Quad7 Botnet Targets More SOHO and VPN Routers, Media Servers

Quad7 botnet is expanding its reach by targeting additional SOHO devices with custom malware for Zyxel VPN appliances, Ruckus wireless routers, and Axentra media servers, in addition to previously reported TP-Link and ASUS routers.

Cyware News – Latest Cyber News – ​Read More

SOAR Is Dead, Long Live SOAR

Business intelligence firm Gartner labels security orchestration, automation, and response as “obsolete,” but the fight to automate and simplify security operations is here to stay.

darkreading – ​Read More

PIXHELL Attack Allows Air-Gap Jumping via Noise From Screens

Noise generated by the pixels on a screen can be leveraged to exfiltrate data from air-gapped computers in what is called a PIXHELL attack.

The post PIXHELL Attack Allows Air-Gap Jumping via Noise From Screens appeared first on SecurityWeek.

SecurityWeek RSS Feed – ​Read More

Google Updates Cloud Backup, Disaster Recovery Service

The combination of immutability, indelibility, centralized governance, and user empowerment provides a comprehensive backup strategy, Google said.

darkreading – ​Read More

Chinese ‘Crimson Palace’ Espionage Campaign Keeps Hacking Southeast Asian Governments

A sophisticated trio of Chinese cyberespionage groups known as Cluster Alpha, Cluster Bravo, and Cluster Charlie are behind the Crimson Palace espionage campaign targeting government organizations in Southeast Asia.

Cyware News – Latest Cyber News – ​Read More

Siemens Issues Critical Security Advisory for User Management Component (UMC)

Siemens has issued a critical security advisory for its User Management Component (UMC), revealing a heap-based buffer overflow vulnerability (CVE-2024-33698) with a 9. 3 CVSS score.

Cyware News – Latest Cyber News – ​Read More

CosmicBeetle Upgrades Arsenal with New ScRansom Ransomware to Target SMBs

CosmicBeetle has unleashed a new ransomware called ScRansom, targeting SMBs in Europe, Asia, Africa, and South America, possibly working with RansomHub. The threat actor swapped its Scarab ransomware for ScRansom, showing ongoing enhancements.

Cyware News – Latest Cyber News – ​Read More

OpenZiti: Secure, Open-Source Networking for Your Applications

OpenZiti is an open-source networking project that embeds zero-trust principles directly into applications, offering features like strong identity, mTLS, E2EE, private DNS, and smart routing.

Cyware News – Latest Cyber News – ​Read More

Microsoft Adds Support for Post-Quantum Algorithms in SymCrypt Library

Microsoft has started introducing support for post-quantum algorithms in SymCrypt, its main cryptographic library.

The post Microsoft Adds Support for Post-Quantum Algorithms in SymCrypt Library appeared first on SecurityWeek.

SecurityWeek – ​Read More

Earth Preta Upgrades Attack Strategy via Removable Drives

The HIUPAN worm allows Earth Preta to propagate malware into networks via removable drives, maintaining persistence by modifying registry values and creating autorun entries.

Cyware News – Latest Cyber News – ​Read More