Oktacron - Cyber Security RSS Feeds History

A bug in McAfee Agent allows running code with Windows SYSTEM privileges

cyware Jan 22, 2022 Malware and Vulnerabilities

McAfee has addressed a high-severity vulnerability, tracked as CVE-2022-0166, that resides in McAfee Agent software for Windows. An attacker can exploit this flaw to escalate privileges and execute arbitrary code with SYSTEM privileges.

Disruptive Attacks in Ukraine Likely Linked to Escalating Tensions

cyware Jan 22, 2022 Geopolitical, Terrorism

The threat actors attempted to misdirect attribution using inauthentic metadata and used publicly available crimeware services and code to minimize the amount of custom code involved in the attack.

Will ransomware gangs see flow of cash throttled by Russia cryptocurrency restrictions?

cyware Jan 22, 2022 Expert Blogs and Opinion

The Bank of Russia's paper is not largely directed at cybercrime. Instead, it takes a realistic look at the potential dangers of cryptocurrency on an emerging nations' economy and energy security.

Spyware Blitzes Compromise, Cannibalize ICS Networks

cyware Jan 22, 2022 Malware and Vulnerabilities

Attackers are targeting industrial enterprises with spyware campaigns that hunt for corporate credentials so they can be used both for financial gain and to cannibalize compromised networks to propagate future attacks, researchers have found.

Stealthy firmware bootkit leveraged by APT in targeted attacks

cyware Jan 22, 2022 Malware and Vulnerabilities

Kaspersky researchers have uncovered the third known case of a firmware bootkit in the wild. Dubbed MoonBounce, this malicious implant is hidden within Unified Extensible Firmware Interface (UEFI) firmware.

Researchers find similarities between NotPetya, attacks on Ukrainian government websites

cyware Jan 22, 2022 Malware and Vulnerabilities

The malware that wiped dozens of government computer systems in Ukraine starting on Jan. 13 shares some strategic similarities to the NotPetya wiper that was used to attack Ukraine in 2017.

Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes

thehackernews Jan 22, 2022 Feed

In yet another instance of software supply chain attack, dozens of WordPress themes and plugins hosted on a developer's website were backdoored with malicious code in the first half of September 2021 with the goal of infecting further sites. The backdoor gave the attackers full administrative control over websites that used 40 themes and 53 plugins belonging to AccessPress Themes, a Nepal-based

Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks

thehackernews Jan 22, 2022 Feed

Researchers have disclosed details of two critical security vulnerabilities in Control Web Panel that could be abused as part of an exploit chain to achieve pre-authenticated remote code execution on affected servers. Tracked as CVE-2021-45467, the issue concerns a case of a file inclusion vulnerability, which occurs when a web application is tricked into exposing or running arbitrary files on

Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine

thehackernews Jan 22, 2022 Feed

Latest analysis into the wiper malware that targeted dozens of Ukrainian agencies earlier this month has revealed "strategic similarities" to NotPetya malware that was unleashed against the country's infrastructure and elsewhere in 2017. The malware, dubbed WhisperGate, was discovered by Microsoft last week, which said it observed the destructive cyber campaign targeting government, non-profit,

Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure

thehackernews Jan 22, 2022 Feed

An active espionage campaign has been attributed to the threat actor known as Molerats that abuses legitimate cloud services like Google Drive and Dropbox to host malware payloads and for command-and-control and the exfiltration of data from targets across the Middle East. The cyber offensive is believed to have been underway since at least July 2021, according to cloud-based information

Cyber security aggregator - feeds history

A bug in McAfee Agent allows running code with Windows SYSTEM privileges

Disruptive Attacks in Ukraine Likely Linked to Escalating Tensions

Will ransomware gangs see flow of cash throttled by Russia cryptocurrency restrictions?

Spyware Blitzes Compromise, Cannibalize ICS Networks

Stealthy firmware bootkit leveraged by APT in targeted attacks

Researchers find similarities between NotPetya, attacks on Ukrainian government websites

Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes

Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks

Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine

Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure

2020202120222023202420252026