Cybersecurity News - Page 22

The upcoming patches will cover Drupal core branches 11.3.x, 11.2.x, 10.6.x, and 10.5.x.

The operation involved law enforcement agencies from 13 countries aiming to dismantle malicious cyber infrastructure and disrupt phishing campaigns.

TencShell is a customized, Go-based command-and-control (C&C) implant based on the open-source Rshell framework.

The company said its investigation found no evidence that customer data, personal information, or customer systems were affected by the incident.

Symantec linked the malware directly to LS-DYNA and Autodyn, two industrial simulation suites widely used for modeling detonations.

Attackers siphoned off more than 36 Bitcoin along with an additional $7 million in other cryptocurrencies.

The latest Kazuar variant now supports roughly 150 configuration options.

In brief: Cisco patches Catalyst SD-WAN Controller zero-day, Microsoft warns of an Exchange zero-day, GTIG details a first AI-developed zero-day exploit, and more.

The attackers reportedly exploited the Microsoft Exchange “ProxyNotShell” vulnerability chain to gain initial access.

Researchers observed the group abusing two trusted binaries to load malicious DLLs.