgraded version of BunnyLoader, a malware loader and stealer that can avoid detection by modularizing its different functionalities.
Palo… Read More
2024-03-21 07:04
Ivanti has notified customers of a serious remote code execution vulnerability that affects Standalone Sentry and is advising them to update their systems right away to remain safe from poss… Read More
2024-03-20 06:47
The Federal Trade Commission (FTC) of the United States issued a warning today about con artists posing as its workers to defraud Americans out of thousands of dollars.
The identities of… Read More
2024-03-20 06:40
AcidRain, a new data-erasing malware type created especially to target Linux x86 machines, has been found in the wild.
As stated in a series of posts on X, Juan Andres Guerrero-Saade of S… Read More
2024-03-20 06:34
Once again demonstrating how threat actors are repurposing legitimate services for malicious ends, threat actors are using digital document publishing (DDP) sites hosted on platforms such as… Read More
2024-03-20 06:27
The U.S. Environmental Protection Agency (EPA) announced the creation of a new “Water Sector Cybersecurity Task Force” to develop strategies to address the risks that the nation… Read More
2024-03-19 13:42
Part of the larger Electronic Government Act, the Federal Information Security Management Act (FISMA) is a noteworthy piece of U.S. legislation that was passed in 2002. It creates a set of r… Read More
2024-03-19 08:30
Targeting at least 116 businesses in 45 countries, a sophisticated hacking effort ascribed to the Chinese Advanced Persistent Threat (APT) group “Earth Krahang” has compromised 7… Read More
2024-03-15 08:19
The most recent iteration of the PixPirate banking malware for Android uses a novel technique to conceal itself on devices and stay operational even after the removal of its dropper software… Read More
2024-03-15 07:57
France Travail, the old Pôle Emploi, has issued a warning that hackers may have gained access to its networks and are using them to leak or take advantage of the personal information o… Read More
2024-03-15 07:47
Later this month, Google will release a Safe online upgrade that will safeguard all Chrome users from malware and phishing in real-time without jeopardizing their privacy when online.
In… Read More
2024-03-15 07:18
Malicious advertisements and fake links are being directed towards Chinese people searching for genuine software on search engines like Baidu, such as Notepad++ and VNote. The purpose of the… Read More
2024-03-14 15:21
The UnitedHealthcare Group (UHG) subsidiary Optum, which runs the Change Healthcare platform, was the target of a ransomware attack in late February. The U.S. Department of Health and Human… Read More
2024-03-14 15:01
A recently patched Microsoft Windows security hole was used as a zero-day exploit by a DarkGate malware campaign that was discovered in mid-January 2024 employing phony software installers… Read More
2024-03-14 14:52
The Program Compatibility Assistant (PCA), a genuine Microsoft Windows component, is being used by the Russian-speaking cybercrime group RedCurl to carry out harmful commands.
Trend Micro… Read More
2024-03-14 14:22
The loader virus Ande Loader is used by the threat actor known as Blind Eagle to distribute remote access trojans (RATs) such as Remcos RAT and NjRAT.
According to eSentire, the attacks… Read More
2024-03-13 13:52
A federal jury in Washington, D.C. found Russian-Swedish national Roman Sterlingov guilty of running Bitcoin Fog from 2011 until 2021.
Cybercriminals from several darknet markets utilized… Read More
2024-03-13 13:44
A high-severity security vulnerability in the WordPress Popup Builder plugin is being used by a new malware campaign to insert malicious JavaScript code.
Over the previous three weeks, th… Read More
2024-03-11 04:48
Threat actors have been seen using the open-source QEMU hardware emulator as a tunneling tool to connect to the infrastructure of an unidentified “large company” in a cyberattack… Read More
2024-03-11 04:42
Based on proof of active exploitation, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a major security issue affecting JetBrains TeamCity On-Premises soft… Read More
2024-03-11 04:37
To address a high-severity security weakness in its Secure Client software that could allow a threat actor to start a VPN session with the targeted user, Cisco has published updates.
The… Read More
2024-03-11 04:32
Microsoft disclosed on Friday that after a hack that surfaced in January 2024, the threat actor known as Midnight Blizzard—also known as APT29 or Cozy Bear—with support from the… Read More
2024-03-08 05:19
The title and content have been clarified to indicate that, while a Flipper Zero was used in this MiTM phishing attempt, other devices might have been used.
Researchers gave an example of… Read More
2024-03-08 05:09
An indictment against 38-year-old Linwei (Leon) Ding, a former Google software engineer suspected of stealing Google AI trade secrets for Chinese businesses, has been unsealed by the U.S. De… Read More
2024-03-08 05:02
Threat actors are using Facebook messaging to access Snake, a Python-based information stealer that is intended to obtain sensitive information, including credentials.
According to a tech… Read More
2024-03-08 04:56
At least since September 2023, the threat actor with ties to China known as Evasive Panda has been planning supply chain and watering hole assaults on Tibetan users.
Delivering malicious… Read More
2024-03-07 05:55
Four security weaknesses affecting ESXi, Workstation, and Fusion have been patched by VMware, including two serious issues that might result in code execution.
The vulnerabilities, which… Read More
2024-03-07 05:49
A “cyber incident” prompted the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) to take its corporate systems down as a precaution.
Canada’s finan… Read More
2024-03-07 05:43
A group of hackers known only as TA4903, who specialize in business email compromise (BEC) assaults, has been pretending to be a number of US federal agencies in order to trick victims into… Read More
2024-03-07 05:29
Following the posting of a false law enforcement seizure banner, the threat actors responsible for the BlackCat ransomware shut down their darknet website and most likely pulled an escape fr… Read More
2024-03-06 06:18
Sanctions have been placed by the United States on two people and five organizations that were involved in the creation and dissemination of the commercial spyware known as Predator, which w… Read More
2024-03-06 05:56
The Phobos ransomware has been a source of concern for government and critical infrastructure entities. U.S. cybersecurity and intelligence agencies have issued warnings about the threat act… Read More
2024-03-06 05:38
Savvy Seahorse, a new DNS threat actor, is using cunning tactics to lure victims into fraudulent investment platforms so they may steal money.
“Savvy Seahorse is a DNS threat actor… Read More
2024-03-06 05:30
Threat actors from North Korea have been using the recently discovered security holes in ConnectWise ScreenConnect to spread a brand-new piece of malware known as TODDLERSHARK.
A research… Read More
2024-03-04 18:51
In the current digital era, where data travels across borders with ease, protecting the privacy and security of personal data has become a top priority for both individuals and businesses. A… Read More
2024-03-04 04:57
Alireza Shafie Nasab, a 39-year-old Iranian national, is the subject of an indictment released by the U.S. Department of Justice (DoJ) about his involvement in a cyber-espionage effort aimed… Read More
2024-02-26 05:51
A new technique that PayPal has submitted for patent protection can detect whether a “super-cookie” is being stolen. This could strengthen the cookie-based authentication system… Read More
2024-02-26 05:38
The person or people behind the LockBit ransomware service persona on cybercrime sites like XSS and Exploit, known as LockBitSupp, “has engaged with law enforcement,” according t… Read More
2024-02-26 05:27
Almost two years after going dormant, a dormant package named Nova Sentinel was upgraded to spread information-stealing malware on the Python Package Index (PyPI) repository.
Software sup… Read More
2024-02-26 04:59
More than six months after it was revealed that a China-linked cyber espionage campaign was targeting two dozen organizations, Microsoft has extended free logging capabilities to all U.S. fe… Read More
2024-02-23 07:31
Attackers are infecting unpatched ScreenConnect servers with LockBit ransomware payloads by taking advantage of a maximum severity authentication bypass vulnerability.
Since Tuesday, when… Read More
2024-02-23 07:05
A backdoor has been included in an installer for a utility that is probably used by the Ministry of Foreign Affairs (MID)’s Russian Consular Department to distribute the remote access… Read More
2024-02-23 07:01
The U.S. State Department has declared cash rewards of up to $15 million for details that may help identify key figures within the LockBit ransomware group and lead to the apprehension of an… Read More
Subscribe to 10 Free Sources To Learn Ethical Hacking
Get updates delivered right to your inbox!