Today Cyber News

15/02/2025

- Another blow to cybercrime! Amsterdam police seize servers belonging to ZServers/XHost, a bulletproof hosting service.

The Dutch Police (Politie) have dismantled the bulletproof hosting operation ZServers/XHost, taking offline 127 servers used by the illegal platform.

Recently, the U.S. Treasury Department imposed sanctions on the Russian hosting provider ZServers for allegedly supporting the LockBit ransomware gang. Following these accusations, the Dutch police seized 127 servers, which, according to investigators, contained hacking tools linked to LockBit and Conti.

🔗 U.S. Treasury Announcement - https://home.treasury.gov/news/press-releases/sb0018

🔗 Dutch Police Statement - https://www.politie.nl/nieuws/2025/februari/13/politie-amsterdam-ontmantelt-digitaal-crimineel-netwerk-127-servers-offline-gehaald.html



🗞️ Today Cyber News - By clicking the Follow button, you start getting daily cyber news updates.

02/02/2025

Prison booking documents have been leaked of the infamous hacker USDoD.

USDoD was most known for leaking the NPD database as well as infiltrating the FBI's Infra guard portal.

Join Telegram - https://t.me/Today_Cyber_News

🗞️ Today Cyber News - By clicking the Follow button, you start getting daily cyber news updates.

17/10/2024

A Ukrainian hacker responsible for over UAH 3 billion in damages across Europe and North America is set to stand trial in Ukraine.

The 49-year-old from Kyiv, part of a cybercrime group, attacked companies in France, Germany, the US, Norway, and more, hacking accounts, stealing data, and demanding ransoms in cryptocurrency.

One Norwegian company alone faced €8.9M in damages after 4,000 systems were encrypted with a 2,500 BTC ransom demand.

He now faces up to 12 years in prison with property confiscation.

16/08/2024

👾 AWS Hacked : Error In Configuration Affects 110,000 Domains

ENV file vulnerabilities resulted in massive exploitation. Over 110,000 domains have been affected by a significant ransomware campaign

Read this Detailed article on the issue https://hackingblogs.com/aws-hacked-error-in-configuration-affects-110000-domains/

ENV file vulnerabilities resulted in massive exploitation. Over 110,000 domains have been affected by a significant ransomware campaign that Palo Alto

10/08/2024

⚠️ Map Account Hijack: An Indepth Guide to New attack for Android and iOS Not patched.

- This results in the successful hijacking of accounts on services that require SMS OTPs for recovery or login.

The attack is effective on the most recent versions of both Android and iOS smartphones (Samsung, Google Pixel, iPhone), and the tool is highly useful for red teaming, pe*******on testing, bug bounty hunting, and security research.

Read This Indepth Article ASAP 👉🏻

In A NutShell: A tool to take benefit of the MAP Account hijack attack over Bluetooth Classic is called mapAccountHijack.

28/04/2024

🙁 5.5 million hacking attempts: WP Automatic plugin became a burden for 30,000 WordPress sites

Cybercriminals began to exploit a critical vulnerability in the WP Automatic plugin for👩‍💻 WordPress .

This allows you to create accounts with administrative privileges and install backdoors for long-term access.

Installed on over 30,000 sites, the WP Automatic plugin allows administrators to automate the import of content from various sources for publishing on a WordPress site.

Vulnerability💉 SQL injection CVE-2024-27956 Affects WP Automatic versions prior to 3.9.2.0 . The bug was made public on March 13 by researchers at PatchStack .

09/02/2024

⚠️ Akira, LockBit actively searching for vulnerable Cisco ASA devices.

Akira and Lockbit ransomware groups are trying to breach Cisco ASA SSL VPN devices by exploiting several older vulnerabilities, security researcher Kevin Beaumont is warning.

31/01/2024

⚠️ Interview with Hacker behind the Massive Indonesia Railway Data Breach: User Data on the Risk!

https://todaycybernews.com/index.php/2024/01/31/breaking-exclusive-interview-with-notorious-hacker-behind-pt-kereta-breach-millions-of-users-data-at-risk/

Interview with Hacker behind the Massive Indonesia Railway Data Breach: User Data on the Risk!By Today Cyber News / January 31, 2024 Big trouble in Jakarta! The mighty railway company, Kereta Api Indonesia (KAI), has been attacked by a notorious hacking group called STROMOUS.We attempted to reach ou...

26/01/2024

Microsoft Teams outage causes connection issues, message delays: Microsoft is investigating an ongoing and widespread outage impacting the users of its Teams communication platform and causing connectivity issues, login problems, and message delays.

26/01/2024

☠ Australian Man Arrested for Money Laundering in Historic Dark Web Drug Bust.

NSW Police Seize $1 Million in Bitcoin and Luxury Items, Uncover Dark Web Drug Network

Read More
https://todaycybernews.com/index.php/2024/01/26/australian-man-arrested-for-money-laundering-in-historic-dark-web-drug-bust/

Australian Man Arrested for Money Laundering in Historic Dark Web Drug Bust.By teamhash.in / January 26, 2024 New South Wales Police Seize $1 Million in Bitcoin and Luxury Items, Uncover Dark Web Drug Network In a landmark operation, an Australian man has been apprehended by the New South Wales poli...

18/01/2024

🌟Load Balancer Takeover🌟

Step 1: Identify .trafficmanager.net subdomains. 🕵️‍♂️

Step 2: Use your Azure subscription to access the Traffic Manager profile. 🌐

Step 3: Create a resource with the vulnerable *.trafficmanager.net cname. 🛠️

Step 4: Add an endpoint for redirection to your desired site. 🔄

14/01/2024

Authorization Bypass vulnerability in POST SMTP Mailer, a WordPress plugin with over 300,000+ active installations

PoC: https://github.com/UlyssesSaicha/CVE-2023-6875
Blog: https://www.wordfence.com/blog/2024/01/type-juggling-leads-to-two-vulnerabilities-in-post-smtp-mailer-wordpress-plugin/
Security Advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-6875