bunee - Cyber Bunee

bunee
July 24, 2023
No Comments

Google Messages to Support Message Layer Security: Breaking Down Barriers for Secure Communication

h2 Google Messages to Support Message Layer Security Google recently revealed its intention to incorporate support for Message Layer Security (MLS) into its Messages service for Android. MLS is an open-source specification that enables end-to-end encryption for messaging platforms. This move aims to expand encrypted communication capabilities beyond platform limitations. h3 Limitations of Current Messaging

bunee
July 24, 2023
No Comments

Zero-Day Vulnerabilities in Atera Software Windows Installers: Flaws Discovered and Remediation

Zero-Day Vulnerabilities in Atera Software Compromised Vulnerabilities in Windows Installers of Atera Software Zero-day vulnerabilities have been discovered in the Windows Installers for the Atera remote monitoring and management software. These vulnerabilities could potentially be exploited to launch privilege escalation attacks. Flaws Discovered by Mandiant The vulnerabilities were discovered by Mandiant on February 28, 2023.

bunee
July 24, 2023
No Comments

Details of OpenSSH Flaw Revealed: Remote Command Execution Vulnerability and Patch Availability

Details of OpenSSH Flaw Revealed Recently, details about a flaw in OpenSSH have been unveiled, which, under specific conditions, could allow attackers to remotely run arbitrary commands on compromised hosts. The vulnerability primarily affects OpenSSH’s forwarded ssh-agent. The Vulnerability The flaw was discovered by Qualys, and their analysis states that the vulnerability could enable remote

bunee
July 24, 2023
No Comments

Unveiling the First Open-Source Software Supply Chain Attacks on Banking Sector

used open-source libraries as a gateway to target banking organizations, leveraging the trust associated with them,” the researchers explained. The researchers found that the attackers compromised legitimate open-source libraries and added malicious code to them. When these libraries were used by developers in the banking sector, the malicious code would be executed, allowing the attackers

bunee
July 22, 2023
No Comments

Apple May Stop Offering iMessage and FaceTime in the U.K.: Taking a Stand Against Surveillance Powers

Apple Warns it May Stop Offering iMessage and FaceTime in the U.K. Summary: Apple has expressed its resistance to new proposals in the U.K. that aim to expand digital surveillance powers for state intelligence agencies. The company has warned that it would rather stop offering iMessage and FaceTime services in the country than comply with

bunee
July 21, 2023
No Comments

“Chinese Nation-State Actor Expands Attack on Microsoft’s Email Infrastructure: Insights and Recommendations”

h1: Chinese Nation-State Actor Expands Scope of Attack on Microsoft’s Email Infrastructure h2: Key Details – Microsoft’s email infrastructure recently targeted by a Chinese nation-state actor known as Storm-0558. – The attack has a broader scope than initially believed. – Cloud security company Wiz reveals important information about the attack. h2: Extended Scope of the

bunee
July 21, 2023
No Comments

Beware of HotRat: A Dangerous New Variant of Malware Disguised in Pirated Software

A new variant of the AsyncRAT malware has emerged, and it’s called HotRat. This malware is being spread through free, pirated versions of popular software and utilities, including video games, image and sound editing software, and Microsoft Office. HotRat is a dangerous malware as it provides attackers with various capabilities. It can steal login credentials,

bunee
July 21, 2023
No Comments

The Vulnerability of Local Governments to Ransomware Attacks: Lessons from Oakland, California

variety of possible entry points such as phishing emails, unpatched software vulnerabilities, or weak passwords. Ransomware attacks have become increasingly prevalent in recent years, with hackers targeting local governments and institutions due to their reliance on sensitive data and limited cybersecurity resources. Once the ransomware attack was discovered, Oakland officials immediately activated their emergency response

bunee
July 21, 2023
No Comments

BundleBot: The Sneaky Malware Strain Exploiting .NET for Stealthy Data Theft

BundleBot: The Sneaky Malware Strain Exploiting .NET Introduction A new malware strain called BundleBot has emerged, cleverly using .NET single-file deployment techniques to fly under the radar and steal sensitive information from compromised hosts. By taking advantage of the dotnet bundle (single-file), self-contained format, threat actors have found a way to avoid detection and carry

bunee
July 21, 2023
No Comments

Multiple DDoS Botnets Targeting ISPs and Hosting Providers Exploit Critical Zyxel Vulnerability: Threat Intelligence Report

and Europe,” write researchers from cybersecurity firm Radware, adding that the botnets are primarily targeting internet service providers (ISPs) and hosting providers. The vulnerability in question, tracked as CVE-2023-9055, affects Zyxel’s network-attached storage (NAS) and firewall products, allowing attackers to execute arbitrary code on targeted devices. The attackers have been leveraging this vulnerability to compromise

Author: bunee