January, 2024

• 4 January

  Shadowserver report
  Nearly 11 million SSH servers vulnerable to Terrapin attacks

  

  Around 11 million SSH servers are at risk from the Terrapin attack, which can compromise the security of certain SSH connections. This constitutes roughly 52% of all scanned samples in the IPv4 and IPv6 space monitored by Shadoserver. The Terrapin attack, created by researchers from Ruhr University Bochum in Germany, …

  Read More »
• 4 January

  Check now it
  CISA Adds Two known Critical Vulnerabilities to Watchlist for 2024

  

  CISA added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog for January 2024 due to evidence of ongoing exploitation. They are the Google Chromium WebRTC Heap Buffer Overflow Vulnerability (CVE-2023-7024) and the Spreadsheet::ParseExcel Remote Code Execution Vulnerability (CVE-2023-7101). In December 2023, Google released an update to fix a vulnerability …

  Read More »
• 3 January

  European Central Bank (ECB) has announced
  ECB to test over 100 European banks cyber resiliency

  

  The European Central Bank (ECB) will test over 100 European banks on their ability to respond to and recover from cyber-attacks. The European Union’s central bank will perform its first cyber resilience stress test on 109 banks under its supervision in 2024. The test will evaluate the banks’ capacity to …

  Read More »
• 3 January

  Have a quick check
  X (twitter) gold accounts flood dark web to sell

  

  Cybercriminals have increased the sale of new or stolen Gold checkmarked accounts from the X/Twitter platform. These accounts are being used by threat actors to share links to malware on the social media site, making it appear as a post from a trusted source. Researchers at CloudSEK in Singapore have …

  Read More »
• 3 January

  Across 61 countries
  29 malware families target 1,800 banking apps worldwide

  

  The research uncovered that 29 malware families targeted 1,800 banking applications across 61 countries last year. In comparison, the 2022 report uncovered 10 prolific malware families targeting 600 banking apps. Traditional banking apps are the main target, with 1,103 compromised apps, accounting for 61% of the total. FinTech and Trading …

  Read More »
• 3 January

  iOS and macOS vulnerability, CVE-2023-41974
  PoC published, $70K bounty to reveal CVE-2023-41974 Flaw

  

  A PoC code has been released for the a serious vulnerability, CVE-2023-41974, on iOS and macOS. This vulnerability can be used to gain full control of a mobile device by exploiting a critical issue in the kernel, giving an application access to run any code with kernel privileges. This discovery …

  Read More »
• 3 January

  Black Basta Ransomware decryptor released

  

  Security researchers have released new tools to help Black Basta ransomware victims recover their files. SR Labs, based in Berlin, recently shared on GitHub that the tools take advantage of a flaw in the encryption algorithm. Basta uses ChaCha to encrypt victim files by XORing with a keystream in 64-byte …

  Read More »
• 2 January

  To sell over 160 million records
  Mysterious hacker strikes Iran with 23 organizations: Hudson Rock

  

  Hudson Researchers reported that on December 20th, ‘irleaks’ claimed to have 160 million records from 23 top insurance companies in Iran for sale. The hacker says they have stolen data like names, birth dates, phone numbers, national codes, and more. They have shared a sample of the data and want …

  Read More »
• 2 January

  Deep fake video
  Tanjin Tisha’s deep fake porn video goes viral

  

  A deepfake video of actress Tanjin Tisha went viral on social media. The video was shared on multiple Facebook pages and personal profiles, but it was edited with Tisha’s face placed over another woman’s face. The video was edited and shared from the Facebook page “Sushmita”. It was posted on …

  Read More »
• 2 January

  Anonymous Collective claim
  Anonymous Collective claim attack on Bahrain’s E Visa Service

  

  Hacktivist group, Anonymous Collective claim to cyber attack the E Visa service of the Bahrain government. The cyberattack on Bahrain government has raised concerns about the cyber security arena of sensitive data protection. The hacktivist group shared a screen shot of attack of the E Visa services on their social …

  Read More »