Cybersecurity News - Page 132

The vulnerability allowed Lazarus to escalate privileges on hacked systems and execute code in protected areas of the operating system.

The threat actor used the accounts for generation of long-form articles and shorter social media comments.

In brief: Microsoft fixes 6 zero-days, a large-scale extortion campaign hits cloud environments, and more.

Georgy Kavzharadze was a prolific vendor on the criminal internet marketplace Slilpp.

The tool functions as a loader executable, a delivery mechanism that leverages a legitimate but vulnerable driver.

To avoid detection, CryptoCore uses obfuscated JavaScript, manipulates cookies, and leverages Cloudflare protection.

The attack has affected more than 10 known targets, including the former US Ambassador to Ukraine, Steven Pifer.

The breach was first announced on the pro-Russian Telegram channel Beregini.

In addition to zero-days, Microsoft released the fixes for a slew of the publicly disclosed vulnerabilities.

They face multiple charges, with potential prison sentences totaling up to 57 years if convicted.