Cybersecurity News - Page 104

The technique, known as RID hijacking, exploits a vulnerability in the way Windows handles user permissions.

Once inside, it exfiltrates sensitive data from compromised machines.

The attack utilizes a passive agent that monitors TCP traffic for a specific “magic packet” sent by the attacker.

In brief: SonicWall SMA zero-day exploited in attacks, hackers are exploiting older Ivanti flaws, and more.

The attacks have been active since June 2024.

SonicWall has released a patch in version 12.4.3-02854 and higher versions to address the issue.

The attackers replaced a legitimate installer with a malicious version that planted the SlowStepper backdoor on the system.

The botnet operates through an extensive network of over 100 command-and-control servers.

Ulbricht has spent over a decade behind bars after being sentenced to life in prison without the possibility of parole.

The campaign has targeted critical sectors in Russia, including defense and infrastructure, with the goal of stealing sensitive information.