alt=Australian government takes action against online scams

2024-03-30 Post a Comment

Australian Government Doubles Down On Cybersecurity in Wake of Major Attacks

John Leyden, Contributing Writer Government proposes more modern and comprehensive cybersecurity regulations for businesses, government, and critical infrastructures providers Down Under. The Australian government is carving out plans to revamp cybersecurity laws and regulations in the wake of a series of damaging high-profile data breaches that rocked the country. Government officials recently released what it called a consultation paper that outlined specific proposals and solicited input from the private sector […]

Cyber security

2024-03-28 Post a Comment

CISA publishes 447-page draft of cyber incident reporting rule

By-Jonathan Greig: The nationâ€™s top cybersecurity agency has unveiled the initial draft of a new rule detailing how critical infrastructure organizations need to report cyberattacks to the federal government. The Cybersecurity and Infrastructure Security Agency (CISA)Â postedÂ the 447-page set of regulations under the Cyber Incident Reporting for Critical Infrastructure Act to the Federal Register, allowing the public to comment on it. The law mandating the rulesÂ was passed in 2022Â and is intended […]

Cyber security

2024-03-28 1 comment

2M+ WordPress Sites Hit By Essential Addons For Elementor Vulnerability

SEJ STAFF-Roger Montti: XSS vulnerabilities in Essential Addons for Elementor could allow attackers to inject malicious scripts into WordPress websites Security researchers published an advisory on the popular Essential Addons For Elementor WordPress plugin which was discovered to contain a Stored Cross-Site Scripting vulnerability affecting over 2 million websites. Flaws in two different widgets that are a part of the plugin are responsible for the vulnerabilities. Two Widgets That Lead […]

alt=Malicious software targeting Windows system through GitHub.

Cyber security

2024-03-26 Post a Comment

Hackers Deploy STRRAT & VCURMS Malware on Windows Via GitHub

By Balaji A new phishing campaign targets users with emails containing a button to â€œverify payment information.â€ Clicking the button triggers the download of a malicious JAR file (disguised as an invoice) that leverages a PowerShell command to download two additional JARs. The JARs deploy the STRRAT and VCURMS RATs, granting attackers remote access and keylogging capabilities and credential theft from browsers, applications, Discord, Steam, etc. In contrast, VCURMS can […]

alt=A Raspberry Pi transformed into an online anonymity tool, enhancing privacy and security.

Cyber security

2024-03-26 2 comments

Hackers Transform The Raspberry Pi Into An Online Anonymity Tool

ByBalaji: A new tool, GEOBOX, was advertised on the Dark Web that utilizes Raspberry Pi devices for fraud and anonymization, allowing users to spoof GPS locations, emulate network settings, mimic Wi-Fi access points, and bypass anti-fraud filters. Criminals were using multiple GEOBOX devices as proxies to enhance anonymity during an online banking theft investigation. Attackers are believed to utilize more custom-made or modified devices in the future, creating challenges for […]