Cyber – Page 19 – Welcome to APS Law

Jun

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

June 19, 2025adminuserCyber

Cybersecurity researchers have uncovered two local privilege escalation (LPE) flaws that could be exploited to gain root privileges on machines running major Linux distributions. The vulnerabilities, discovered by Qualys, are listed below – CVE-2025-6018 – LPE from unprivileged to allow_active in SUSE 15’s Pluggable Authentication Modules (PAM) CVE-2025-6019 – LPE from allow_active to root in

Jun

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

June 18, 2025adminuserCyber

A new campaign is making use of Cloudflare Tunnel subdomains to host malicious payloads and deliver them via malicious attachments embedded in phishing emails. The ongoing campaign has been codenamed SERPENTINE#CLOUD by Securonix. It leverages “the Cloudflare Tunnel infrastructure and Python-based loaders to deliver memory-injected payloads through a chain of shortcut files and obfuscated

Jun

1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub

June 18, 2025adminuserCyber

A new multi-stage malware campaign is targeting Minecraft users with a Java-based malware that employs a distribution-as-service (DaaS) offering called Stargazers Ghost Network. “The campaigns resulted in a multi-stage attack chain targeting Minecraft users specifically,” Check Point researchers Jaromír Hořejší and Antonis Terefos said in a report shared with The Hacker News. “The malware was

Jun

FedRAMP at Startup Speed: Lessons Learned

June 18, 2025adminuserCyber

For organizations eyeing the federal market, FedRAMP can feel like a gated fortress. With strict compliance requirements and a notoriously long runway, many companies assume the path to authorization is reserved for the well-resourced enterprise. But that’s changing. In this post, we break down how fast-moving startups can realistically achieve FedRAMP Moderate authorization without derailing

Jun

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

June 18, 2025adminuserCyber

Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware. “The malware enables data exfiltration (including credentials, browser data, and session tokens), remote access, and long-term persistence on infected systems,” Trend Micro researchers Jovit Samaniego, Aira Marcelo, Mohamed

Jun

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

June 10, 2025adminuserCyber

Cybersecurity researchers have shed light on a previously undocumented Rust-based information stealer called Myth Stealer that’s being propagated via fraudulent gaming websites. “Upon execution, the malware displays a fake window to appear legitimate while simultaneously decrypting and executing malicious code in the background,” Trellix security researchers Niranjan Hegde, Vasantha Lakshmanan

Jun

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

June 10, 2025adminuserCyber

Modern enterprise networks are highly complex environments that rely on hundreds of apps and infrastructure services. These systems need to interact securely and efficiently without constant human oversight, which is where non-human identities (NHIs) come in. NHIs — including application secrets, API keys, service accounts, and OAuth tokens — have exploded in recent years, thanks...

Jun

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

June 10, 2025adminuserCyber

Google has stepped in to address a security flaw that could have made it possible to brute-force an account’s recovery phone number, potentially exposing them to privacy and security risks. The issue, according to Singaporean security researcher “brutecat,” leverages an issue in the company’s account recovery feature. That said, exploiting the vulnerability hinges on several...

Jun

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises

June 10, 2025adminuserCyber

The threat actor known as Rare Werewolf (formerly Rare Wolf) has been linked to a series of cyber attacks targeting Russia and the Commonwealth of Independent States (CIS) countries. “A distinctive feature of this threat is that the attackers favor using legitimate third-party software over developing their own malicious binaries,” Kaspersky said. “The malicious functionality...

Jun

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

June 10, 2025adminuserCyber

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added two critical security flaws impacting Erlang/Open Telecom Platform (OTP) SSH and Roundcube to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities in question are listed below – CVE-2025-32433 (CVSS score: 10.0) – A missing authentication for a critical

1 … 17 18 19 20 21 … 215

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub

FedRAMP at Startup Speed: Lessons Learned

Water Curse Employs 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

Recent Posts

Recent Comments

Archives

Categories

Meta

Category

Recent Posts

Recent Comments

Archives

Categories

Meta