alt=A diagram illustrating the process of hacking DHCP to gain elevated privileges on Windows.

2024-03-26 1 comment

DHCP Hacked To Escalate Privileges In Windows Domains

ByBalaji: Security researchers have uncovered a sophisticated method of exploiting the Dynamic Host Configuration Protocol (DHCP) administrators group to escalate privileges within Windows domains. This technique, dubbed â€œDHCP Coerce,â€ leverages legitimate privileges to compromise entire networks potentially. The vulnerability centers around the DHCP (Dynamic Host Configuration Protocol) service, which is essential for network administration. It automates the assignment of IP addresses, simplifying the management of network connections. However, this convenience […]

Cyber security

2024-03-26 Post a Comment

Hackers poison source code from largest Discord bot platform

By Bill Toulas: The Top.gg Discord bot community with over 170,000 members has been impacted by a supply-chain attack aiming to infect developers with malware that steals sensitive information. The threat actor has been using several tactics, techniques, and procedures (TTPs) over the yearsÂ including hijacking GitHub accounts, distributing malicious Python packages, using aÂ fake Python infrastructure, and social engineering. One of the more recent victims of the attacker is Top.gg,Â a popular […]

alt= Individual wearing hoodie, seated at laptop - potential hacker.

Cyber security

2024-03-26 Post a Comment

GEPF concerned about pension fund data leak in ransomware attack

By Ernest Mabuza: Notorious cybercrime gang LockBit was behind the attempt-GEPF concerned The Government Employees Pension Fund (GEPF) said on Tuesday it was concerned that data purportedly from its administrator, the Government Pensions Administration Agency (GPAA), has been released by ransomware group LockBit. â€œThe GEPF concerned with this alleged security breach, as it was informed by GPAA that no data breach had occurred when it was notified of an attempt […]

alt=. Cutting-edge technology featuring virtual reality and artificial intelligence.

Cyber security

2024-03-26 Post a Comment

Major CPU, Software Vendors Impacted by New GhostRace Attack

By Eduard Kovacs A team of researchers from IBM and the VU Amsterdam university in the Netherlands on Tuesday disclosed the details of a new type of data leakage attack impacting all major CPU makers, as well as some widely used software.Â The new attack, dubbedÂ GhostRace, is related to what the researchers describe as speculative race conditions (SRCs). Such an attack could allow threat actors to obtain potentially sensitive information […]

alt=Android wallpaper with high definition quality, perfect for your device's background.

Cyber security

2024-03-14 Post a Comment

PixPirate Android malware uses new tactic to hide on phones

By Bill Toulas: The latest version of the PixPirate banking trojan for Android employs a new method to hide on phones while remaining active, even if its dropper app has been removed. PixPirate is a new Android malware first documented by the Cleafy TIR team last month seen targeting Latin American banks. Though Cleafy noted that a separate downloader app launches the malware, the report didn’t delve into its innovative […]