Cybersecurity News - Page 107

Several of the web shells had been backdoored by their original maintainers, leaking critical information.

The group accessed generative AI services and manipulated the system to produce harmful content.

Both mixers were allegedly used by criminals to launder funds tied to theft, ransomware, and other cybercrimes.

In brief: Hackers are exploiting Ivanti Connect Secure 0Day flaw, Ukrainian hacktivists breach Russian ISP Nodex, and more.

The flaw allows unauthenticated attackers to execute arbitrary code remotely on vulnerable devices.

NonEuclid leverages features like antivirus bypass, privilege escalation, anti-detection mechanisms, and ransomware encryption.

The announcement follows claims by a threat actor who leaked the stolen data on the BreachForums hacking forum.

DDoS attacks conducted by the botnet peaked in October and November 2024, with short bursts of intense traffic reaching up to 100 Gbps.

CVE-2024-41713 and CVE-2024-55550 can be chained together, enabling a hacker to read arbitrary files on the server.

Over the past year, Socket researchers have observed the consistent misuse of OAST services such as oastify[.]com and oast[.]fun.