# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2923985846803797804
title: Indian National Gets 20-Year Jail in United States for Running Scam Call Centers
uri: Indian-National-Gets-20-Year-Jail-in-United-States-for-Running-Scam-Ca
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2923985846803797804
content:
An Indian national on Monday was sentenced to 20 years in prison in the Southern District of Texas for operating and funding India-based call centers that defrauded US victims out of millions of dollars between 2013 and 2016.
Hitesh Madhubhai Patel (aka Hitesh Hinglaj), who hails from the city of Ahmedabad, India, was sentenced in connection with charges of fraud and money laundering.
He was <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M7AAshaYrco:jrwr_rHZcSs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M7AAshaYrco:jrwr_rHZcSs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M7AAshaYrco:jrwr_rHZcSs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M7AAshaYrco:jrwr_rHZcSs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M7AAshaYrco:jrwr_rHZcSs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M7AAshaYrco:jrwr_rHZcSs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M7AAshaYrco:jrwr_rHZcSs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M7AAshaYrco:jrwr_rHZcSs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4905693799289465807
title: Nation-State Hackers Caught Hiding Espionage Activities Behind Crypto Miners
uri: Nation-State-Hackers-Caught-Hiding-Espionage-Activities-Behind-Crypto
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4905693799289465807
content:
A nation-state actor known for its cyber espionage campaigns since 2012 is now using coin miner techniques to stay under the radar and establish persistence on victim systems, according to new research.
Attributing the shift to a threat actor tracked as Bismuth, Microsoft's Microsoft 365 Defender Threat Intelligence Team said the group deployed Monero coin miners in attacks that targeted both <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZL0J-vWqY:36O_UmffbPk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZL0J-vWqY:36O_UmffbPk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZL0J-vWqY:36O_UmffbPk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pnZL0J-vWqY:36O_UmffbPk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZL0J-vWqY:36O_UmffbPk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pnZL0J-vWqY:36O_UmffbPk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZL0J-vWqY:36O_UmffbPk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pnZL0J-vWqY:36O_UmffbPk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1553707543420752380
title: 4 Free Online Cyber Security Testing Tools For 2021
uri: 4-Free-Online-Cyber-Security-Testing-Tools-For-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1553707543420752380
content:
Set of must-have online security tools that we believe may make a real difference to your cybersecurity program and improve your 2021 budget planning.
In September, Gartner published a list of "Top 9 Security and Risk Trends for 2020" putting a bold emphasis on the growing complexity and size of the modern threat landscape.
Incomplete visibility of external Attack surfaces led to the dramatic <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lQEO1myvLvY:nqCaIelqy8M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lQEO1myvLvY:nqCaIelqy8M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lQEO1myvLvY:nqCaIelqy8M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lQEO1myvLvY:nqCaIelqy8M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lQEO1myvLvY:nqCaIelqy8M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lQEO1myvLvY:nqCaIelqy8M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lQEO1myvLvY:nqCaIelqy8M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lQEO1myvLvY:nqCaIelqy8M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2468717057368059472
title: Incomplete 'Go SMS Pro' Patch Left Millions of Users' Data Still Exposed Online
uri: Incomplete-Go-SMS-Pro-Patch-Left-Millions-of-Users-Data-Still-Expos
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2468717057368059472
content:
A week after cybersecurity researchers disclosed a flaw in the popular GO SMS Pro messaging app, it appears the developers of the app are silently taking steps to fix the issue from behind the scenes.
The security misstep made it possible for an attacker to come up with a trivial script to access media files transferred between users, including private voice messages, photos, and videos, stored <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hf8yidoHT8:G5ReY_DUu2k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hf8yidoHT8:G5ReY_DUu2k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hf8yidoHT8:G5ReY_DUu2k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6hf8yidoHT8:G5ReY_DUu2k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hf8yidoHT8:G5ReY_DUu2k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6hf8yidoHT8:G5ReY_DUu2k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6hf8yidoHT8:G5ReY_DUu2k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6hf8yidoHT8:G5ReY_DUu2k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3944036778268960204
title: Google Hacker Details Zero-Click 'Wormable' Wi-Fi Exploit to Hack iPhones
uri: Google-Hacker-Details-Zero-Click-Wormable-Wi-Fi-Exploit-to-Hack-iPho
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3944036778268960204
content:
Google Project Zero whitehat hacker Ian Beer on Tuesday disclosed details of a now-patched critical "wormable" iOS bug that could have made it possible for a remote attacker to gain complete control of any device in the vicinity over Wi-Fi.
The exploit makes it possible to "view all the photos, read all the email, copy all the private messages and monitor everything which happens on [the device]<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Hq84swpKneM:KmIwdb4Xgbs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Hq84swpKneM:KmIwdb4Xgbs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Hq84swpKneM:KmIwdb4Xgbs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Hq84swpKneM:KmIwdb4Xgbs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Hq84swpKneM:KmIwdb4Xgbs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Hq84swpKneM:KmIwdb4Xgbs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Hq84swpKneM:KmIwdb4Xgbs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Hq84swpKneM:KmIwdb4Xgbs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-284278106405258498
title: CISO with a small security team? Learn from your peers' experience with this free e-book
uri: CISO-with-a-small-security-team-Learn-from-your-peers-experience-wit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/284278106405258498
content:
CISOs with small security teams hold an intensive juggling act. They're responsible for sustaining the company's security resilience, ensuring compliance is adhered to and implementing privacy controls.
In between these tasks, they need to follow up on board updates, lead cross-team communications and collaboration, and fight fires that may or may not be related to cybersecurity.
All the while, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PuQ9smlfwbU:0HTDjwXtYxs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PuQ9smlfwbU:0HTDjwXtYxs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PuQ9smlfwbU:0HTDjwXtYxs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PuQ9smlfwbU:0HTDjwXtYxs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PuQ9smlfwbU:0HTDjwXtYxs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PuQ9smlfwbU:0HTDjwXtYxs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PuQ9smlfwbU:0HTDjwXtYxs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PuQ9smlfwbU:0HTDjwXtYxs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5712169227072352399
title: Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOW
uri: Multiple-Botnets-Exploiting-Critical-Oracle-WebLogic-Bug-PATCH-NOW
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5712169227072352399
content:
Multiple botnets are targeting thousands of publicly exposed and still unpatched Oracle WebLogic servers to deploy crypto miners and steal sensitive information from infected systems.
The attacks are taking aim at a recently patched WebLogic Server vulnerability, which was released by Oracle as part of its October 2020 Critical Patch Update and subsequently again in November (CVE-2020-14750) in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuP_90AR8jM:0tr4ou6TG34:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuP_90AR8jM:0tr4ou6TG34:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuP_90AR8jM:0tr4ou6TG34:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KuP_90AR8jM:0tr4ou6TG34:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuP_90AR8jM:0tr4ou6TG34:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KuP_90AR8jM:0tr4ou6TG34:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuP_90AR8jM:0tr4ou6TG34:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KuP_90AR8jM:0tr4ou6TG34:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-837606397439815709
title: Experts Uncover 'Crutch' Russian Malware Used in APT Attacks for 5 Years
uri: Experts-Uncover-Crutch-Russian-Malware-Used-in-APT-Attacks-for-5-Yea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/837606397439815709
content:
Cybersecurity researchers today took the wraps off a previously undocumented backdoor and document stealer that has been deployed against specific targets from 2015 to early 2020.
Codenamed "Crutch" by ESET researchers, the malware has been attributed to Turla (aka Venomous Bear or Snake), a Russia-based advanced hacker group known for its extensive attacks against governments, embassies, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hUD7tEsaaWw:NVCzfWaqJf8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hUD7tEsaaWw:NVCzfWaqJf8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hUD7tEsaaWw:NVCzfWaqJf8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hUD7tEsaaWw:NVCzfWaqJf8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hUD7tEsaaWw:NVCzfWaqJf8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hUD7tEsaaWw:NVCzfWaqJf8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hUD7tEsaaWw:NVCzfWaqJf8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hUD7tEsaaWw:NVCzfWaqJf8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4849700571003934146
title: TrickBot Malware Gets UEFI/BIOS Bootkit Feature to Remain Undetected
uri: TrickBot-Malware-Gets-UEFI-BIOS-Bootkit-Feature-to-Remain-Undetected
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4849700571003934146
content:
TrickBot, one of the most notorious and adaptable malware botnets in the world, is expanding its toolset to set its sights on firmware vulnerabilities to potentially deploy bootkits and take complete control of an infected system.
The new functionality, dubbed "TrickBoot" by Advanced Intelligence (AdvIntel) and Eclypsium, makes use of readily available tools to check devices for well-known <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RyfPYll9M_k:4dOouy6dY6E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RyfPYll9M_k:4dOouy6dY6E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RyfPYll9M_k:4dOouy6dY6E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RyfPYll9M_k:4dOouy6dY6E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RyfPYll9M_k:4dOouy6dY6E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RyfPYll9M_k:4dOouy6dY6E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RyfPYll9M_k:4dOouy6dY6E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RyfPYll9M_k:4dOouy6dY6E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1896891640815449632
title: Several Unpatched Popular Android Apps Put Millions of Users at Risk of Hacking
uri: Several-Unpatched-Popular-Android-Apps-Put-Millions-of-Users-at-Risk-o
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1896891640815449632
content:
A number of high-profile Android apps are still using an unpatched version of Google's widely-used app update library, potentially putting the personal data of hundreds of millions of smartphone users at risk of hacking.
Many popular apps, including Grindr, Bumble, OkCupid, Cisco Teams, Moovit, Yango Pro, Microsoft Edge, Xrecorder, and PowerDirector, are still vulnerable and can be hijacked to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gQSfQkAvDxc:AyNaXhw4qQw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gQSfQkAvDxc:AyNaXhw4qQw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gQSfQkAvDxc:AyNaXhw4qQw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gQSfQkAvDxc:AyNaXhw4qQw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gQSfQkAvDxc:AyNaXhw4qQw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gQSfQkAvDxc:AyNaXhw4qQw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gQSfQkAvDxc:AyNaXhw4qQw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gQSfQkAvDxc:AyNaXhw4qQw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4949430362400139348
title: How Organizations Can Prevent Users from Using Breached Passwords
uri: How-Organizations-Can-Prevent-Users-from-Using-Breached-Passwords
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4949430362400139348
content:
There is no question that attackers are going after your sensitive account data. Passwords have long been a target of those looking to compromise your environment.
Why would an attacker take the long, complicated way if they have the keys to the front door?
No matter how extensive your security solutions are, protecting the various systems in your environment, your organization may likely be an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aLxdq_Y3IwY:dV91couF2XE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aLxdq_Y3IwY:dV91couF2XE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aLxdq_Y3IwY:dV91couF2XE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aLxdq_Y3IwY:dV91couF2XE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aLxdq_Y3IwY:dV91couF2XE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aLxdq_Y3IwY:dV91couF2XE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aLxdq_Y3IwY:dV91couF2XE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aLxdq_Y3IwY:dV91couF2XE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-900939241841185319
title: Hackers-For-Hire Group Develops New 'PowerPepper' In-Memory Malware
uri: Hackers-For-Hire-Group-Develops-New-PowerPepper-In-Memory-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/900939241841185319
content:
Cybersecurity researchers on Thursday disclosed details of a previously undiscovered in-memory Windows backdoor developed by a hacker-for-hire operation that can execute remotely malicious code and steal sensitive information from its targets in Asia, Europe, and the US.
Dubbed "PowerPepper" by Kaspersky researchers, the malware has been attributed to the DeathStalker group (formerly called <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2sKwGpqr3Ho:-x8kPlYYkBc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2sKwGpqr3Ho:-x8kPlYYkBc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2sKwGpqr3Ho:-x8kPlYYkBc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2sKwGpqr3Ho:-x8kPlYYkBc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2sKwGpqr3Ho:-x8kPlYYkBc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2sKwGpqr3Ho:-x8kPlYYkBc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2sKwGpqr3Ho:-x8kPlYYkBc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2sKwGpqr3Ho:-x8kPlYYkBc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1787225858441768534
title: Hackers Targeting Companies Involved in Covid-19 Vaccine Distribution
uri: Hackers-Targeting-Companies-Involved-in-Covid-19-Vaccine-Distribution
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1787225858441768534
content:
A global spear-phishing campaign has been targeting organizations associated with the distribution of COVID-19 vaccines since September 2020, according to new research.
Attributing the operation to a nation-state actor, IBM Security X-Force researchers said the attacks took aim at the vaccine cold chain, companies responsible for storing and delivering the COVID-19 vaccine at safe temperatures.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7xCkZ72G-xE:1ecFKO3CUJI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7xCkZ72G-xE:1ecFKO3CUJI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7xCkZ72G-xE:1ecFKO3CUJI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7xCkZ72G-xE:1ecFKO3CUJI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7xCkZ72G-xE:1ecFKO3CUJI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7xCkZ72G-xE:1ecFKO3CUJI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7xCkZ72G-xE:1ecFKO3CUJI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7xCkZ72G-xE:1ecFKO3CUJI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7343621198025870204
title: Payment Card Skimmer Group Using Raccoon Info-Stealer to Siphon Off Data
uri: Payment-Card-Skimmer-Group-Using-Raccoon-Info-Stealer-to-Siphon-Off-Da
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7343621198025870204
content:
A cybercrime group known for targeting e-commerce websites unleashed a "multi-stage malicious campaign" earlier this year designed with an intent to distribute information stealers and JavaScript-based payment skimmers.
In a new report published today and shared with The Hacker News, Singapore-based cybersecurity firm Group-IB attributed the operation to the same group that's been linked to a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4mYQ76sv48:sJwWebotwrU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4mYQ76sv48:sJwWebotwrU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4mYQ76sv48:sJwWebotwrU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X4mYQ76sv48:sJwWebotwrU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4mYQ76sv48:sJwWebotwrU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X4mYQ76sv48:sJwWebotwrU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4mYQ76sv48:sJwWebotwrU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X4mYQ76sv48:sJwWebotwrU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3620455217444146440
title: How DMARC Can Stop Criminals Sending Fake Emails on Behalf of Your Domain
uri: How-DMARC-Can-Stop-Criminals-Sending-Fake-Emails-on-Behalf-of-Your-Dom
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3620455217444146440
content:
21st-century technology has allowed Cybercriminals to use sophisticated and undetectable methods for malicious activities.
In 2020 alone, a survey revealed that 65% of US-based companies were vulnerable to email phishing and impersonation attacks. This calls for upgrading your organization's security with DMARC, which if not implemented, will enable cyber-attackers to:

Instigate money transfers<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dbOpSiQXnTE:MZPMyIWulNU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dbOpSiQXnTE:MZPMyIWulNU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dbOpSiQXnTE:MZPMyIWulNU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dbOpSiQXnTE:MZPMyIWulNU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dbOpSiQXnTE:MZPMyIWulNU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dbOpSiQXnTE:MZPMyIWulNU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dbOpSiQXnTE:MZPMyIWulNU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dbOpSiQXnTE:MZPMyIWulNU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5812769695279885202
title: Iranian RANA Android Malware Also Spies On Instant Messengers
uri: Iranian-RANA-Android-Malware-Also-Spies-On-Instant-Messengers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5812769695279885202
content:
A team of researchers today unveiled previously undisclosed capabilities of an Android spyware implant—developed by a sanctioned Iranian threat actor—that could let attackers spy on private chats from popular instant messaging apps, force Wi-Fi connections, and auto-answer calls from specific numbers for purposes of eavesdropping on conversations.
In September, the US Department of the Treasury <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wzY33uhZXs4:YE3ezgfG8E0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wzY33uhZXs4:YE3ezgfG8E0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wzY33uhZXs4:YE3ezgfG8E0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wzY33uhZXs4:YE3ezgfG8E0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wzY33uhZXs4:YE3ezgfG8E0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wzY33uhZXs4:YE3ezgfG8E0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wzY33uhZXs4:YE3ezgfG8E0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wzY33uhZXs4:YE3ezgfG8E0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1797396028157720118
title: Zero-Click Wormable RCE Vulnerability Reported in Microsoft Teams
uri: Zero-Click-Wormable-RCE-Vulnerability-Reported-in-Microsoft-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1797396028157720118
content:
A zero-click remote code execution (RCE) bug in Microsoft Teams desktop apps could have allowed an adversary to execute arbitrary code by merely sending a specially-crafted chat message and compromise a target's system.
The issues were reported to the Windows maker by Oskars Vegeris, a security engineer from Evolution Gaming, on August 31, 2020, before they were addressed at the end of October.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ff5kgbod0XI:h0Xsa2PaKGg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ff5kgbod0XI:h0Xsa2PaKGg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ff5kgbod0XI:h0Xsa2PaKGg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ff5kgbod0XI:h0Xsa2PaKGg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ff5kgbod0XI:h0Xsa2PaKGg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ff5kgbod0XI:h0Xsa2PaKGg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ff5kgbod0XI:h0Xsa2PaKGg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ff5kgbod0XI:h0Xsa2PaKGg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-19414825906384339
title: NSA Warns Russian Hacker Exploiting VMware Bug to Breach Corporate Networks
uri: NSA-Warns-Russian-Hacker-Exploiting-VMware-Bug-to-Breach-Corporate-Net
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/19414825906384339
content:
The US National Security Agency (NSA) on Monday issued an advisory warning that Russian threat actors are leveraging recently disclosed VMware vulnerability to install malware on corporate systems and access protected data.
Specifics regarding the identities of the threat actor exploiting the VMware flaw or when these attacks started were not disclosed.
The development comes two weeks after the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DkNsnev6_zo:XFlRkuE3hlE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DkNsnev6_zo:XFlRkuE3hlE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DkNsnev6_zo:XFlRkuE3hlE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DkNsnev6_zo:XFlRkuE3hlE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DkNsnev6_zo:XFlRkuE3hlE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DkNsnev6_zo:XFlRkuE3hlE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DkNsnev6_zo:XFlRkuE3hlE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DkNsnev6_zo:XFlRkuE3hlE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6756608514314504959
title: Download: How XDR Platforms Are Changing The Game For Ransomware Protection
uri: Download-How-XDR-Platforms-Are-Changing-The-Game-For-Ransomware-Prote
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6756608514314504959
content:
There seems to be a new ransomware story every day - a new ransomware attack, a new ransomware technique, criminals not providing encryption keys after receiving ransom payments, private data being publicly released by ransomware attackers—it never ends.
Just last month, the FBI, the Department of Health and Human Services (HHS), and the Cybersecurity and Infrastructure Security Agency (CISA) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gwz3wxvrrFA:YlqklAOFJV0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gwz3wxvrrFA:YlqklAOFJV0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gwz3wxvrrFA:YlqklAOFJV0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gwz3wxvrrFA:YlqklAOFJV0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gwz3wxvrrFA:YlqklAOFJV0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gwz3wxvrrFA:YlqklAOFJV0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gwz3wxvrrFA:YlqklAOFJV0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gwz3wxvrrFA:YlqklAOFJV0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1516649107507575482
title: WARNING — Critical Remote Hacking Flaws Affect D-Link VPN Routers
uri: WARNING-Critical-Remote-Hacking-Flaws-Affect-D-Link-VPN-Routers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1516649107507575482
content:
Some widely sold D-Link VPN router models have been found vulnerable to three new high-risk security vulnerabilities, leaving millions of home and business networks open to cyberattacks—even if they are secured with a strong password.
Discovered by researchers at Digital Defense, the three security shortcomings were responsibly disclosed to D-Link on August 11, which, if exploited, could allow <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bshJGigA-a0:QS1K2g55XHI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bshJGigA-a0:QS1K2g55XHI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bshJGigA-a0:QS1K2g55XHI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bshJGigA-a0:QS1K2g55XHI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bshJGigA-a0:QS1K2g55XHI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bshJGigA-a0:QS1K2g55XHI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bshJGigA-a0:QS1K2g55XHI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bshJGigA-a0:QS1K2g55XHI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2866196426076750464
title: Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws
uri: Microsoft-Releases-Windows-Update-(Dec-2020)-to-Fix-58-Security-Flaws
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2866196426076750464
content:
Microsoft on Tuesday released fixes for 58 newly discovered security flaws spanning as many as 11 products and services as part of its final Patch Tuesday of 2020, effectively bringing their CVE total to 1,250 for the year.
Of these 58 patches, nine are rated as Critical, 46 are rated as Important, and three are rated Moderate in severity.
The December security release addresses issues in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cvwVBRhcrYs:wQnwGxUuYu4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cvwVBRhcrYs:wQnwGxUuYu4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cvwVBRhcrYs:wQnwGxUuYu4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cvwVBRhcrYs:wQnwGxUuYu4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cvwVBRhcrYs:wQnwGxUuYu4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cvwVBRhcrYs:wQnwGxUuYu4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cvwVBRhcrYs:wQnwGxUuYu4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cvwVBRhcrYs:wQnwGxUuYu4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1623829703457069093
title: Amnesia:33 — Critical TCP/IP Flaws Affect Millions of IoT Devices
uri: Amnesia-33-Critical-TCP-IP-Flaws-Affect-Millions-of-IoT-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1623829703457069093
content:
Cybersecurity researchers disclosed a dozen new flaws in multiple widely-used embedded TCP/IP stacks impacting millions of devices ranging from networking equipment and medical devices to industrial control systems that could be exploited by an attacker to take control of a vulnerable system.
Collectively called "AMNESIA:33" by Forescout researchers, it is a set of 33 vulnerabilities that impact<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mWCnKpBPpuQ:dhD6YLxJSVM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mWCnKpBPpuQ:dhD6YLxJSVM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mWCnKpBPpuQ:dhD6YLxJSVM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mWCnKpBPpuQ:dhD6YLxJSVM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mWCnKpBPpuQ:dhD6YLxJSVM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mWCnKpBPpuQ:dhD6YLxJSVM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mWCnKpBPpuQ:dhD6YLxJSVM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mWCnKpBPpuQ:dhD6YLxJSVM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1131635200445883851
title: Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen
uri: Cybersecurity-Firm-FireEye-Got-Hacked-Red-Team-Pentest-Tools-Stolen
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1131635200445883851
content:
FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor" that stole its arsenal of Red Team penetration testing tools it uses to test the defenses of its customers.
The company said it's actively investigating the breach in coordination with the US Federal Bureau of Investigation (FBI) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mbfo-2_7GvA:HDETNhtfHI4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mbfo-2_7GvA:HDETNhtfHI4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mbfo-2_7GvA:HDETNhtfHI4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mbfo-2_7GvA:HDETNhtfHI4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mbfo-2_7GvA:HDETNhtfHI4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mbfo-2_7GvA:HDETNhtfHI4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mbfo-2_7GvA:HDETNhtfHI4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mbfo-2_7GvA:HDETNhtfHI4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4421274613323289675
title: Russian APT28 Hackers Using COVID-19 as Bait to Deliver Zebrocy Malware
uri: Russian-APT28-Hackers-Using-COVID-19-as-Bait-to-Deliver-Zebrocy-Malwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4421274613323289675
content:
A Russian threat actor known for its malware campaigns has reappeared in the threat landscape with yet another attack leveraging COVID-19 as phishing lures, once again indicating how adversaries are adept at repurposing the current world events to their advantage.
Linking the operation to a sub-group of APT28 (aka Sofacy, Sednit, Fancy Bear, or STRONTIUM), cybersecurity firm Intezer said the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m3ppxlyl_Xk:KWSUhCKvXyg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m3ppxlyl_Xk:KWSUhCKvXyg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m3ppxlyl_Xk:KWSUhCKvXyg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m3ppxlyl_Xk:KWSUhCKvXyg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m3ppxlyl_Xk:KWSUhCKvXyg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m3ppxlyl_Xk:KWSUhCKvXyg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m3ppxlyl_Xk:KWSUhCKvXyg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m3ppxlyl_Xk:KWSUhCKvXyg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2349393118916909082
title: AWS, Cisco, and CompTIA Exam Prep — Get 22 Courses for $4.50 Each
uri: AWS-Cisco-and-CompTIA-Exam-Prep-Get-22-Courses-for-4-50-Each
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2349393118916909082
content:
You don't need a college degree to get a well-paid job in IT. But technical recruiters do expect to see key certifications on your résumé. 
If you would like to improve your chances of getting hired, "The 2021 All-In-One AWS, Cisco &amp; CompTIA Super Certification Bundle" is worth your attention.
This mammoth collection of courses helps you prepare for a long list of certification exams, including <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kP4aFBlnqM:gNfSGxYfxJU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kP4aFBlnqM:gNfSGxYfxJU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kP4aFBlnqM:gNfSGxYfxJU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0kP4aFBlnqM:gNfSGxYfxJU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kP4aFBlnqM:gNfSGxYfxJU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0kP4aFBlnqM:gNfSGxYfxJU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kP4aFBlnqM:gNfSGxYfxJU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0kP4aFBlnqM:gNfSGxYfxJU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5045241188767397055
title: 48 U.S. States and FTC are suing Facebook for illegal monopolization
uri: 48-U-S-States-and-FTC-are-suing-Facebook-for-illegal-monopolization
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5045241188767397055
content:
The US Federal Trade Commission and a coalition of 48 state attorneys general on Wednesday filed a pair of sweeping antitrust suits against Facebook, alleging that the company abused its power in the marketplace to neutralize competitors through its acquisitions of Instagram and WhatsApp and depriving users of better privacy-friendly alternatives.
"Facebook has engaged in a systematic strategy —<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WDre_aZ6Oug:d8JzDDxB7rc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WDre_aZ6Oug:d8JzDDxB7rc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WDre_aZ6Oug:d8JzDDxB7rc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WDre_aZ6Oug:d8JzDDxB7rc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WDre_aZ6Oug:d8JzDDxB7rc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WDre_aZ6Oug:d8JzDDxB7rc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WDre_aZ6Oug:d8JzDDxB7rc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WDre_aZ6Oug:d8JzDDxB7rc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1327989219993604037
title: Valve's Steam Server Bugs Could've Let Hackers Hijack Online Games
uri: Valve-s-Steam-Server-Bugs-Could-ve-Let-Hackers-Hijack-Online-Games
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1327989219993604037
content:
Critical flaws in a core networking library powering Valve's online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected 3rd-party game servers.
"An attacker could remotely crash an opponent's game client to force a win or even perform a 'nuclear rage quit' and crash the Valve game server to end the game completely," Check Point <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4kK_gwHMOY:fhVm7vBS76s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4kK_gwHMOY:fhVm7vBS76s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4kK_gwHMOY:fhVm7vBS76s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-4kK_gwHMOY:fhVm7vBS76s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4kK_gwHMOY:fhVm7vBS76s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-4kK_gwHMOY:fhVm7vBS76s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4kK_gwHMOY:fhVm7vBS76s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-4kK_gwHMOY:fhVm7vBS76s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8712112033760956821
title: Cisco Reissues Patches for Critical Bugs in Jabber Video Conferencing Software
uri: Cisco-Reissues-Patches-for-Critical-Bugs-in-Jabber-Video-Conferencing
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8712112033760956821
content:
Cisco has once again fixed four previously disclosed critical bugs in its Jabber video conferencing and messaging app that were inadequately addressed, leaving its users susceptible to remote attacks.
The vulnerabilities, if successfully exploited, could allow an authenticated, remote attacker to execute arbitrary code on target systems by sending specially-crafted chat messages in group <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1irufcaE908:7W1QpQJJFa8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1irufcaE908:7W1QpQJJFa8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1irufcaE908:7W1QpQJJFa8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1irufcaE908:7W1QpQJJFa8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1irufcaE908:7W1QpQJJFa8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1irufcaE908:7W1QpQJJFa8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1irufcaE908:7W1QpQJJFa8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1irufcaE908:7W1QpQJJFa8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1682901157675001594
title: Facebook Tracks APT32 OceanLotus Hackers to IT Company in Vietnam
uri: Facebook-Tracks-APT32-OceanLotus-Hackers-to-IT-Company-in-Vietnam
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1682901157675001594
content:
Cybersecurity researchers from Facebook today formally linked the activities of a Vietnamese threat actor to an IT company in the country after the group was caught abusing its platform to hack into people's accounts and distribute malware.
Tracked as APT32 (or Bismuth, OceanLotus, and Cobalt Kitty), the state-aligned operatives affiliated with the Vietnam government have been known for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WobQ7zMc8KA:v8chIlzAppM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WobQ7zMc8KA:v8chIlzAppM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WobQ7zMc8KA:v8chIlzAppM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WobQ7zMc8KA:v8chIlzAppM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WobQ7zMc8KA:v8chIlzAppM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WobQ7zMc8KA:v8chIlzAppM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WobQ7zMc8KA:v8chIlzAppM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WobQ7zMc8KA:v8chIlzAppM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5576873546647515267
title: Watch Out! Adrozek Malware Hijacking Chrome, Firefox, Edge, Yandex Browsers
uri: Watch-Out-Adrozek-Malware-Hijacking-Chrome-Firefox-Edge-Yandex-Bro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5576873546647515267
content:
Microsoft on Thursday took the wraps off an ongoing campaign impacting popular web browsers that stealthily injects malware-infested ads into search results to earn money via affiliate advertising.
"Adrozek," as it's called by the Microsoft 365 Defender Research Team, employs an "expansive, dynamic attacker infrastructure" consisting of 159 unique domains, each of which hosts an average of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ce3JOjULWqo:qPSU7ehyQpU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ce3JOjULWqo:qPSU7ehyQpU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ce3JOjULWqo:qPSU7ehyQpU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ce3JOjULWqo:qPSU7ehyQpU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ce3JOjULWqo:qPSU7ehyQpU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ce3JOjULWqo:qPSU7ehyQpU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ce3JOjULWqo:qPSU7ehyQpU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ce3JOjULWqo:qPSU7ehyQpU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1189120926633851376
title: Governance Considerations for Democratizing Your Organization's Data in 2021
uri: Governance-Considerations-for-Democratizing-Your-Organization-s-Data-i
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1189120926633851376
content:
With the continuing rise of IoT devices, mobile networks, and digital channels, companies face a lot of pressure to generate meaningful and actionable insights from the wealth of data they capture. Gartner Research lists data democratization as one of the top strategic technology trends to watch out for. 
While empowering non-technical users to run ad-hoc reports gives enterprises the ability to<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kerQRBf6Gmc:TRyB_MxTLIQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kerQRBf6Gmc:TRyB_MxTLIQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kerQRBf6Gmc:TRyB_MxTLIQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kerQRBf6Gmc:TRyB_MxTLIQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kerQRBf6Gmc:TRyB_MxTLIQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kerQRBf6Gmc:TRyB_MxTLIQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kerQRBf6Gmc:TRyB_MxTLIQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kerQRBf6Gmc:TRyB_MxTLIQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4361573365239666954
title: Mount Locker Ransomware Offering Double Extortion Scheme to Other Hackers
uri: Mount-Locker-Ransomware-Offering-Double-Extortion-Scheme-to-Other-Hack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4361573365239666954
content:
A relatively new ransomware strain behind a series of breaches on corporate networks has developed new capabilities that allow it to broaden the scope of its targeting and evade security software—as well as with ability for its affiliates to launch double extortion attacks.
The MountLocker ransomware, which only began making the rounds in July 2020, has already gained notoriety for stealing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hcEDQk_f12A:_KKprjS0wf4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hcEDQk_f12A:_KKprjS0wf4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hcEDQk_f12A:_KKprjS0wf4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hcEDQk_f12A:_KKprjS0wf4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hcEDQk_f12A:_KKprjS0wf4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hcEDQk_f12A:_KKprjS0wf4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hcEDQk_f12A:_KKprjS0wf4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hcEDQk_f12A:_KKprjS0wf4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7096518553023169703
title: US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor
uri: US-Agencies-and-FireEye-Were-Hacked-Using-SolarWinds-Software-Backdoor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7096518553023169703
content:
State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department's National Telecommunications and Information Administration (NTIA), and other government agencies to monitor internal email traffic as part of a widespread cyberespionage campaign.
The Washington Post, citing unnamed sources, said the latest attacks were the work of APT29 or Cozy Bear, the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCAj1gqVoXA:nX2v9176IeM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCAj1gqVoXA:nX2v9176IeM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCAj1gqVoXA:nX2v9176IeM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oCAj1gqVoXA:nX2v9176IeM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCAj1gqVoXA:nX2v9176IeM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oCAj1gqVoXA:nX2v9176IeM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCAj1gqVoXA:nX2v9176IeM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oCAj1gqVoXA:nX2v9176IeM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5227500502355434632
title: SoReL-20M: A Huge Dataset of 20 Million Malware Samples Released Online
uri: SoReL-20M-A-Huge-Dataset-of-20-Million-Malware-Samples-Released-Onlin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5227500502355434632
content:
Cybersecurity firms Sophos and ReversingLabs on Monday jointly released the first-ever production-scale malware research dataset to be made available to the general public that aims to build effective defenses and drive industry-wide improvements in security detection and response.
"SoReL-20M" (short for Sophos-ReversingLabs – 20 Million), as it's called, is a dataset containing metadata, labels<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gRBhQoGh1RI:H2B-aEOoFo0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gRBhQoGh1RI:H2B-aEOoFo0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gRBhQoGh1RI:H2B-aEOoFo0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gRBhQoGh1RI:H2B-aEOoFo0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gRBhQoGh1RI:H2B-aEOoFo0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gRBhQoGh1RI:H2B-aEOoFo0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gRBhQoGh1RI:H2B-aEOoFo0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gRBhQoGh1RI:H2B-aEOoFo0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6122757529800419034
title: Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)
uri: Exfiltrating-Data-from-Air-Gapped-Computers-via-Wi-Fi-Signals-(Without
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6122757529800419034
content:
A security researcher has demonstrated that sensitive data could be exfiltrated from air-gapped computers via a novel technique that leverages Wi-Fi signals as a covert channel—surprisingly, without requiring the presence of Wi-Fi hardware on the targeted systems.
Dubbed "AIR-FI," the attack hinges on deploying a specially designed malware in a compromised system that exploits "DDR SDRAM buses <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k8wMtf_7qnQ:YWF7hs3R8Qg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k8wMtf_7qnQ:YWF7hs3R8Qg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k8wMtf_7qnQ:YWF7hs3R8Qg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k8wMtf_7qnQ:YWF7hs3R8Qg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k8wMtf_7qnQ:YWF7hs3R8Qg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k8wMtf_7qnQ:YWF7hs3R8Qg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k8wMtf_7qnQ:YWF7hs3R8Qg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k8wMtf_7qnQ:YWF7hs3R8Qg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1248157726204381368
title: Nearly 18,000 SolarWinds Customers Installed Backdoored Software
uri: Nearly-18-000-SolarWinds-Customers-Installed-Backdoored-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1248157726204381368
content:
SolarWinds, the enterprise monitoring software provider who found itself at the epicenter of the most consequential supply chain attacks, said as many as 18,000 of its high-profile customers might have installed a tainted version of its Orion products.
The acknowledgment comes as part of a new filing made by the company to the US Securities and Exchange Commission on Monday.
The Texas-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dxEDNcfysx0:_WA2gfY4284:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dxEDNcfysx0:_WA2gfY4284:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dxEDNcfysx0:_WA2gfY4284:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dxEDNcfysx0:_WA2gfY4284:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dxEDNcfysx0:_WA2gfY4284:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dxEDNcfysx0:_WA2gfY4284:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dxEDNcfysx0:_WA2gfY4284:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dxEDNcfysx0:_WA2gfY4284:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2647863502432586018
title: Download the Essential Guide to Response Automation
uri: Download-the-Essential-Guide-to-Response-Automation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2647863502432586018
content:
In the classic children's movie 'The Princess Bride,' one of the characters utters the phrase, "You keep using that word. I do not think it means what you think it means."
It's freely used as a response to someone's misuse or misunderstanding of a word or phrase.

"Response Automation" is another one of those phrases that have different meanings to different people. It's bantered around by the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p1CF15kOuVk:Ds04NkUH3ro:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p1CF15kOuVk:Ds04NkUH3ro:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p1CF15kOuVk:Ds04NkUH3ro:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p1CF15kOuVk:Ds04NkUH3ro:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p1CF15kOuVk:Ds04NkUH3ro:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p1CF15kOuVk:Ds04NkUH3ro:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p1CF15kOuVk:Ds04NkUH3ro:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p1CF15kOuVk:Ds04NkUH3ro:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7193617850874980617
title: Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices
uri: Wormable-Gitpaste-12-Botnet-Returns-to-Target-Linux-Servers-IoT-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7193617850874980617
content:
A new wormable botnet that spreads via GitHub and Pastebin to install cryptocurrency miners and backdoors on target systems has returned with expanded capabilities to compromise web applications, IP cameras, and routers.
Early last month, researchers from Juniper Threat Labs documented a crypto-mining campaign called "Gitpaste-12," which used GitHub to host malicious code containing as many as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TXBR3yMbnqg:KUVqA3ZxR0I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TXBR3yMbnqg:KUVqA3ZxR0I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TXBR3yMbnqg:KUVqA3ZxR0I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TXBR3yMbnqg:KUVqA3ZxR0I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TXBR3yMbnqg:KUVqA3ZxR0I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TXBR3yMbnqg:KUVqA3ZxR0I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TXBR3yMbnqg:KUVqA3ZxR0I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TXBR3yMbnqg:KUVqA3ZxR0I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1502977613863828392
title: SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack
uri: SolarWinds-Issues-Second-Hotfix-for-Orion-Platform-Supply-Chain-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1502977613863828392
content:
Network monitoring services provider SolarWinds officially released a second hotfix to address a critical vulnerability in its Orion platform that was exploited to insert malware and breach public and private entities in a wide-ranging espionage campaign.
In a new update posted to its advisory page, the company urged its customers to update Orion Platform to version 2020.2.1 HF 2 immediately to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=osOXy9vI530:D86d_LtAnVA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=osOXy9vI530:D86d_LtAnVA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=osOXy9vI530:D86d_LtAnVA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=osOXy9vI530:D86d_LtAnVA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=osOXy9vI530:D86d_LtAnVA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=osOXy9vI530:D86d_LtAnVA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=osOXy9vI530:D86d_LtAnVA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=osOXy9vI530:D86d_LtAnVA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3101761739291485520
title: Ransomware Attackers Using SystemBC Malware With Tor Proxy
uri: Ransomware-Attackers-Using-SystemBC-Malware-With-Tor-Proxy
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3101761739291485520
content:
Cybercriminals are increasingly outsourcing the task of deploying ransomware to affiliates using commodity malware and attack tools, according to new research.
In a new analysis published by Sophos today and shared with The Hacker News, recent deployments of Ryuk and Egregor ransomware have involved the use of SystemBC backdoor to laterally move across the network and fetch additional payloads <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PxNIvwDqI0I:3EWe6thSm24:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PxNIvwDqI0I:3EWe6thSm24:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PxNIvwDqI0I:3EWe6thSm24:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PxNIvwDqI0I:3EWe6thSm24:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PxNIvwDqI0I:3EWe6thSm24:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PxNIvwDqI0I:3EWe6thSm24:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PxNIvwDqI0I:3EWe6thSm24:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PxNIvwDqI0I:3EWe6thSm24:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7159975428626979399
title: New 5G Network Flaws Let Attackers Track Users' Locations and Steal Data
uri: New-5G-Network-Flaws-Let-Attackers-Track-Users-Locations-and-Steal-Da
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7159975428626979399
content:
As 5G networks are being gradually rolled out in major cities across the world, an analysis of its network architecture has revealed a number of potential weaknesses that could be exploited to carry out a slew of cyber assaults, including denial-of-service (DoS) attacks to deprive subscribers of Internet access and intercept data traffic.
The findings form the basis of a new "5G Standalone core <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7gJOLgtrzLo:BlY-bmeD-ww:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7gJOLgtrzLo:BlY-bmeD-ww:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7gJOLgtrzLo:BlY-bmeD-ww:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7gJOLgtrzLo:BlY-bmeD-ww:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7gJOLgtrzLo:BlY-bmeD-ww:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7gJOLgtrzLo:BlY-bmeD-ww:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7gJOLgtrzLo:BlY-bmeD-ww:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7gJOLgtrzLo:BlY-bmeD-ww:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6894784983761780106
title: What is Geocoding? — How to Find Coordinates of An Address
uri: What-is-Geocoding-How-to-Find-Coordinates-of-An-Address
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6894784983761780106
content:
How can your app hook into a geocoding service that offers forward and reverse geocoding and an auto-completion facility?
Geocoding turns a location name or address into geocoordinates. The service gets used by thousands of applications like Uber and Grubhub to track and plot their map data.
Yet, it can also help web development by enhancing UX through reverse geocoding. Not to mention <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cR5A2uSoAhE:G5RBGA4pnzs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cR5A2uSoAhE:G5RBGA4pnzs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cR5A2uSoAhE:G5RBGA4pnzs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cR5A2uSoAhE:G5RBGA4pnzs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cR5A2uSoAhE:G5RBGA4pnzs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cR5A2uSoAhE:G5RBGA4pnzs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cR5A2uSoAhE:G5RBGA4pnzs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cR5A2uSoAhE:G5RBGA4pnzs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6029719429862296936
title: New Evidence Suggests SolarWinds' Codebase Was Hacked to Inject Backdoor
uri: New-Evidence-Suggests-SolarWinds-Codebase-Was-Hacked-to-Inject-Backdo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6029719429862296936
content:
The investigation into how the attackers managed to compromise SolarWinds' internal network and poison the company's software updates is still underway, but we may be one step closer to understanding what appears to be a very meticulously planned and highly-sophisticated supply chain attack.
A new report published by ReversingLabs today and shared in advance with The Hacker News has revealed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPHQs0YyzEs:Z2cyPT_0PQw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPHQs0YyzEs:Z2cyPT_0PQw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPHQs0YyzEs:Z2cyPT_0PQw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HPHQs0YyzEs:Z2cyPT_0PQw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPHQs0YyzEs:Z2cyPT_0PQw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HPHQs0YyzEs:Z2cyPT_0PQw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPHQs0YyzEs:Z2cyPT_0PQw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HPHQs0YyzEs:Z2cyPT_0PQw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8324714300038050013
title: How to Use Password Length to Set Best Password Expiration Policy
uri: How-to-Use-Password-Length-to-Set-Best-Password-Expiration-Policy
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8324714300038050013
content:
One of the many features of an Active Directory Password Policy is the maximum password age. Traditional Active Directory environments have long using password aging as a means to bolster password security. Native password aging in the default Active Directory Password Policy is relatively limited in configuration settings.
Let's take a look at a few best practices that have changed in regards <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jnDPC4LRvt8:l-lEG3viRuI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jnDPC4LRvt8:l-lEG3viRuI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jnDPC4LRvt8:l-lEG3viRuI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jnDPC4LRvt8:l-lEG3viRuI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jnDPC4LRvt8:l-lEG3viRuI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jnDPC4LRvt8:l-lEG3viRuI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jnDPC4LRvt8:l-lEG3viRuI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jnDPC4LRvt8:l-lEG3viRuI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-280771486907138971
title: Software Supply-Chain Attack Hits Vietnam Government Certification Authority
uri: Software-Supply-Chain-Attack-Hits-Vietnam-Government-Certification-Aut
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/280771486907138971
content:
Cybersecurity researchers today disclosed a new supply-chain attack targeting the Vietnam Government Certification Authority (VGCA) that compromised the agency's digital signature toolkit to install a backdoor on victim systems.
Uncovered by Slovak internet security company ESET early this month, the "SignSight" attack involved modifying software installers hosted on the CA's website ("ca.gov.vn<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BDmQJHnUqjY:8TTkW5jC5AI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BDmQJHnUqjY:8TTkW5jC5AI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BDmQJHnUqjY:8TTkW5jC5AI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BDmQJHnUqjY:8TTkW5jC5AI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BDmQJHnUqjY:8TTkW5jC5AI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BDmQJHnUqjY:8TTkW5jC5AI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BDmQJHnUqjY:8TTkW5jC5AI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BDmQJHnUqjY:8TTkW5jC5AI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1019745968582554712
title: Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack
uri: Microsoft-Says-Its-Systems-Were-Also-Breached-in-Massive-SolarWinds-Ha
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1019745968582554712
content:
The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, sophistication, and impact than previously thought.
News of Microsoft's compromise was first reported by Reuters, which also said the company's own products were then <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5HbEQImiTU:MHGxrRshN60:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5HbEQImiTU:MHGxrRshN60:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5HbEQImiTU:MHGxrRshN60:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G5HbEQImiTU:MHGxrRshN60:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5HbEQImiTU:MHGxrRshN60:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G5HbEQImiTU:MHGxrRshN60:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5HbEQImiTU:MHGxrRshN60:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G5HbEQImiTU:MHGxrRshN60:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4541422457358661386
title: iPhones of 36 Journalists Hacked Using iMessage Zero-Click Exploit
uri: iPhones-of-36-Journalists-Hacked-Using-iMessage-Zero-Click-Exploit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4541422457358661386
content:
Three dozen journalists working for Al Jazeera had their iPhones stealthily compromised via a zero-click exploit to install spyware as part of a Middle East cyberespionage campaign.
In a new report published yesterday by University of Toronto's Citizen Lab, researchers said personal phones of 36 journalists, producers, anchors, and executives at Al Jazeera, and a journalist at London-based Al <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6dwttf1YmMQ:_Qg02-zg0sA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6dwttf1YmMQ:_Qg02-zg0sA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6dwttf1YmMQ:_Qg02-zg0sA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6dwttf1YmMQ:_Qg02-zg0sA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6dwttf1YmMQ:_Qg02-zg0sA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6dwttf1YmMQ:_Qg02-zg0sA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6dwttf1YmMQ:_Qg02-zg0sA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6dwttf1YmMQ:_Qg02-zg0sA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7308760812918431733
title: Common Security Misconfigurations and Their Consequences
uri: Common-Security-Misconfigurations-and-Their-Consequences
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7308760812918431733
content:
Everyone makes mistakes. That one sentence was drummed into me in my very first job in tech, and it has held true since then. In the cybersecurity world, misconfigurations can create exploitable issues that can haunt us later - so let's look at a few common security misconfigurations.
The first one is development permissions that don't get changed when something goes live. For example, AWS S3 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbzngh8AV6c:1e2d98nmufo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbzngh8AV6c:1e2d98nmufo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbzngh8AV6c:1e2d98nmufo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qbzngh8AV6c:1e2d98nmufo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbzngh8AV6c:1e2d98nmufo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qbzngh8AV6c:1e2d98nmufo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbzngh8AV6c:1e2d98nmufo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qbzngh8AV6c:1e2d98nmufo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8098642024835247879
title: Two Critical Flaws — CVSS Score 10 — Affect Dell Wyse Thin Client Devices
uri: Two-Critical-Flaws-CVSS-Score-10-Affect-Dell-Wyse-Thin-Client
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8098642024835247879
content:
A team of researchers today unveils two critical security vulnerabilities it discovered in Dell Wyse Thin clients that could have potentially allowed attackers to remotely execute malicious code and access arbitrary files on affected devices.
The flaws, which were uncovered by healthcare cybersecurity provider CyberMDX and reported to Dell in June 2020, affects all devices running ThinOS <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uk7cElFYsVM:CvrNxTl7qg8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uk7cElFYsVM:CvrNxTl7qg8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uk7cElFYsVM:CvrNxTl7qg8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uk7cElFYsVM:CvrNxTl7qg8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uk7cElFYsVM:CvrNxTl7qg8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uk7cElFYsVM:CvrNxTl7qg8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uk7cElFYsVM:CvrNxTl7qg8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uk7cElFYsVM:CvrNxTl7qg8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7432395885358660932
title: A Second Hacker Group May Have Also Breached SolarWinds, Microsoft Says
uri: A-Second-Hacker-Group-May-Have-Also-Breached-SolarWinds-Microsoft-Say
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7432395885358660932
content:
As the probe into the SolarWinds supply chain attack continues, new digital forensic evidence has brought to light that a separate threat actor may have been abusing the IT infrastructure provider's Orion software to drop a similar persistent backdoor on target systems.
"The investigation of the whole SolarWinds compromise led to the discovery of an additional malware that also affects the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8afQZYWTsoQ:C6MP4cz6Qzo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8afQZYWTsoQ:C6MP4cz6Qzo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8afQZYWTsoQ:C6MP4cz6Qzo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8afQZYWTsoQ:C6MP4cz6Qzo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8afQZYWTsoQ:C6MP4cz6Qzo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8afQZYWTsoQ:C6MP4cz6Qzo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8afQZYWTsoQ:C6MP4cz6Qzo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8afQZYWTsoQ:C6MP4cz6Qzo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-751207896486956892
title: Cybercriminals' Favorite Bulletproof VPN Service Shuts Down In Global Action
uri: Cybercriminals-Favorite-Bulletproof-VPN-Service-Shuts-Down-In-Global
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/751207896486956892
content:
Law enforcement agencies from the US, Germany, Netherlands, Switzerland, France, along with Europol's European Cybercrime Centre (EC3), announced today the coordinated takedown of Safe-Inet, a popular virtual private network (VPN) service that was used to facilitate criminal activity.
The three domains in question — insorg[.]org, safe-inet[.]com, and safe-inet[.]net — were shut down, and their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0UPCbYOALWc:nldJ39qJeDM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0UPCbYOALWc:nldJ39qJeDM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0UPCbYOALWc:nldJ39qJeDM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0UPCbYOALWc:nldJ39qJeDM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0UPCbYOALWc:nldJ39qJeDM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0UPCbYOALWc:nldJ39qJeDM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0UPCbYOALWc:nldJ39qJeDM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0UPCbYOALWc:nldJ39qJeDM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4522253752132672405
title: How to Defend Against Malware, Phishing, and Scams During COVID-19 Crisis
uri: How-to-Defend-Against-Malware-Phishing-and-Scams-During-COVID-19-Cri
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4522253752132672405
content:
As if the exponential rise in phishing scams and malware attacks in the last five years wasn't enough, the COVID-19 crisis has worsened it further.
The current scenario has given a viable opportunity to cybercriminals to find a way to target individuals, small and large enterprises, government corporations.
According to Interpol's COVID-19 Cybercrime Analysis Report, based on the feedback of 194<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svkfhjf9Wn8:0BJuhinST_Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svkfhjf9Wn8:0BJuhinST_Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svkfhjf9Wn8:0BJuhinST_Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svkfhjf9Wn8:0BJuhinST_Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svkfhjf9Wn8:0BJuhinST_Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svkfhjf9Wn8:0BJuhinST_Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svkfhjf9Wn8:0BJuhinST_Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svkfhjf9Wn8:0BJuhinST_Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6414787911588393589
title: Law Enforcement Seizes Joker's Stash — Stolen Credit Card Marketplace
uri: Law-Enforcement-Seizes-Joker-s-Stash-Stolen-Credit-Card-Marketplac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6414787911588393589
content:
The US Federal Bureau of Investigation (FBI) and Interpol have allegedly seized proxy servers used in connection with Blockchain-based domains belonging to Joker's Stash, a notorious fraud bazaar known for selling compromised payment card data in underground forums.
The takedown happened last week on December 17.
The operators of Joker's Stash operate several versions of the platform, including <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=119TgIssvl0:bq1zOzxgDpw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=119TgIssvl0:bq1zOzxgDpw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=119TgIssvl0:bq1zOzxgDpw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=119TgIssvl0:bq1zOzxgDpw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=119TgIssvl0:bq1zOzxgDpw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=119TgIssvl0:bq1zOzxgDpw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=119TgIssvl0:bq1zOzxgDpw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=119TgIssvl0:bq1zOzxgDpw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4557792657232657722
title: New Critical Flaws in Treck TCP/IP Stack Affect Millions of IoT Devices
uri: New-Critical-Flaws-in-Treck-TCP-IP-Stack-Affect-Millions-of-IoT-Device
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4557792657232657722
content:
The US Cybersecurity Infrastructure and Security Agency (CISA) has warned of critical vulnerabilities in a low-level TCP/IP software library developed by Treck that, if weaponized, could allow remote attackers to run arbitrary commands and mount denial-of-service (DoS) attacks.
The four flaws affect Treck TCP/IP stack version 6.0.1.67 and earlier and were reported to the company by Intel. Two of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GOubf8-qlJM:wYZqdezMhno:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GOubf8-qlJM:wYZqdezMhno:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GOubf8-qlJM:wYZqdezMhno:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GOubf8-qlJM:wYZqdezMhno:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GOubf8-qlJM:wYZqdezMhno:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GOubf8-qlJM:wYZqdezMhno:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GOubf8-qlJM:wYZqdezMhno:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GOubf8-qlJM:wYZqdezMhno:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4710434592924684862
title: North Korean Hackers Trying to Steal COVID-19 Vaccine Research
uri: North-Korean-Hackers-Trying-to-Steal-COVID-19-Vaccine-Research
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4710434592924684862
content:
Threat actors such as the notorious Lazarus group are continuing to tap into the ongoing COVID-19 vaccine research to steal sensitive information to speed up their countries' vaccine-development efforts.
Cybersecurity firm Kaspersky detailed two incidents at a pharmaceutical company and a government ministry in September and October leveraging different tools and techniques but exhibiting <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B8Tg68yvkZc:j28rTsLFfAI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B8Tg68yvkZc:j28rTsLFfAI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B8Tg68yvkZc:j28rTsLFfAI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B8Tg68yvkZc:j28rTsLFfAI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B8Tg68yvkZc:j28rTsLFfAI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B8Tg68yvkZc:j28rTsLFfAI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B8Tg68yvkZc:j28rTsLFfAI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B8Tg68yvkZc:j28rTsLFfAI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4975374967069745078
title: Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug
uri: Google-Discloses-Poorly-Patched-Now-Unpatched-Windows-0-Day-Bug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4975374967069745078
content:
Google's Project Zero team has made public details of an improperly patched zero-day security vulnerability in Windows print spooler API that could be leveraged by a bad actor to execute arbitrary code.
Details of the unpatched flaw were revealed publicly after Microsoft failed to patch it within 90 days of responsible disclosure on September 24.
Originally tracked as CVE-2020-0986, the flaw <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T75cSA6PMhM:zwG0tYHtd0c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T75cSA6PMhM:zwG0tYHtd0c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T75cSA6PMhM:zwG0tYHtd0c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T75cSA6PMhM:zwG0tYHtd0c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T75cSA6PMhM:zwG0tYHtd0c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T75cSA6PMhM:zwG0tYHtd0c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T75cSA6PMhM:zwG0tYHtd0c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T75cSA6PMhM:zwG0tYHtd0c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2914185746347910452
title: Attackers Abusing Citrix NetScaler Devices to Launch Amplified DDoS Attacks
uri: Attackers-Abusing-Citrix-NetScaler-Devices-to-Launch-Amplified-DDoS-At
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2914185746347910452
content:
Citrix has issued an emergency advisory warning its customers of a security issue affecting its NetScaler application delivery controller (ADC) devices that attackers are abusing to launch amplified distributed denial-of-service (DDoS) attacks against several targets.
"An attacker or bots can overwhelm the Citrix ADC [Datagram Transport Layer Security] network throughput, potentially leading to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DJfJATymo8:zj8lfR5IQcM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DJfJATymo8:zj8lfR5IQcM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DJfJATymo8:zj8lfR5IQcM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4DJfJATymo8:zj8lfR5IQcM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DJfJATymo8:zj8lfR5IQcM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4DJfJATymo8:zj8lfR5IQcM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DJfJATymo8:zj8lfR5IQcM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4DJfJATymo8:zj8lfR5IQcM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2198738670308537615
title: Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers
uri: Microsoft-Warns-CrowdStrike-of-Hackers-Targeting-Azure-Cloud-Customers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2198738670308537615
content:
New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email.
The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on December 15, which identified a third-party reseller's Microsoft Azure account to be making "abnormal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z6WKAOG-LSw:NaEYioYHBac:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z6WKAOG-LSw:NaEYioYHBac:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z6WKAOG-LSw:NaEYioYHBac:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z6WKAOG-LSw:NaEYioYHBac:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z6WKAOG-LSw:NaEYioYHBac:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z6WKAOG-LSw:NaEYioYHBac:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z6WKAOG-LSw:NaEYioYHBac:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z6WKAOG-LSw:NaEYioYHBac:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2979470277898534609
title: Police Arrest 21 WeLeakInfo Customers Who Bought Breached Personal Data
uri: Police-Arrest-21-WeLeakInfo-Customers-Who-Bought-Breached-Personal-Dat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2979470277898534609
content:
21 people have been arrested across the UK as part of a nationwide cyber crackdown targeting customers of WeLeakInfo[.]com, a now-defunct online service that had been previously selling access to data hacked from other websites.
The suspects used stolen personal credentials to commit further cyber and fraud offences, the NCA said.
Of the 21 arrested—all men aged between 18 and 38— nine have been<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dl9g9TNawNM:XU-bjCy_bTk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dl9g9TNawNM:XU-bjCy_bTk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dl9g9TNawNM:XU-bjCy_bTk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dl9g9TNawNM:XU-bjCy_bTk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dl9g9TNawNM:XU-bjCy_bTk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dl9g9TNawNM:XU-bjCy_bTk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dl9g9TNawNM:XU-bjCy_bTk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dl9g9TNawNM:XU-bjCy_bTk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-78722240181355054
title: A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware
uri: A-New-SolarWinds-Flaw-Likely-Had-Let-Hackers-Install-SUPERNOVA-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/78722240181355054
content:
An authentication bypass vulnerability in the SolarWinds Orion software may have been leveraged by adversaries to deploy the SUPERNOVA malware in target environments.
According to an advisory published yesterday by the CERT Coordination Center, the SolarWinds Orion API that's used to interface with all other Orion system monitoring and management products suffers from a security flaw that could <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=StVyTQTleGY:vgQ0SuOAKP4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=StVyTQTleGY:vgQ0SuOAKP4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=StVyTQTleGY:vgQ0SuOAKP4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=StVyTQTleGY:vgQ0SuOAKP4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=StVyTQTleGY:vgQ0SuOAKP4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=StVyTQTleGY:vgQ0SuOAKP4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=StVyTQTleGY:vgQ0SuOAKP4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=StVyTQTleGY:vgQ0SuOAKP4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6588343199618817386
title: AutoHotkey-Based Password Stealer Targeting US, Canadian Banking Users
uri: AutoHotkey-Based-Password-Stealer-Targeting-US-Canadian-Banking-User
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6588343199618817386
content:
Threat actors have been discovered distributing a new credential stealer written in AutoHotkey (AHK) scripting language as part of an ongoing campaign that started early 2020.
Customers of financial institutions in the US and Canada are among the primary targets for credential exfiltration, with a specific focus on banks such as Scotiabank, Royal Bank of Canada, HSBC, Alterna Bank, Capital One, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euJWmSKh42k:B24osii7-Y4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euJWmSKh42k:B24osii7-Y4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euJWmSKh42k:B24osii7-Y4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=euJWmSKh42k:B24osii7-Y4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euJWmSKh42k:B24osii7-Y4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=euJWmSKh42k:B24osii7-Y4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euJWmSKh42k:B24osii7-Y4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=euJWmSKh42k:B24osii7-Y4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9165094035310215395
title: A Google Docs Bug Could Have Allowed Hackers See Your Private Documents
uri: A-Google-Docs-Bug-Could-Have-Allowed-Hackers-See-Your-Private-Document
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9165094035310215395
content:
Google has patched a bug in its feedback tool incorporated across its services that could be exploited by an attacker to potentially steal screenshots of sensitive Google Docs documents simply by embedding them in a malicious website.
The flaw was discovered on July 9 by security researcher Sreeram KL, for which he was awarded $3133.70 as part of Google's Vulnerability Reward Program.
&lt;!-<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ylQFbw3Mb9o:GhIp_6FP3UI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ylQFbw3Mb9o:GhIp_6FP3UI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ylQFbw3Mb9o:GhIp_6FP3UI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ylQFbw3Mb9o:GhIp_6FP3UI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ylQFbw3Mb9o:GhIp_6FP3UI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ylQFbw3Mb9o:GhIp_6FP3UI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ylQFbw3Mb9o:GhIp_6FP3UI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ylQFbw3Mb9o:GhIp_6FP3UI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1217205256433373625
title: Microsoft Says SolarWinds Hackers Accessed Some of Its Source Code
uri: Microsoft-Says-SolarWinds-Hackers-Accessed-Some-of-Its-Source-Code
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1217205256433373625
content:
Microsoft on Thursday revealed that the threat actors behind the SolarWinds supply chain attack were able to gain access to a small number of internal accounts and escalate access inside its internal network.
The "very sophisticated nation-state actor" used the unauthorized access to view, but not modify, the source code present in its repositories, the company said.
&lt;!--adsense--&gt;
"We detected <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=se6LqfROHk4:r3ve9dIEhek:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=se6LqfROHk4:r3ve9dIEhek:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=se6LqfROHk4:r3ve9dIEhek:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=se6LqfROHk4:r3ve9dIEhek:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=se6LqfROHk4:r3ve9dIEhek:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=se6LqfROHk4:r3ve9dIEhek:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=se6LqfROHk4:r3ve9dIEhek:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=se6LqfROHk4:r3ve9dIEhek:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4360837748673482315
title: Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products
uri: Secret-Backdoor-Account-Found-in-Several-Zyxel-Firewall-VPN-Products
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4360837748673482315
content:
Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices.
The flaw, tracked as CVE-2020-29583 (CVSS score 7.8), affects version 4.60 present in wide-range of Zyxel devices, including Unified Security Gateway (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_6qBL9bg0LE:MLs-tOfW564:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_6qBL9bg0LE:MLs-tOfW564:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_6qBL9bg0LE:MLs-tOfW564:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_6qBL9bg0LE:MLs-tOfW564:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_6qBL9bg0LE:MLs-tOfW564:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_6qBL9bg0LE:MLs-tOfW564:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_6qBL9bg0LE:MLs-tOfW564:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_6qBL9bg0LE:MLs-tOfW564:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2253519701781009476
title: Ticketmaster To Pay $10 Million Fine For Hacking A Rival Company
uri: Ticketmaster-To-Pay-10-Million-Fine-For-Hacking-A-Rival-Company
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2253519701781009476
content:
Ticketmaster has agreed to pay a $10 million fine after being charged with illegally accessing computer systems of a competitor repeatedly between 2013 and 2015 in an attempt to "cut [the company] off at the knees."
A subsidiary of Live Nation, the California-based ticket sales and distribution company used the stolen information to gain an advantage over CrowdSurge — which merged with Songkick <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n14v-MyN3TY:-lIcgX2lRrQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n14v-MyN3TY:-lIcgX2lRrQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n14v-MyN3TY:-lIcgX2lRrQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n14v-MyN3TY:-lIcgX2lRrQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n14v-MyN3TY:-lIcgX2lRrQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n14v-MyN3TY:-lIcgX2lRrQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n14v-MyN3TY:-lIcgX2lRrQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n14v-MyN3TY:-lIcgX2lRrQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6150817518977417683
title: British Court Rejects U.S. Request to Extradite WikiLeaks' Julian Assange
uri: British-Court-Rejects-U-S-Request-to-Extradite-WikiLeaks-Julian-Assa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6150817518977417683
content:
A British court has rejected the U.S. government's request to extradite Wikileaks founder Julian Assange to the country on charges pertaining to illegally obtaining and sharing classified material related to national security.
In a hearing at Westminster Magistrates' Court today, Judge Vanessa Baraitser denied the extradition on the grounds that Assange is a suicide risk and extradition to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a_eeGV0d38s:gvPxnaaOQLM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a_eeGV0d38s:gvPxnaaOQLM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a_eeGV0d38s:gvPxnaaOQLM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a_eeGV0d38s:gvPxnaaOQLM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a_eeGV0d38s:gvPxnaaOQLM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a_eeGV0d38s:gvPxnaaOQLM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a_eeGV0d38s:gvPxnaaOQLM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a_eeGV0d38s:gvPxnaaOQLM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1517496145421005538
title: Healthcare Industry Witnessed 45% Spike in Cyber Attacks Since Nov 20
uri: Healthcare-Industry-Witnessed-45-Spike-in-Cyber-Attacks-Since-Nov-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1517496145421005538
content:
Cyberattacks targeting healthcare organizations have spiked by 45% since November 2020 as COVID-19 cases continue to increase globally.
According to a new report published by Check Point Research today and shared with The Hacker News, this increase has made the sector the most targeted industry by cybercriminals when compared to an overall 22% increase in cyberattacks across all industry sectors<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udy7z0QSY40:mCNdv_Gy1go:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udy7z0QSY40:mCNdv_Gy1go:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udy7z0QSY40:mCNdv_Gy1go:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=udy7z0QSY40:mCNdv_Gy1go:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udy7z0QSY40:mCNdv_Gy1go:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=udy7z0QSY40:mCNdv_Gy1go:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udy7z0QSY40:mCNdv_Gy1go:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=udy7z0QSY40:mCNdv_Gy1go:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2569910429161258653
title: Google Speech-to-Text API Can Help Attackers Easily Bypass Google reCAPTCHA
uri: Google-Speech-to-Text-API-Can-Help-Attackers-Easily-Bypass-Google-reCA
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2569910429161258653
content:
A three-year-old attack technique to bypass Google's audio reCAPTCHA by using its own Speech-to-Text API has been found to still work with 97% accuracy.
Researcher Nikolai Tschacher disclosed his findings in a proof-of-concept (PoC) of the attack on January 2.
"The idea of the attack is very simple: You grab the MP3 file of the audio reCAPTCHA and you submit it to Google's own speech-to-text API<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S1wKnIzN4Iw:rVbgCAkX7Ow:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S1wKnIzN4Iw:rVbgCAkX7Ow:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S1wKnIzN4Iw:rVbgCAkX7Ow:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=S1wKnIzN4Iw:rVbgCAkX7Ow:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S1wKnIzN4Iw:rVbgCAkX7Ow:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=S1wKnIzN4Iw:rVbgCAkX7Ow:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S1wKnIzN4Iw:rVbgCAkX7Ow:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=S1wKnIzN4Iw:rVbgCAkX7Ow:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3681971661763533760
title: Warning: Cross-Platform ElectroRAT Malware Targeting Cryptocurrency Users
uri: Warning-Cross-Platform-ElectroRAT-Malware-Targeting-Cryptocurrency-Us
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3681971661763533760
content:
Cybersecurity researchers today revealed a wide-ranging scam targeting cryptocurrency users that began as early as January last year to distribute trojanized applications to install a previously undetected remote access tool on target systems.
Called ElectroRAT by Intezer, the RAT is written from ground-up in Golang and designed to target multiple operating systems such as Windows, Linux, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qSZYJtNE9ks:ty46XKm0WqQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qSZYJtNE9ks:ty46XKm0WqQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qSZYJtNE9ks:ty46XKm0WqQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qSZYJtNE9ks:ty46XKm0WqQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qSZYJtNE9ks:ty46XKm0WqQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qSZYJtNE9ks:ty46XKm0WqQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qSZYJtNE9ks:ty46XKm0WqQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qSZYJtNE9ks:ty46XKm0WqQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4782426481999502718
title: FBI, CISA, NSA Officially Blame Russia for SolarWinds Cyber Attack
uri: FBI-CISA-NSA-Officially-Blame-Russia-for-SolarWinds-Cyber-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4782426481999502718
content:
The U.S. government on Tuesday formally pointed fingers at the Russian government for orchestrating the massive SolarWinds supply chain attack that came to light early last month.
"This work indicates that an Advanced Persistent Threat (APT) actor, likely Russian in origin, is responsible for most or all of the recently discovered, ongoing cyber compromises of both government and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw3F_QFFLjc:PpdBupCLtj0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw3F_QFFLjc:PpdBupCLtj0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw3F_QFFLjc:PpdBupCLtj0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jw3F_QFFLjc:PpdBupCLtj0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw3F_QFFLjc:PpdBupCLtj0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jw3F_QFFLjc:PpdBupCLtj0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jw3F_QFFLjc:PpdBupCLtj0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jw3F_QFFLjc:PpdBupCLtj0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8127371752580995172
title: WhatsApp Will Delete Your Account If You Don't Agree Sharing Data With Facebook
uri: WhatsApp-Will-Delete-Your-Account-If-You-Don-t-Agree-Sharing-Data-With
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8127371752580995172
content:
"Respect for your privacy is coded into our DNA," opens WhatsApp's privacy policy. "Since we started WhatsApp, we've aspired to build our Services with a set of strong privacy principles in mind."
But come February 8, 2021, this opening statement will no longer find a place in the policy.
The Facebook-owned messaging service is alerting users in India of an update to its terms of service and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emDwsJLO-AE:X6N0LfuNhLk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emDwsJLO-AE:X6N0LfuNhLk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emDwsJLO-AE:X6N0LfuNhLk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=emDwsJLO-AE:X6N0LfuNhLk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emDwsJLO-AE:X6N0LfuNhLk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=emDwsJLO-AE:X6N0LfuNhLk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emDwsJLO-AE:X6N0LfuNhLk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=emDwsJLO-AE:X6N0LfuNhLk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6076084860584566845
title: Hackers Using Fake Trump's Scandal Video to Spread QNode Malware
uri: Hackers-Using-Fake-Trump-s-Scandal-Video-to-Spread-QNode-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6076084860584566845
content:
Cybesecurity researchers today revealed a new malspam campaign that distributes a remote access Trojan (RAT) by purporting to contain a sex scandal video of U.S. President Donald Trump.
The emails, which carry with the subject line "GOOD LOAN OFFER!!," come attached with a Java archive (JAR) file called "TRUMP_SEX_SCANDAL_VIDEO.jar," which, when downloaded, installs Qua or Quaverse RAT (QRAT) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsyEkjDf4OI:SczojEcw9hI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsyEkjDf4OI:SczojEcw9hI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsyEkjDf4OI:SczojEcw9hI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GsyEkjDf4OI:SczojEcw9hI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsyEkjDf4OI:SczojEcw9hI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GsyEkjDf4OI:SczojEcw9hI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GsyEkjDf4OI:SczojEcw9hI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GsyEkjDf4OI:SczojEcw9hI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4000489892564336556
title: SolarWinds Hackers Also Accessed U.S. Justice Department's Email Server
uri: SolarWinds-Hackers-Also-Accessed-U-S-Justice-Department-s-Email-Serve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4000489892564336556
content:
The U.S. Department of Justice on Wednesday became the latest government agency in the country to admit its internal network was compromised as part of the SolarWinds supply chain attack.
"On December 24, 2020, the Department of Justice's Office of the Chief Information Officer (OCIO) learned of previously unknown malicious activity linked to the global SolarWinds incident that has affected <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_kRjA37iY:5QzA4eCknSI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_kRjA37iY:5QzA4eCknSI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_kRjA37iY:5QzA4eCknSI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1m_kRjA37iY:5QzA4eCknSI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_kRjA37iY:5QzA4eCknSI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1m_kRjA37iY:5QzA4eCknSI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_kRjA37iY:5QzA4eCknSI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1m_kRjA37iY:5QzA4eCknSI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4834281723009281808
title: Creating A Strong Password Policy With Specops and NIST Guidelines
uri: Creating-A-Strong-Password-Policy-With-Specops-and-NIST-Guidelines
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4834281723009281808
content:
End-user passwords are one of the weakest components of your overall security protocols. Most users tend to reuse passwords across work and personal accounts.
They may also choose relatively weak passwords that satisfy company password policies but can be easily guessed or brute-forced. Your users may also inadvertently use breached passwords for their corporate account password.
The National <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bG0ipFKJqfU:oMsbu8EpCM4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bG0ipFKJqfU:oMsbu8EpCM4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bG0ipFKJqfU:oMsbu8EpCM4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bG0ipFKJqfU:oMsbu8EpCM4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bG0ipFKJqfU:oMsbu8EpCM4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bG0ipFKJqfU:oMsbu8EpCM4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bG0ipFKJqfU:oMsbu8EpCM4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bG0ipFKJqfU:oMsbu8EpCM4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1666458895904449775
title: ALERT: North Korean hackers targeting South Korea with RokRat Trojan
uri: ALERT-North-Korean-hackers-targeting-South-Korea-with-RokRat-Trojan
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1666458895904449775
content:
A North Korean hacking group has been found deploying the RokRat Trojan in a new spear-phishing campaign targeting the South Korean government.
Attributing the attack to APT37 (aka Starcruft, Ricochet Chollima, or Reaper), Malwarebytes said it identified a malicious document last December that, when opened, executes a macro in memory to install the aforementioned remote access tool (RAT).
"The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yF4TY5O24po:_cpS-CAYYY8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yF4TY5O24po:_cpS-CAYYY8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yF4TY5O24po:_cpS-CAYYY8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yF4TY5O24po:_cpS-CAYYY8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yF4TY5O24po:_cpS-CAYYY8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yF4TY5O24po:_cpS-CAYYY8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yF4TY5O24po:_cpS-CAYYY8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yF4TY5O24po:_cpS-CAYYY8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6215025241108368557
title: New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys
uri: New-Attack-Could-Let-Hackers-Clone-Your-Google-Titan-2FA-Security-Keys
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6215025241108368557
content:
Hardware security keys—such as those from Google and Yubico—are considered the most secure means to protect accounts from phishing and takeover attacks.
But a new research published on Thursday demonstrates how an adversary in possession of such a two-factor authentication (2FA) device can clone it by exploiting an electromagnetic side-channel in the chip embedded in it.
The vulnerability (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tomotVjJq1k:bK05ejWYjvo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tomotVjJq1k:bK05ejWYjvo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tomotVjJq1k:bK05ejWYjvo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tomotVjJq1k:bK05ejWYjvo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tomotVjJq1k:bK05ejWYjvo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tomotVjJq1k:bK05ejWYjvo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tomotVjJq1k:bK05ejWYjvo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tomotVjJq1k:bK05ejWYjvo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6716913510962380718
title: Russian Hacker Gets 12-Years Prison for Massive JP Morgan Chase Hack
uri: Russian-Hacker-Gets-12-Years-Prison-for-Massive-JP-Morgan-Chase-Hack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6716913510962380718
content:
A U.S. court on Thursday sentenced a 37-year-old Russian to 12 years in prison for perpetrating an international hacking campaign that resulted in the heist of a trove of personal information from several financial institutions, brokerage firms, financial news publishers, and other American companies.
Andrei Tyurin was charged with computer intrusion, wire fraud, bank fraud, and illegal online <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NSo7YtwOw20:kNgRQUcjHxM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NSo7YtwOw20:kNgRQUcjHxM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NSo7YtwOw20:kNgRQUcjHxM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NSo7YtwOw20:kNgRQUcjHxM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NSo7YtwOw20:kNgRQUcjHxM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NSo7YtwOw20:kNgRQUcjHxM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NSo7YtwOw20:kNgRQUcjHxM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NSo7YtwOw20:kNgRQUcjHxM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-281273866653828775
title: Researchers Find Links Between Sunburst and Russian Kazuar Malware
uri: Researchers-Find-Links-Between-Sunburst-and-Russian-Kazuar-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/281273866653828775
content:
Cybersecurity researchers, for the first time, may have found a potential connection between the backdoor used in the SolarWinds hack to a previously known malware strain.
In new research published by Kaspersky researchers today, the cybersecurity firm said it discovered several features that overlap with another backdoor known as Kazuar, a .NET-based malware first documented by Palo Alto <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svCQ65KUMLQ:PUi6CTyOBfg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svCQ65KUMLQ:PUi6CTyOBfg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svCQ65KUMLQ:PUi6CTyOBfg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svCQ65KUMLQ:PUi6CTyOBfg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svCQ65KUMLQ:PUi6CTyOBfg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svCQ65KUMLQ:PUi6CTyOBfg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svCQ65KUMLQ:PUi6CTyOBfg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svCQ65KUMLQ:PUi6CTyOBfg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1397026622008671873
title: Unveiled: SUNSPOT Malware Was Used to Inject SolarWinds Backdoor
uri: Unveiled-SUNSPOT-Malware-Was-Used-to-Inject-SolarWinds-Backdoor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1397026622008671873
content:
As the investigation into the SolarWinds supply-chain attack continues, cybersecurity researchers have disclosed a third malware strain that was deployed into the build environment to inject the backdoor into the company's Orion network monitoring platform.
Called "Sunspot," the malignant tool adds to a growing list of previously disclosed malicious software such as Sunburst and Teardrop.
"This <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k_Q9om7nPpw:70l5rZsx7B4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k_Q9om7nPpw:70l5rZsx7B4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k_Q9om7nPpw:70l5rZsx7B4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k_Q9om7nPpw:70l5rZsx7B4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k_Q9om7nPpw:70l5rZsx7B4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k_Q9om7nPpw:70l5rZsx7B4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k_Q9om7nPpw:70l5rZsx7B4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k_Q9om7nPpw:70l5rZsx7B4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7572402137370425583
title: Experts Sound Alarm On New Android Malware Sold On Hacking Forums
uri: Experts-Sound-Alarm-On-New-Android-Malware-Sold-On-Hacking-Forums
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7572402137370425583
content:
Cybersecurity researchers have exposed the operations of an Android malware vendor who teamed up with a second threat actor to market and sell a remote access Trojan (RAT) capable of device takeover and exfiltration of photos, locations, contacts, and messages from popular apps such as Facebook, Instagram, WhatsApp, Skype, Telegram, Kik, Line, and Google Messages.
The vendor, who goes by the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_mOsbV5_NvM:XstGuy-fbHk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_mOsbV5_NvM:XstGuy-fbHk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_mOsbV5_NvM:XstGuy-fbHk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_mOsbV5_NvM:XstGuy-fbHk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_mOsbV5_NvM:XstGuy-fbHk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_mOsbV5_NvM:XstGuy-fbHk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_mOsbV5_NvM:XstGuy-fbHk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_mOsbV5_NvM:XstGuy-fbHk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-430544537274911938
title: Warning — 5 New Trojanized Android Apps Spying On Users In Pakistan
uri: Warning-5-New-Trojanized-Android-Apps-Spying-On-Users-In-Pakistan
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/430544537274911938
content:
Cybersecurity researchers took the wraps off a new spyware operation targeting users in Pakistan that leverages trojanized versions of legitimate Android apps to carry out covert surveillance and espionage.
Designed to masquerade apps such as the Pakistan Citizen Portal, a Muslim prayer-clock app called Pakistan Salat Time, Mobile Packages Pakistan, Registered SIMs Checker, and TPL Insurance, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ByMB4xwGWxg:pv-Xut6AcMA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ByMB4xwGWxg:pv-Xut6AcMA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ByMB4xwGWxg:pv-Xut6AcMA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ByMB4xwGWxg:pv-Xut6AcMA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ByMB4xwGWxg:pv-Xut6AcMA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ByMB4xwGWxg:pv-Xut6AcMA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ByMB4xwGWxg:pv-Xut6AcMA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ByMB4xwGWxg:pv-Xut6AcMA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1977313021512405352
title: Hackers Steal Mimecast Certificate Used to Securely Connect with Microsoft 365
uri: Hackers-Steal-Mimecast-Certificate-Used-to-Securely-Connect-with-Micro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1977313021512405352
content:
Mimecast said on Tuesday that "a sophisticated threat actor" had compromised a digital certificate it provided to certain customers to securely connect its products to Microsoft 365 (M365) Exchange.
The discovery was made after the breach was notified by Microsoft, the London-based company said in an alert posted on its website, adding it's reached out to the impacted organizations to remediate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8SBSY6Y9KFE:tPAhVMOg0-Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8SBSY6Y9KFE:tPAhVMOg0-Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8SBSY6Y9KFE:tPAhVMOg0-Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8SBSY6Y9KFE:tPAhVMOg0-Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8SBSY6Y9KFE:tPAhVMOg0-Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8SBSY6Y9KFE:tPAhVMOg0-Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8SBSY6Y9KFE:tPAhVMOg0-Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8SBSY6Y9KFE:tPAhVMOg0-Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9135282242036875785
title: Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws
uri: Microsoft-Issues-Patches-for-Defender-Zero-Day-and-82-Other-Windows-Fl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9135282242036875785
content:
For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability.
The latest security patches cover Microsoft Windows, Edge browser, ChakraCore, Office and Microsoft Office Services, and Web Apps, Visual Studio, Microsoft Malware Protection Engine, .NET Core<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eEiTp6rST00:WGyi515yjns:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eEiTp6rST00:WGyi515yjns:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eEiTp6rST00:WGyi515yjns:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eEiTp6rST00:WGyi515yjns:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eEiTp6rST00:WGyi515yjns:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eEiTp6rST00:WGyi515yjns:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eEiTp6rST00:WGyi515yjns:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eEiTp6rST00:WGyi515yjns:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5137191391361767321
title: Buyer's Guide for Securing Internal Environment with a Small Cybersecurity Team
uri: Buyer-s-Guide-for-Securing-Internal-Environment-with-a-Small-Cybersecu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5137191391361767321
content:
Ensuring the cybersecurity of your internal environment when you have a small security team is challenging. If you want to maintain the highest security level with a small team, your strategy has to be 'do more with less,' and with the right technology, you can leverage your team and protect your internal environment from breaches.
The "buyer's guide for securing the internal environment with a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FzkB4pB0ZYM:dJg1LU56ebo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FzkB4pB0ZYM:dJg1LU56ebo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FzkB4pB0ZYM:dJg1LU56ebo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FzkB4pB0ZYM:dJg1LU56ebo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FzkB4pB0ZYM:dJg1LU56ebo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FzkB4pB0ZYM:dJg1LU56ebo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FzkB4pB0ZYM:dJg1LU56ebo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FzkB4pB0ZYM:dJg1LU56ebo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7517087964329393233
title: Authorities Take Down World's Largest Illegal Dark Web Marketplace
uri: Authorities-Take-Down-World-s-Largest-Illegal-Dark-Web-Marketplace
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7517087964329393233
content:
Europol on Tuesday said it shut down DarkMarket, the world's largest online marketplace for illicit goods, as part of an international operation involving Germany, Australia, Denmark, Moldova, Ukraine, the U.K.'s National Crime Agency (NCA), and the U.S. Federal Bureau of Investigation (FBI).
At the time of closure, DarkMarket is believed to have had 500,000 users and more than 2,400 vendors, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gyoxN9Ipaz4:qSqW_-_-5ZM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gyoxN9Ipaz4:qSqW_-_-5ZM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gyoxN9Ipaz4:qSqW_-_-5ZM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gyoxN9Ipaz4:qSqW_-_-5ZM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gyoxN9Ipaz4:qSqW_-_-5ZM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gyoxN9Ipaz4:qSqW_-_-5ZM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gyoxN9Ipaz4:qSqW_-_-5ZM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gyoxN9Ipaz4:qSqW_-_-5ZM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1642629593925424396
title: Intel Adds Hardware-Enabled Ransomware Detection to 11th Gen vPro Chips
uri: Intel-Adds-Hardware-Enabled-Ransomware-Detection-to-11th-Gen-vPro-Chip
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1642629593925424396
content:
Intel and Cybereason have partnered to build anti-ransomware defenses into the chipmaker's newly announced 11th generation Core vPro business-class processors.
The hardware-based security enhancements are baked into Intel's vPro platform via its Hardware Shield and Threat Detection Technology (TDT), enabling profiling and detection of ransomware and other threats that have an impact on the CPU <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zlAYxBBZU_M:fKNZKx7wjkg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zlAYxBBZU_M:fKNZKx7wjkg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zlAYxBBZU_M:fKNZKx7wjkg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zlAYxBBZU_M:fKNZKx7wjkg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zlAYxBBZU_M:fKNZKx7wjkg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zlAYxBBZU_M:fKNZKx7wjkg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zlAYxBBZU_M:fKNZKx7wjkg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zlAYxBBZU_M:fKNZKx7wjkg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3215230389068174314
title: Experts Uncover Malware Attacks Against Colombian Government and Companies
uri: Experts-Uncover-Malware-Attacks-Against-Colombian-Government-and-Compa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3215230389068174314
content:
Cybersecurity researchers took the wraps off an ongoing surveillance campaign directed against Colombian government institutions and private companies in the energy and metallurgical industries.
In a report published by ESET on Tuesday, the Slovak internet security company said the attacks — dubbed "Operation Spalax" — began in 2020, with the modus operandi sharing some similarities to an APT <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B-rCnW8Yt8:ORhsuvrMKMU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B-rCnW8Yt8:ORhsuvrMKMU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B-rCnW8Yt8:ORhsuvrMKMU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_B-rCnW8Yt8:ORhsuvrMKMU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B-rCnW8Yt8:ORhsuvrMKMU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_B-rCnW8Yt8:ORhsuvrMKMU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B-rCnW8Yt8:ORhsuvrMKMU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_B-rCnW8Yt8:ORhsuvrMKMU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5016210173956513102
title: Researchers Disclose Undocumented Chinese Malware Used in Recent Attacks
uri: Researchers-Disclose-Undocumented-Chinese-Malware-Used-in-Recent-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5016210173956513102
content:
Cybersecurity researchers have disclosed a series of attacks by a threat actor of Chinese origin that has targeted organizations in Russia and Hong Kong with malware — including a previously undocumented backdoor.
Attributing the campaign to Winnti (or APT41), Positive Technologies dated the first attack to May 12, 2020, when the APT used LNK shortcuts to extract and run the malware payload. A <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ngop7H1Rsho:X16BJHQCYjA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ngop7H1Rsho:X16BJHQCYjA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ngop7H1Rsho:X16BJHQCYjA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ngop7H1Rsho:X16BJHQCYjA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ngop7H1Rsho:X16BJHQCYjA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ngop7H1Rsho:X16BJHQCYjA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ngop7H1Rsho:X16BJHQCYjA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ngop7H1Rsho:X16BJHQCYjA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3569254688463826706
title: Joker's Stash, The Largest Carding Marketplace, Announces Shutdown
uri: Joker-s-Stash-The-Largest-Carding-Marketplace-Announces-Shutdown
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3569254688463826706
content:
Joker's Stash, the largest dark web marketplace notorious for selling compromised payment card data, has announced plans to shut down its operations on February 15, 2021.
In a message board post on a Russian-language underground cybercrime forum, the operator of the site — who goes by the name "JokerStash" — said "it's time for us to leave forever" and that "we will never ever open again," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bK1Tdt4UhWI:3ueIB_hx-d8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bK1Tdt4UhWI:3ueIB_hx-d8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bK1Tdt4UhWI:3ueIB_hx-d8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bK1Tdt4UhWI:3ueIB_hx-d8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bK1Tdt4UhWI:3ueIB_hx-d8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bK1Tdt4UhWI:3ueIB_hx-d8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bK1Tdt4UhWI:3ueIB_hx-d8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bK1Tdt4UhWI:3ueIB_hx-d8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8335212923403322295
title: NSA Suggests Enterprises Use 'Designated' DNS-over-HTTPS' Resolvers
uri: NSA-Suggests-Enterprises-Use-Designated-DNS-over-HTTPS-Resolvers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8335212923403322295
content:
The U.S. National Security Agency (NSA) on Friday said DNS over HTTPS (DoH) — if configured appropriately in enterprise environments — can help prevent "numerous" initial access, command-and-control, and exfiltration techniques used by threat actors.
"DNS over Hypertext Transfer Protocol over Transport Layer Security (HTTPS), often referred to as DNS over HTTPS (DoH), encrypts DNS requests by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fgafY9kl7l8:Ya_Lr0Ou2us:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fgafY9kl7l8:Ya_Lr0Ou2us:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fgafY9kl7l8:Ya_Lr0Ou2us:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fgafY9kl7l8:Ya_Lr0Ou2us:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fgafY9kl7l8:Ya_Lr0Ou2us:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fgafY9kl7l8:Ya_Lr0Ou2us:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fgafY9kl7l8:Ya_Lr0Ou2us:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fgafY9kl7l8:Ya_Lr0Ou2us:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2474830939807115353
title: WhatsApp Delays Controversial 'Data-Sharing' Privacy Policy Update By 3 Months
uri: WhatsApp-Delays-Controversial-Data-Sharing-Privacy-Policy-Update-By
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2474830939807115353
content:
WhatsApp said on Friday that it wouldn't enforce its recently announced controversial data sharing policy update until May 15.
Originally set to go into effect next month on February 8, the three-month delay comes following "a lot of misinformation" about a revision to its privacy policy that allows WhatsApp to share data with Facebook, sparking widespread concerns about the exact kind of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49MjvX1o4oM:JGr2ALxrrRU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49MjvX1o4oM:JGr2ALxrrRU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49MjvX1o4oM:JGr2ALxrrRU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49MjvX1o4oM:JGr2ALxrrRU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49MjvX1o4oM:JGr2ALxrrRU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49MjvX1o4oM:JGr2ALxrrRU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49MjvX1o4oM:JGr2ALxrrRU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49MjvX1o4oM:JGr2ALxrrRU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4807784237911977096
title: Apple Removes macOS Feature That Allowed Apps to Bypass Firewall Security
uri: Apple-Removes-macOS-Feature-That-Allowed-Apps-to-Bypass-Firewall-Secur
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4807784237911977096
content:
Apple has removed a controversial feature from its macOS operating system that allowed the company's own first-party apps to bypass content filters, VPNs, and third-party firewalls.
Called "ContentFilterExclusionList," it included a list of as many as 50 Apple apps like iCloud, Maps, Music, FaceTime, HomeKit, the App Store, and its software update service that were routed through Network <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eu6wIQHUeXw:dlV7tX3-lus:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eu6wIQHUeXw:dlV7tX3-lus:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eu6wIQHUeXw:dlV7tX3-lus:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eu6wIQHUeXw:dlV7tX3-lus:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eu6wIQHUeXw:dlV7tX3-lus:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eu6wIQHUeXw:dlV7tX3-lus:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eu6wIQHUeXw:dlV7tX3-lus:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eu6wIQHUeXw:dlV7tX3-lus:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6909136539643348121
title: A Set of Severe Flaws Affect Popular DNSMasq DNS Forwarder
uri: A-Set-of-Severe-Flaws-Affect-Popular-DNSMasq-DNS-Forwarder
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6909136539643348121
content:
Cybersecurity researchers have uncovered multiple vulnerabilities in Dnsmasq, a popular open-source software used for caching Domain Name System (DNS) responses, thereby potentially allowing an adversary to mount DNS cache poisoning attacks and remotely execute malicious code.
The flaws, collectively called "DNSpooq" by Israeli research firm JSOF, echoes previously disclosed weaknesses in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sf3J0D9m78E:inT9C3H0xqM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sf3J0D9m78E:inT9C3H0xqM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sf3J0D9m78E:inT9C3H0xqM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sf3J0D9m78E:inT9C3H0xqM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sf3J0D9m78E:inT9C3H0xqM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sf3J0D9m78E:inT9C3H0xqM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sf3J0D9m78E:inT9C3H0xqM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sf3J0D9m78E:inT9C3H0xqM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4169984526956324597
title: New Educational Video Series for CISOs with Small Security Teams
uri: New-Educational-Video-Series-for-CISOs-with-Small-Security-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4169984526956324597
content:
Cybersecurity is hard. For a CISO that faces the cyber threat landscape with a small security team, the challenge is compounded.
Compared to CISOs at large enterprises, CISOs small to medium-sized enterprises (SMEs) have smaller teams with less expertise, smaller budgets for technology and outside services, and are more involved in day-to-day protection activities. 
CISOs at SMEs are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1vy4oyuKaFo:Wly1-Vl09tU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1vy4oyuKaFo:Wly1-Vl09tU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1vy4oyuKaFo:Wly1-Vl09tU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1vy4oyuKaFo:Wly1-Vl09tU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1vy4oyuKaFo:Wly1-Vl09tU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1vy4oyuKaFo:Wly1-Vl09tU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1vy4oyuKaFo:Wly1-Vl09tU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1vy4oyuKaFo:Wly1-Vl09tU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5063392794231707147
title: FreakOut! Ongoing Botnet Attack Exploiting Recent Linux Vulnerabilities
uri: FreakOut-Ongoing-Botnet-Attack-Exploiting-Recent-Linux-Vulnerabilitie
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5063392794231707147
content:
An ongoing malware campaign has been found exploiting recently disclosed vulnerabilities in Linux devices to co-opt the systems into an IRC botnet for launching distributed denial-of-service (DDoS) attacks and mining Monero cryptocurrency.
The attacks involve a new malware variant called "FreakOut" that leverages newly patched flaws in TerraMaster, Laminas Project (formerly Zend Framework), and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XiqkA-hTYq4:FkoyqTA-FIk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XiqkA-hTYq4:FkoyqTA-FIk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XiqkA-hTYq4:FkoyqTA-FIk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XiqkA-hTYq4:FkoyqTA-FIk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XiqkA-hTYq4:FkoyqTA-FIk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XiqkA-hTYq4:FkoyqTA-FIk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XiqkA-hTYq4:FkoyqTA-FIk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XiqkA-hTYq4:FkoyqTA-FIk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7088591775286238102
title: Researchers Discover Raindrop — 4th Malware Linked to the SolarWinds Attack
uri: Researchers-Discover-Raindrop-4th-Malware-Linked-to-the-SolarWinds
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7088591775286238102
content:
Cybersecurity researchers have unearthed a fourth new malware strain—designed to spread the malware onto other computers in victims' networks—which was deployed as part of the SolarWinds supply chain attack disclosed late last year.
Dubbed "Raindrop" by Broadcom-owned Symantec, the malware joins the likes of other malicious implants such as Sunspot, Sunburst (or Solorigate), and Teardrop that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6AQYcEfo6Q:Fdk_GJOY6gk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6AQYcEfo6Q:Fdk_GJOY6gk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6AQYcEfo6Q:Fdk_GJOY6gk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h6AQYcEfo6Q:Fdk_GJOY6gk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6AQYcEfo6Q:Fdk_GJOY6gk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h6AQYcEfo6Q:Fdk_GJOY6gk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6AQYcEfo6Q:Fdk_GJOY6gk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h6AQYcEfo6Q:Fdk_GJOY6gk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9168360455359766186
title: SolarWinds Hackers Also Breached Malwarebytes Cybersecurity Firm
uri: SolarWinds-Hackers-Also-Breached-Malwarebytes-Cybersecurity-Firm
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9168360455359766186
content:
Malwarebytes on Tuesday said it was breached by the same group who broke into SolarWinds to access some of its internal emails, making it the fourth major cybersecurity vendor to be targeted after FireEye, Microsoft, and CrowdStrike.
The company said its intrusion was not the result of a SolarWinds compromise, but rather due to a separate initial access vector that works by "abusing applications<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7-FSAxpL2Vo:oP3QRSl4LSc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7-FSAxpL2Vo:oP3QRSl4LSc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7-FSAxpL2Vo:oP3QRSl4LSc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7-FSAxpL2Vo:oP3QRSl4LSc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7-FSAxpL2Vo:oP3QRSl4LSc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7-FSAxpL2Vo:oP3QRSl4LSc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7-FSAxpL2Vo:oP3QRSl4LSc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7-FSAxpL2Vo:oP3QRSl4LSc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-311428537474234826
title: Google Discloses Flaws in Signal, FB Messenger, JioChat Messaging Apps
uri: Google-Discloses-Flaws-in-Signal-FB-Messenger-JioChat-Messaging-Apps
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/311428537474234826
content:
In January 2019, a critical flaw was reported in Apple's FaceTime group chats feature that made it possible for users to initiate a FaceTime video call and eavesdrop on targets by adding their own number as a third person in a group chat even before the person on the other end accepted the incoming call.
The vulnerability was deemed so severe that the iPhone maker removed the FaceTime group <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTC5_wVfLdk:bhkYhrB0Z20:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTC5_wVfLdk:bhkYhrB0Z20:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTC5_wVfLdk:bhkYhrB0Z20:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTC5_wVfLdk:bhkYhrB0Z20:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTC5_wVfLdk:bhkYhrB0Z20:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTC5_wVfLdk:bhkYhrB0Z20:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTC5_wVfLdk:bhkYhrB0Z20:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTC5_wVfLdk:bhkYhrB0Z20:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7588625302293125343
title: Here's How SolarWinds Hackers Stayed Undetected for Long Enough
uri: Here-s-How-SolarWinds-Hackers-Stayed-Undetected-for-Long-Enough
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7588625302293125343
content:
Microsoft on Wednesday shared more specifics about the tactics, techniques, and procedures (TTPs) adopted by the attackers behind the SolarWinds hack to stay under the radar and avoid detection, as cybersecurity companies work towards getting a "clearer picture" of one of the most sophisticated attacks in recent history.
Calling the threat actor "skillful and methodic operators who follow <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dtXPu-a78_E:R7oSY7YVDGI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dtXPu-a78_E:R7oSY7YVDGI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dtXPu-a78_E:R7oSY7YVDGI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dtXPu-a78_E:R7oSY7YVDGI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dtXPu-a78_E:R7oSY7YVDGI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dtXPu-a78_E:R7oSY7YVDGI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dtXPu-a78_E:R7oSY7YVDGI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dtXPu-a78_E:R7oSY7YVDGI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5551162474305835808
title: Importance of Application Security and Customer Data Protection to a Startup
uri: Importance-of-Application-Security-and-Customer-Data-Protection-to-a-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5551162474305835808
content:
When you are a startup, there are umpteen things that demand your attention. You must give your hundred percent (probably even more!) to work effectively and efficiently with the limited resources.
Understandably, the application security importance may be pushed at the bottom of your things-to-do list. One other reason to ignore web application protectioncould be your belief that only large <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6g19NHHHDrE:xzxFKo5zS68:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6g19NHHHDrE:xzxFKo5zS68:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6g19NHHHDrE:xzxFKo5zS68:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6g19NHHHDrE:xzxFKo5zS68:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6g19NHHHDrE:xzxFKo5zS68:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6g19NHHHDrE:xzxFKo5zS68:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6g19NHHHDrE:xzxFKo5zS68:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6g19NHHHDrE:xzxFKo5zS68:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2945353177211164891
title: Hackers Accidentally Expose Passwords Stolen From Businesses On the Internet
uri: Hackers-Accidentally-Expose-Passwords-Stolen-From-Businesses-On-the-In
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2945353177211164891
content:
A new large-scale phishing campaign targeting global organizations has been found to bypass Microsoft Office 365 Advanced Threat Protection (ATP) and steal credentials belonging to over a thousand corporate employees.
The cyber offensive is said to have originated in August last year, with the attacks aimed specifically at energy and construction companies, said researchers from Check Point <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yBgHdlhIUcQ:VA_he3wAsdA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yBgHdlhIUcQ:VA_he3wAsdA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yBgHdlhIUcQ:VA_he3wAsdA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yBgHdlhIUcQ:VA_he3wAsdA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yBgHdlhIUcQ:VA_he3wAsdA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yBgHdlhIUcQ:VA_he3wAsdA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yBgHdlhIUcQ:VA_he3wAsdA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yBgHdlhIUcQ:VA_he3wAsdA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3091845217730549715
title: MrbMiner Crypto-Mining Malware Links to Iranian Software Company
uri: MrbMiner-Crypto-Mining-Malware-Links-to-Iranian-Software-Company
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3091845217730549715
content:
A relatively new crypto-mining malware that surfaced last year and infected thousands of Microsoft SQL Server (MSSQL) databases has now been linked to a small software development company based in Iran.
The attribution was made possible due to an operational security oversight, said researchers from cybersecurity firm Sophos, that led to the company's name inadvertently making its way into the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6uwtXA7Schs:-ETuU1zLl4g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6uwtXA7Schs:-ETuU1zLl4g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6uwtXA7Schs:-ETuU1zLl4g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6uwtXA7Schs:-ETuU1zLl4g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6uwtXA7Schs:-ETuU1zLl4g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6uwtXA7Schs:-ETuU1zLl4g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6uwtXA7Schs:-ETuU1zLl4g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6uwtXA7Schs:-ETuU1zLl4g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1586805792972012454
title: Sharing eBook With Your Kindle Could Have Let Hackers Hijack Your Account
uri: Sharing-eBook-With-Your-Kindle-Could-Have-Let-Hackers-Hijack-Your-Acco
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1586805792972012454
content:
Amazon has addressed a number of flaws in its Kindle e-reader platform that could have allowed an attacker to take control of victims' devices by simply sending them a malicious e-book.
Dubbed "KindleDrip," the exploit chain takes advantage of a feature called "Send to Kindle" to send a malware-laced document to a Kindle device that, when opened, could be leveraged to remotely execute arbitrary <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mNLJHaEbopY:JngYQj4k5VA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mNLJHaEbopY:JngYQj4k5VA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mNLJHaEbopY:JngYQj4k5VA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mNLJHaEbopY:JngYQj4k5VA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mNLJHaEbopY:JngYQj4k5VA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mNLJHaEbopY:JngYQj4k5VA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mNLJHaEbopY:JngYQj4k5VA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mNLJHaEbopY:JngYQj4k5VA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1273020224444105347
title: Missing Link in a 'Zero Trust' Security Model—The Device You're Connecting With!
uri: Missing-Link-in-a-Zero-Trust-Security-Model-The-Device-You-re-Conn
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1273020224444105347
content:
Like it or not, 2020 was the year that proved that teams could work from literally anywhere.
While terms like "flex work" and "WFH" were thrown around before COVID-19 came around, thanks to the pandemic, remote working has become the defacto way people work nowadays. Today, digital-based work interactions take the place of in-person ones with near-seamless fluidity, and the best part is that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=22CA9MHcOlg:X9pyEz1XWhU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=22CA9MHcOlg:X9pyEz1XWhU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=22CA9MHcOlg:X9pyEz1XWhU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=22CA9MHcOlg:X9pyEz1XWhU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=22CA9MHcOlg:X9pyEz1XWhU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=22CA9MHcOlg:X9pyEz1XWhU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=22CA9MHcOlg:X9pyEz1XWhU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=22CA9MHcOlg:X9pyEz1XWhU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4852948869485867956
title: Exclusive: SonicWall Hacked Using 0-Day Bugs In Its Own VPN Product
uri: Exclusive-SonicWall-Hacked-Using-0-Day-Bugs-In-Its-Own-VPN-Product
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4852948869485867956
content:
SonicWall, a popular internet security provider of firewall and VPN products, on late Friday disclosed that it fell victim to a coordinated attack on its internal systems.

The San Jose-based company said the attacks leveraged zero-day vulnerabilities in SonicWall secure remote access products such as NetExtender VPN client version 10.x and Secure Mobile Access (SMA) that are used to provide <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6gzDl6VnPMo:mEx_DwWBZOY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6gzDl6VnPMo:mEx_DwWBZOY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6gzDl6VnPMo:mEx_DwWBZOY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6gzDl6VnPMo:mEx_DwWBZOY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6gzDl6VnPMo:mEx_DwWBZOY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6gzDl6VnPMo:mEx_DwWBZOY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6gzDl6VnPMo:mEx_DwWBZOY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6gzDl6VnPMo:mEx_DwWBZOY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5453963170415414850
title: Beware! Fully-Functional Released Online for SAP Solution Manager Flaw
uri: Beware-Fully-Functional-Released-Online-for-SAP-Solution-Manager-Flaw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5453963170415414850
content:
Cybersecurity researchers have warned of a publicly available fully-functional exploit that could be used to target SAP enterprise software.
The exploit leverages a vulnerability, tracked as CVE-2020-6207, that stems from a missing authentication check in SAP Solution Manager (SolMan) version 7.2
SAP SolMan is an application management and administration solution that offers end-to-end <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56Qi1uCspdg:k7Fsl-Tn5Q4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56Qi1uCspdg:k7Fsl-Tn5Q4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56Qi1uCspdg:k7Fsl-Tn5Q4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=56Qi1uCspdg:k7Fsl-Tn5Q4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56Qi1uCspdg:k7Fsl-Tn5Q4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=56Qi1uCspdg:k7Fsl-Tn5Q4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56Qi1uCspdg:k7Fsl-Tn5Q4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=56Qi1uCspdg:k7Fsl-Tn5Q4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3442931565856578256
title: Experts Detail A Recent Remotely Exploitable Windows Vulnerability
uri: Experts-Detail-A-Recent-Remotely-Exploitable-Windows-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3442931565856578256
content:
More details have emerged about a security feature bypass vulnerability in Windows NT LAN Manager (NTLM) that was addressed by Microsoft as part of its monthly Patch Tuesday updates earlier this month.
The flaw, tracked as CVE-2021-1678 (CVSS score 4.3), was described as a "remotely exploitable" flaw found in a vulnerable component bound to the network stack, although exact details of the flaw <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxzCssR4jMw:toQEOEjH_lE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxzCssR4jMw:toQEOEjH_lE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxzCssR4jMw:toQEOEjH_lE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RxzCssR4jMw:toQEOEjH_lE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxzCssR4jMw:toQEOEjH_lE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RxzCssR4jMw:toQEOEjH_lE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxzCssR4jMw:toQEOEjH_lE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RxzCssR4jMw:toQEOEjH_lE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9083435144993883107
title: Beware — A New Wormable Android Malware Spreading Through WhatsApp
uri: Beware-A-New-Wormable-Android-Malware-Spreading-Through-WhatsApp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9083435144993883107
content:
A newly discovered Android malware has been found to propagate itself through WhatsApp messages to other contacts in order to expand what appears to be an adware campaign.
"This malware spreads via victim's WhatsApp by automatically replying to any received WhatsApp message notification with a link to [a] malicious Huawei Mobile app," ESET researcher Lukas Stefanko said.
The link to the fake <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9miyP-9yYh8:-TMo-BDjxjw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9miyP-9yYh8:-TMo-BDjxjw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9miyP-9yYh8:-TMo-BDjxjw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9miyP-9yYh8:-TMo-BDjxjw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9miyP-9yYh8:-TMo-BDjxjw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9miyP-9yYh8:-TMo-BDjxjw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9miyP-9yYh8:-TMo-BDjxjw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9miyP-9yYh8:-TMo-BDjxjw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2006645590050936906
title: Pen Testing By Numbers: Tracking Pen Testing Trends and Challenges
uri: Pen-Testing-By-Numbers-Tracking-Pen-Testing-Trends-and-Challenges
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2006645590050936906
content:
Over the years, penetration testing has had to change and adapt alongside the IT environments and technology that need to be assessed.
Broad cybersecurity issues often influence the strategy and growth of pen-testing. In such a fast-paced field, organizations get real value from learning about others' penetration testing experiences, identifying trends, and the role they play in today's threat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y0fYL6XB7aM:JwKUmEETrXg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y0fYL6XB7aM:JwKUmEETrXg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y0fYL6XB7aM:JwKUmEETrXg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y0fYL6XB7aM:JwKUmEETrXg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y0fYL6XB7aM:JwKUmEETrXg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y0fYL6XB7aM:JwKUmEETrXg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y0fYL6XB7aM:JwKUmEETrXg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y0fYL6XB7aM:JwKUmEETrXg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8309258188569640142
title: Enhancing Email Security with MTA-STS and SMTP TLS Reporting
uri: Enhancing-Email-Security-with-MTA-STS-and-SMTP-TLS-Reporting
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8309258188569640142
content:
In 1982, when SMTP was first specified, it did not contain any mechanism for providing security at the transport level to secure communications between mail transfer agents.
Later, in 1999, the STARTTLS command was added to SMTP that in turn supported the encryption of emails in between the servers, providing the ability to convert a non-secure connection into a secure one that is encrypted <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6N4bDCgObX0:HSwuMpQraU0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6N4bDCgObX0:HSwuMpQraU0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6N4bDCgObX0:HSwuMpQraU0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6N4bDCgObX0:HSwuMpQraU0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6N4bDCgObX0:HSwuMpQraU0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6N4bDCgObX0:HSwuMpQraU0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6N4bDCgObX0:HSwuMpQraU0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6N4bDCgObX0:HSwuMpQraU0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3441659947444139166
title: N. Korean Hackers Targeting Security Experts to Steal Undisclosed Researches
uri: N-Korean-Hackers-Targeting-Security-Experts-to-Steal-Undisclosed-Rese
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3441659947444139166
content:
Google on Monday disclosed details about an ongoing campaign carried out by a government-backed threat actor from North Korea that has targeted security researchers working on vulnerability research and development.
The internet giant's Threat Analysis Group (TAG) said the adversary created a research blog and multiple profiles on various social media platforms such as Twitter, Twitter, LinkedIn<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dnnh-2bV084:ZPjdh-jtorc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dnnh-2bV084:ZPjdh-jtorc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dnnh-2bV084:ZPjdh-jtorc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dnnh-2bV084:ZPjdh-jtorc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dnnh-2bV084:ZPjdh-jtorc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dnnh-2bV084:ZPjdh-jtorc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dnnh-2bV084:ZPjdh-jtorc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dnnh-2bV084:ZPjdh-jtorc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6236107283311467519
title: Targeted Phishing Attacks Target High-Ranking Company Executives
uri: Targeted-Phishing-Attacks-Target-High-Ranking-Company-Executives
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6236107283311467519
content:
An evolving phishing campaign observed at least since May 2020 has been found to target high-ranking company executives across manufacturing, real estate, finance, government, and technological sectors with the goal of obtaining sensitive information.
The campaign hinges on a social engineering trick that involves sending emails to potential victims containing fake Office 365 password expiration<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HuwFrzJ502Y:zXLCBOd1sNY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HuwFrzJ502Y:zXLCBOd1sNY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HuwFrzJ502Y:zXLCBOd1sNY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HuwFrzJ502Y:zXLCBOd1sNY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HuwFrzJ502Y:zXLCBOd1sNY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HuwFrzJ502Y:zXLCBOd1sNY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HuwFrzJ502Y:zXLCBOd1sNY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HuwFrzJ502Y:zXLCBOd1sNY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6398031627420435556
title: TikTok Bug Could Have Exposed Users' Profile Data and Phone Numbers
uri: TikTok-Bug-Could-Have-Exposed-Users-Profile-Data-and-Phone-Numbers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6398031627420435556
content:
Cybersecurity researchers on Tuesday disclosed a now-patched security flaw in TikTok that could have potentially enabled an attacker to build a database of the app's users and their associated phone numbers for future malicious activity.
Although this flaw only impacts those users who have linked a phone number with their account or logged in with a phone number, successful exploitation of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmPhl6j0G-k:t16hcL3HQd0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmPhl6j0G-k:t16hcL3HQd0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmPhl6j0G-k:t16hcL3HQd0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QmPhl6j0G-k:t16hcL3HQd0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmPhl6j0G-k:t16hcL3HQd0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QmPhl6j0G-k:t16hcL3HQd0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmPhl6j0G-k:t16hcL3HQd0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QmPhl6j0G-k:t16hcL3HQd0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3716218181278311251
title: vCISO Shares Most Common Risks Faced by Companies With Small Security Teams
uri: vCISO-Shares-Most-Common-Risks-Faced-by-Companies-With-Small-Security
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3716218181278311251
content:
Most companies with small security teams face the same issues. They have inadequate budgets, inadequate staff, and inadequate skills to face today's onslaught of sophisticated cyberthreats.
Many of these companies turn to virtual CISOs (vCISOs) to provide security expertise and guidance. vCISOs are typically former CISOs with years of experience building and managing information security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=huwyIfSq0cM:r1X2Iz6gDZg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=huwyIfSq0cM:r1X2Iz6gDZg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=huwyIfSq0cM:r1X2Iz6gDZg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=huwyIfSq0cM:r1X2Iz6gDZg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=huwyIfSq0cM:r1X2Iz6gDZg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=huwyIfSq0cM:r1X2Iz6gDZg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=huwyIfSq0cM:r1X2Iz6gDZg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=huwyIfSq0cM:r1X2Iz6gDZg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-136087123535224132
title: Apple Warns of 3 iOS Zero-Day Security Vulnerabilities Exploited in the Wild
uri: Apple-Warns-of-3-iOS-Zero-Day-Security-Vulnerabilities-Exploited-in-th
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/136087123535224132
content:
Apple on Tuesday released updates for iOS, iPadOS, and tvOS with fixes for three security vulnerabilities that it says may have been actively exploited in the wild.
Reported by an anonymous researcher, the three zero-day flaws — CVE-2021-1782, CVE-2021-1870, and CVE-2021-1871 — could have allowed an attacker to elevate privileges and achieve remote code execution.
The iPhone maker did not <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jn5sjgwdxxQ:W3_qKEHaIyw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jn5sjgwdxxQ:W3_qKEHaIyw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jn5sjgwdxxQ:W3_qKEHaIyw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jn5sjgwdxxQ:W3_qKEHaIyw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jn5sjgwdxxQ:W3_qKEHaIyw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jn5sjgwdxxQ:W3_qKEHaIyw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jn5sjgwdxxQ:W3_qKEHaIyw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jn5sjgwdxxQ:W3_qKEHaIyw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-971749047561509091
title: In the Wake of the SolarWinds Hack, Here's How Businesses Should Respond
uri: In-the-Wake-of-the-SolarWinds-Hack-Here-s-How-Businesses-Should-Respo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/971749047561509091
content:
Throughout 2020, businesses, in general, have had their hands full with IT challenges. They had to rush to accommodate a sudden shift to remote work. Then they had to navigate a rapid adoption of automation technologies.
And as the year came to a close, more businesses began trying to assemble the safety infrastructure required to return to some semblance of normal in 2021.
But at the end of the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dAK82hepHRk:Q_9IjviWB7c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dAK82hepHRk:Q_9IjviWB7c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dAK82hepHRk:Q_9IjviWB7c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dAK82hepHRk:Q_9IjviWB7c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dAK82hepHRk:Q_9IjviWB7c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dAK82hepHRk:Q_9IjviWB7c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dAK82hepHRk:Q_9IjviWB7c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dAK82hepHRk:Q_9IjviWB7c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8782039115061496232
title: Top Cyber Attacks of 2020
uri: Top-Cyber-Attacks-of-2020
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8782039115061496232
content:
With so much of the world transitioning to working, shopping, studying, and streaming online during the coronavirus pandemic, cybercriminals now have access to a larger base of potential victims than ever before.
"Zoombomb" became the new photobomb—hackers would gain access to a private meeting or online class hosted on Zoom and shout profanities and racial slurs or flash pornographic images. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k5CJzJEY-n0:U5UZQmucd3s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k5CJzJEY-n0:U5UZQmucd3s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k5CJzJEY-n0:U5UZQmucd3s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k5CJzJEY-n0:U5UZQmucd3s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k5CJzJEY-n0:U5UZQmucd3s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k5CJzJEY-n0:U5UZQmucd3s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k5CJzJEY-n0:U5UZQmucd3s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k5CJzJEY-n0:U5UZQmucd3s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3272870566459869401
title: Using the Manager Attribute in Active Directory (AD) for Password Resets
uri: Using-the-Manager-Attribute-in-Active-Directory-(AD)-for-Password-Rese
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3272870566459869401
content:
Creating workflows around verifying password resets can be challenging for organizations, especially since many have shifted work due to the COVID-19 global pandemic.
With the numbers of cyberattacks against businesses exploding and compromised credentials often being the culprit, companies have to bolster security around resetting passwords on user accounts.
How can organizations bolster the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yaql6jCSb-4:sIANpB6cSVc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yaql6jCSb-4:sIANpB6cSVc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yaql6jCSb-4:sIANpB6cSVc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yaql6jCSb-4:sIANpB6cSVc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yaql6jCSb-4:sIANpB6cSVc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yaql6jCSb-4:sIANpB6cSVc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yaql6jCSb-4:sIANpB6cSVc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yaql6jCSb-4:sIANpB6cSVc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6748914712539663981
title: New Attack Could Let Remote Hackers Target Devices On Internal Networks
uri: New-Attack-Could-Let-Remote-Hackers-Target-Devices-On-Internal-Network
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6748914712539663981
content:
A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research.
Detailed by enterprise IoT security firm Armis, the new attack (CVE-2020-16043 and CVE-2021-23961) builds on the previously disclosed technique to bypass routers and firewalls and reach any unmanaged device within the internal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UVbjp-i8pdo:ds-XZgyWi60:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UVbjp-i8pdo:ds-XZgyWi60:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UVbjp-i8pdo:ds-XZgyWi60:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UVbjp-i8pdo:ds-XZgyWi60:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UVbjp-i8pdo:ds-XZgyWi60:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UVbjp-i8pdo:ds-XZgyWi60:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UVbjp-i8pdo:ds-XZgyWi60:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UVbjp-i8pdo:ds-XZgyWi60:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3972786679311099064
title: New Docker Container Escape Bug Affects Microsoft Azure Functions
uri: New-Docker-Container-Escape-Bug-Affects-Microsoft-Azure-Functions
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3972786679311099064
content:
Cybersecurity researcher Paul Litvak today disclosed an unpatched vulnerability in Microsoft Azure Functions that could be used by an attacker to escalate privileges and escape the Docker container used for hosting them.
The findings come as part of Intezer Lab's investigations into the Azure compute infrastructure.
Following disclosure to Microsoft, the Windows maker is said to have "determined<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kcB0bcDXYis:qKDpAUWKRT0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kcB0bcDXYis:qKDpAUWKRT0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kcB0bcDXYis:qKDpAUWKRT0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kcB0bcDXYis:qKDpAUWKRT0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kcB0bcDXYis:qKDpAUWKRT0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kcB0bcDXYis:qKDpAUWKRT0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kcB0bcDXYis:qKDpAUWKRT0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kcB0bcDXYis:qKDpAUWKRT0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1112405642201416223
title: Warning Issued Over Hackable ADT's LifeShield Home Security Cameras
uri: Warning-Issued-Over-Hackable-ADT-s-LifeShield-Home-Security-Cameras
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1112405642201416223
content:
Newly discovered security vulnerabilities in ADT's Blue (formerly LifeShield) home security cameras could have been exploited to hijack both audio and video streams.
The vulnerabilities (tracked as CVE-2020-8101) were identified in the video doorbell camera by Bitdefender researchers in February 2020 before they were eventually addressed on August 17, 2020.
LifeShield was acquired by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hAEyt21eix0:Fe8pKHStZRk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hAEyt21eix0:Fe8pKHStZRk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hAEyt21eix0:Fe8pKHStZRk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hAEyt21eix0:Fe8pKHStZRk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hAEyt21eix0:Fe8pKHStZRk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hAEyt21eix0:Fe8pKHStZRk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hAEyt21eix0:Fe8pKHStZRk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hAEyt21eix0:Fe8pKHStZRk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1575444969861123092
title: European Authorities Disrupt Emotet — World's Most Dangerous Malware
uri: European-Authorities-Disrupt-Emotet-World-s-Most-Dangerous-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1575444969861123092
content:
Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet, a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade.
The coordinated takedown of the botnet on Tuesday — dubbed "Operation Ladybird" — is the result of a joint effort between authorities in the Netherlands, Germany, the U.S.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T2DuvLIIwjA:vQ2VjrwFiY0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T2DuvLIIwjA:vQ2VjrwFiY0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T2DuvLIIwjA:vQ2VjrwFiY0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T2DuvLIIwjA:vQ2VjrwFiY0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T2DuvLIIwjA:vQ2VjrwFiY0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T2DuvLIIwjA:vQ2VjrwFiY0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T2DuvLIIwjA:vQ2VjrwFiY0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T2DuvLIIwjA:vQ2VjrwFiY0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1143495193523058622
title: Authorities Seize Dark-Web Site Linked to the Netwalker Ransomware
uri: Authorities-Seize-Dark-Web-Site-Linked-to-the-Netwalker-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1143495193523058622
content:
U.S. and Bulgarian authorities this week took control of the dark web site used by the NetWalker ransomware cybercrime group to publish data stolen from its victims.
"We are striking back against the growing threat of ransomware by not only bringing criminal charges against the responsible actors, but also disrupting criminal online infrastructure and, wherever possible, recovering ransom <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ms_hqEn9BWI:YNUX5Y5XK1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ms_hqEn9BWI:YNUX5Y5XK1A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ms_hqEn9BWI:YNUX5Y5XK1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ms_hqEn9BWI:YNUX5Y5XK1A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ms_hqEn9BWI:YNUX5Y5XK1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ms_hqEn9BWI:YNUX5Y5XK1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ms_hqEn9BWI:YNUX5Y5XK1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ms_hqEn9BWI:YNUX5Y5XK1A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5343740597018134502
title: Italy CERT Warns of a New Credential Stealing Android Malware
uri: Italy-CERT-Warns-of-a-New-Credential-Stealing-Android-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5343740597018134502
content:
Researchers have disclosed a new family of Android malware that abuses accessibility services in the device to hijack user credentials and record audio and video.
Dubbed "Oscorp" by Italy's CERT-AGID, the malware "induce(s) the user to install an accessibility service with which [the attackers] can read what is present and what is typed on the screen."
So named because of the title of the login <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=REYXUNIm2-g:nA4C5E6WEZM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=REYXUNIm2-g:nA4C5E6WEZM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=REYXUNIm2-g:nA4C5E6WEZM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=REYXUNIm2-g:nA4C5E6WEZM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=REYXUNIm2-g:nA4C5E6WEZM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=REYXUNIm2-g:nA4C5E6WEZM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=REYXUNIm2-g:nA4C5E6WEZM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=REYXUNIm2-g:nA4C5E6WEZM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7544009066845242996
title: Hezbollah Hacker Group Targeted Telecoms, Hosting, ISPs Worldwide
uri: Hezbollah-Hacker-Group-Targeted-Telecoms-Hosting-ISPs-Worldwide
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7544009066845242996
content:
A "persistent attacker group" with alleged ties to Hezbollah has retooled its malware arsenal with a new version of a remote access Trojan (RAT) to break into companies worldwide and extract valuable information.
In a new report published by the ClearSky research team on Thursday, the Israeli cybersecurity firm said it identified at least 250 public-facing web servers since early 2020 that have <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QN-avU6vY4g:HFen0XCJzMg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QN-avU6vY4g:HFen0XCJzMg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QN-avU6vY4g:HFen0XCJzMg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QN-avU6vY4g:HFen0XCJzMg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QN-avU6vY4g:HFen0XCJzMg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QN-avU6vY4g:HFen0XCJzMg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QN-avU6vY4g:HFen0XCJzMg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QN-avU6vY4g:HFen0XCJzMg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2357401370715197924
title: New CISOs Survey Reveals How Small Cybersecurity Teams Can Confront 2021
uri: New-CISOs-Survey-Reveals-How-Small-Cybersecurity-Teams-Can-Confront-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2357401370715197924
content:
The pressure on small to medium-sized enterprises to protect their organizations against cyberthreats is astronomical. These businesses face the same threats as the largest enterprises, experience the same (relative) damages and consequences when breaches occur as the largest enterprises but are forced to protect their organizations with a fraction of the resources as the largest enterprises. 
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xU8qbs9aeys:vVKsrb8j1rk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xU8qbs9aeys:vVKsrb8j1rk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xU8qbs9aeys:vVKsrb8j1rk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xU8qbs9aeys:vVKsrb8j1rk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xU8qbs9aeys:vVKsrb8j1rk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xU8qbs9aeys:vVKsrb8j1rk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xU8qbs9aeys:vVKsrb8j1rk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xU8qbs9aeys:vVKsrb8j1rk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2754049317075979859
title: Google uncovers new iOS security feature Apple quietly added after zero-day attacks
uri: Google-uncovers-new-iOS-security-feature-Apple-quietly-added-after-zer
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2754049317075979859
content:
Google Project Zero on Thursday disclosed details of a new security mechanism that Apple quietly added to iOS 14 as a countermeasure to prevent attacks that were recently found to leverage zero-days in its messaging app.
Dubbed "BlastDoor," the improved sandbox system for iMessage data was disclosed by Samuel Groß, a security researcher with Project Zero, a team of security researchers at Google<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HgNyP2-PuoY:ocnAm8M12nQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HgNyP2-PuoY:ocnAm8M12nQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HgNyP2-PuoY:ocnAm8M12nQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HgNyP2-PuoY:ocnAm8M12nQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HgNyP2-PuoY:ocnAm8M12nQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HgNyP2-PuoY:ocnAm8M12nQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HgNyP2-PuoY:ocnAm8M12nQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HgNyP2-PuoY:ocnAm8M12nQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7779153636326504178
title: Google Discloses Severe Bug in Libgcrypt Encryption Library—Impacting Many Projects
uri: Google-Discloses-Severe-Bug-in-Libgcrypt-Encryption-Library-Impactin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7779153636326504178
content:
A "severe" vulnerability in GNU Privacy Guard (GnuPG)'s Libgcrypt encryption software could have allowed an attacker to write arbitrary data to the target machine, potentially leading to remote code execution.
The flaw, which affects version 1.9.0 of libgcrypt, was discovered on January 28 by Tavis Ormandy of Project Zero, a security research unit within Google dedicated to finding zero-day bugs<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nVPtX4j7gNI:dEwrxIWnDW0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nVPtX4j7gNI:dEwrxIWnDW0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nVPtX4j7gNI:dEwrxIWnDW0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nVPtX4j7gNI:dEwrxIWnDW0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nVPtX4j7gNI:dEwrxIWnDW0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nVPtX4j7gNI:dEwrxIWnDW0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nVPtX4j7gNI:dEwrxIWnDW0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nVPtX4j7gNI:dEwrxIWnDW0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9177557394052892910
title: A New Software Supply‑Chain Attack Targeted Millions With Spyware
uri: A-New-Software-Supply-Chain-Attack-Targeted-Millions-With-Spyware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9177557394052892910
content:
Cybersecurity researchers today disclosed a new supply chain attack compromising the update mechanism of NoxPlayer, a free Android emulator for PCs and Macs.
Dubbed "Operation NightScout" by Slovak cybersecurity firm ESET, the highly-targeted surveillance campaign involved distributing three different malware families via tailored malicious updates to selected victims based in Taiwan, Hong Kong,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AUv4_yxnAu8:PJz8jVA2j04:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AUv4_yxnAu8:PJz8jVA2j04:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AUv4_yxnAu8:PJz8jVA2j04:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AUv4_yxnAu8:PJz8jVA2j04:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AUv4_yxnAu8:PJz8jVA2j04:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AUv4_yxnAu8:PJz8jVA2j04:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AUv4_yxnAu8:PJz8jVA2j04:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AUv4_yxnAu8:PJz8jVA2j04:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3118858170746067500
title: LIVE Webinar: Major Lessons to be Learned from Top Cyber Attacks in 2020
uri: LIVE-Webinar-Major-Lessons-to-be-Learned-from-Top-Cyber-Attacks-in-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3118858170746067500
content:
We likely all agree that 2020 was a year we won't soon forget - for many reasons. One area particularly impacted last year was (and continues to be) cybersecurity. 
While Internet access allowed many businesses to continue functioning during the COVID-19 stay at home requirements, the unprecedented number of people accessing company assets remotely introduced many new challenges for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8hS6DDeGt_U:SIR0pBZ9270:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8hS6DDeGt_U:SIR0pBZ9270:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8hS6DDeGt_U:SIR0pBZ9270:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8hS6DDeGt_U:SIR0pBZ9270:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8hS6DDeGt_U:SIR0pBZ9270:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8hS6DDeGt_U:SIR0pBZ9270:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8hS6DDeGt_U:SIR0pBZ9270:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8hS6DDeGt_U:SIR0pBZ9270:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7957909119601655724
title: New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers
uri: New-Cryptojacking-Malware-Targeting-Apache-Oracle-Redis-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7957909119601655724
content:
A financially-motivated threat actor notorious for its cryptojacking attacks has leveraged a revised version of their malware to target cloud infrastructures using vulnerabilities in web server technologies, according to new research.
Deployed by the China-based cybercrime group Rocke, the Pro-Ocean cryptojacking malware now comes with improved rootkit and worm capabilities, as well as harbors <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j5O_XD1jTuY:MgYTbr61zYs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j5O_XD1jTuY:MgYTbr61zYs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j5O_XD1jTuY:MgYTbr61zYs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j5O_XD1jTuY:MgYTbr61zYs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j5O_XD1jTuY:MgYTbr61zYs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j5O_XD1jTuY:MgYTbr61zYs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j5O_XD1jTuY:MgYTbr61zYs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j5O_XD1jTuY:MgYTbr61zYs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-754612289364638052
title: Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices
uri: Hackers-Exploiting-Critical-Zero-Day-Bug-in-SonicWall-SMA-100-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/754612289364638052
content:
SonicWall on Monday warned of active exploitation attempts against a zero-day vulnerability in its Secure Mobile Access (SMA) 100 series devices.
The flaw, which affects both physical and virtual SMA 100 10.x devices (SMA 200, SMA 210, SMA 400, SMA 410, SMA 500v), came to light after the NCC Group on Sunday alerted it had detected "indiscriminate use of an exploit in the wild."
Details of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzsfpr0j8tg:vWPxC2XIVcE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzsfpr0j8tg:vWPxC2XIVcE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzsfpr0j8tg:vWPxC2XIVcE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mzsfpr0j8tg:vWPxC2XIVcE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzsfpr0j8tg:vWPxC2XIVcE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mzsfpr0j8tg:vWPxC2XIVcE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzsfpr0j8tg:vWPxC2XIVcE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mzsfpr0j8tg:vWPxC2XIVcE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2790769365560123497
title: Sigma Rules to Live Your Best SOC Life
uri: Sigma-Rules-to-Live-Your-Best-SOC-Life
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2790769365560123497
content:
Security Operations is a 24 x 7 job. It does not stop for weekends or holidays or even that much-needed coffee break after the first hour of the shift is complete. We all know this.
Every SOC engineer is hoping for some rest at some point. One of my favorite jokes when talking about Security Operations is "3 SOC engineers walked into a bar…" That the joke. No SOC engineers have time to do that. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8d4KO-LcYGw:JIhMCtgy4RE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8d4KO-LcYGw:JIhMCtgy4RE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8d4KO-LcYGw:JIhMCtgy4RE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8d4KO-LcYGw:JIhMCtgy4RE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8d4KO-LcYGw:JIhMCtgy4RE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8d4KO-LcYGw:JIhMCtgy4RE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8d4KO-LcYGw:JIhMCtgy4RE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8d4KO-LcYGw:JIhMCtgy4RE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8370334090905046270
title: Data Breach Exposes 1.6 Million Jobless Claims Filed in the Washington State
uri: Data-Breach-Exposes-1-6-Million-Jobless-Claims-Filed-in-the-Washington
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8370334090905046270
content:
The Office of the Washington State Auditor (SAO) on Monday said it's investigating a security incident that resulted in the compromise of personal information of more than 1.6 million people who filed for unemployment claims in the state in 2020.
The SAO blamed the breach on a software vulnerability in Accellion's File Transfer Appliance (FTA) service, which allows organizations to share <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rkmZHflP46k:1SxUgd9p-Vw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rkmZHflP46k:1SxUgd9p-Vw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rkmZHflP46k:1SxUgd9p-Vw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rkmZHflP46k:1SxUgd9p-Vw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rkmZHflP46k:1SxUgd9p-Vw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rkmZHflP46k:1SxUgd9p-Vw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rkmZHflP46k:1SxUgd9p-Vw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rkmZHflP46k:1SxUgd9p-Vw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5042528949616162880
title: Agent Tesla Malware Spotted Using New Delivery & Evasion Techniques
uri: Agent-Tesla-Malware-Spotted-Using-New-Delivery-Evasion-Techniques
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5042528949616162880
content:
Security researchers on Tuesday uncovered new delivery and evasion techniques adopted by Agent Tesla remote access trojan (RAT) to get around defense barriers and monitor its victims.
Typically spread through social engineering lures, the Windows spyware not only now targets Microsoft's Antimalware Scan Interface (AMSI) in an attempt to defeat endpoint protection software, it also employs a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dqvfp2VZGlY:19QOB5MLzY0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dqvfp2VZGlY:19QOB5MLzY0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dqvfp2VZGlY:19QOB5MLzY0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Dqvfp2VZGlY:19QOB5MLzY0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dqvfp2VZGlY:19QOB5MLzY0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Dqvfp2VZGlY:19QOB5MLzY0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dqvfp2VZGlY:19QOB5MLzY0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Dqvfp2VZGlY:19QOB5MLzY0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1018034144002017353
title: 3 New Severe Security Vulnerabilities Found In SolarWinds Software
uri: 3-New-Severe-Security-Vulnerabilities-Found-In-SolarWinds-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1018034144002017353
content:
Cybersecurity researchers on Wednesday disclosed three severe security vulnerabilities impacting SolarWinds products, the most severe of which could have been exploited to achieve remote code execution with elevated privileges.
Two of the flaws (CVE-2021-25274 and CVE-2021-25275) were identified in the SolarWinds Orion Platform, while a third separate weakness (CVE-2021-25276) was found in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SBg14GPT5IM:2E4pXkzWCrQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SBg14GPT5IM:2E4pXkzWCrQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SBg14GPT5IM:2E4pXkzWCrQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SBg14GPT5IM:2E4pXkzWCrQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SBg14GPT5IM:2E4pXkzWCrQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SBg14GPT5IM:2E4pXkzWCrQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SBg14GPT5IM:2E4pXkzWCrQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SBg14GPT5IM:2E4pXkzWCrQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4199131613901008218
title: Guide: How Security Consolidation Helps Small Cybersecurity Teams
uri: Guide-How-Security-Consolidation-Helps-Small-Cybersecurity-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4199131613901008218
content:
The dynamic nature of cybersecurity, the changes in the threat landscape, and the expansion of the attack surface lead organizations to add more security solutions—from different vendors—creating a layered security infrastructure that introduces new challenges to any team, with a much more significant impact on small ones.
And yet, sophisticated attacks continue to bypass these advanced security<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21IbVA3Hyh8:Kmz6MPn_wxw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21IbVA3Hyh8:Kmz6MPn_wxw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21IbVA3Hyh8:Kmz6MPn_wxw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=21IbVA3Hyh8:Kmz6MPn_wxw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21IbVA3Hyh8:Kmz6MPn_wxw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=21IbVA3Hyh8:Kmz6MPn_wxw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21IbVA3Hyh8:Kmz6MPn_wxw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=21IbVA3Hyh8:Kmz6MPn_wxw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2160351813765960951
title: A New Linux Malware Targeting High-Performance Computing Clusters
uri: A-New-Linux-Malware-Targeting-High-Performance-Computing-Clusters
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2160351813765960951
content:
High-performance computing clusters belonging to university networks as well as servers associated with government agencies, endpoint security vendors, and internet service providers have been targeted by a newly discovered backdoor that gives attackers the ability to execute arbitrary commands on the systems remotely.
Cybersecurity firm ESET named the malware "Kobalos" — a nod to a "mischievous<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WWLP9j1y4ec:sAomToGppgU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WWLP9j1y4ec:sAomToGppgU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WWLP9j1y4ec:sAomToGppgU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WWLP9j1y4ec:sAomToGppgU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WWLP9j1y4ec:sAomToGppgU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WWLP9j1y4ec:sAomToGppgU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WWLP9j1y4ec:sAomToGppgU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WWLP9j1y4ec:sAomToGppgU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5671939182303979960
title: Over a Dozen Chrome Extensions Caught Hijacking Google Search Results for Millions
uri: Over-a-Dozen-Chrome-Extensions-Caught-Hijacking-Google-Search-Results
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5671939182303979960
content:
New details have emerged about a vast network of rogue extensions for Chrome and Edge browsers that were found to hijack clicks to links in search results pages to arbitrary URLs, including phishing sites and ads.
Collectively called "CacheFlow" by Avast, the 28 extensions in question — including Video Downloader for Facebook, Vimeo Video Downloader, Instagram Story Downloader, VK Unblock — made<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6KxwsBhziA:g4oINMLPhJg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6KxwsBhziA:g4oINMLPhJg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6KxwsBhziA:g4oINMLPhJg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o6KxwsBhziA:g4oINMLPhJg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6KxwsBhziA:g4oINMLPhJg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o6KxwsBhziA:g4oINMLPhJg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6KxwsBhziA:g4oINMLPhJg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o6KxwsBhziA:g4oINMLPhJg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1696336093792424656
title: Critical Bugs Found in Popular Realtek Wi-Fi Module for Embedded Devices
uri: Critical-Bugs-Found-in-Popular-Realtek-Wi-Fi-Module-for-Embedded-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1696336093792424656
content:
Major vulnerabilities have been discovered in the Realtek RTL8195A Wi-Fi module that could have been exploited to gain root access and take complete control of a device's wireless communications.
The six flaws were reported by researchers from Israeli IoT security firm Vdoo.
The Realtek RTL8195A module is a standalone, low-power-consumption Wi-Fi hardware module targeted at embedded devices used<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DNXy7SyqTn4:do1rscP4eGU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DNXy7SyqTn4:do1rscP4eGU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DNXy7SyqTn4:do1rscP4eGU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DNXy7SyqTn4:do1rscP4eGU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DNXy7SyqTn4:do1rscP4eGU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DNXy7SyqTn4:do1rscP4eGU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DNXy7SyqTn4:do1rscP4eGU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DNXy7SyqTn4:do1rscP4eGU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1922305356470066349
title: How to Audit Password Changes in Active Directory
uri: How-to-Audit-Password-Changes-in-Active-Directory
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1922305356470066349
content:
Today's admins certainly have plenty on their plates, and boosting ecosystem security remains a top priority. On-premises, and especially remote, accounts are gateways for accessing critical information.
Password management makes this possible. After all, authentication should ensure that a user is whom they claim to be. This initial layer of security is crucial for protecting one's entire <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BK4Sv3KY6Ow:PHECmoD5dsc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BK4Sv3KY6Ow:PHECmoD5dsc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BK4Sv3KY6Ow:PHECmoD5dsc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BK4Sv3KY6Ow:PHECmoD5dsc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BK4Sv3KY6Ow:PHECmoD5dsc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BK4Sv3KY6Ow:PHECmoD5dsc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BK4Sv3KY6Ow:PHECmoD5dsc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BK4Sv3KY6Ow:PHECmoD5dsc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8074382630853586391
title: Beware: New Matryosh DDoS Botnet Targeting Android-Based Devices
uri: Beware-New-Matryosh-DDoS-Botnet-Targeting-Android-Based-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8074382630853586391
content:
A nascent malware campaign has been spotted co-opting Android devices into a botnet with the primary purpose of carrying out distributed denial-of-service (DDoS) attacks.
Called "Matryosh" by Qihoo 360's Netlab researchers, the latest threat has been found reusing the Mirai botnet framework and propagates through exposed Android Debug Bridge (ADB) interfaces to infect Android devices and ensnare<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEHqsAWNTWI:rC0zRNuylNE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEHqsAWNTWI:rC0zRNuylNE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEHqsAWNTWI:rC0zRNuylNE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEHqsAWNTWI:rC0zRNuylNE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEHqsAWNTWI:rC0zRNuylNE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEHqsAWNTWI:rC0zRNuylNE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEHqsAWNTWI:rC0zRNuylNE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEHqsAWNTWI:rC0zRNuylNE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5887534454908648228
title: Why Human Error is #1 Cyber Security Threat to Businesses in 2021
uri: Why-Human-Error-is-1-Cyber-Security-Threat-to-Businesses-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5887534454908648228
content:
Phishing and Malware
Among the major cyber threats, the malware remains a significant danger. The 2017 WannaCry outbreak that cost businesses worldwide up to $4 billion is still in recent memory, and other new strains of malware are discovered on a daily basis.
Phishing has also seen a resurgence in the last few years, with many new scams being invented to take advantage of unsuspecting <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gbHJFZrumVE:pe7sxq3Kg7g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gbHJFZrumVE:pe7sxq3Kg7g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gbHJFZrumVE:pe7sxq3Kg7g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gbHJFZrumVE:pe7sxq3Kg7g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gbHJFZrumVE:pe7sxq3Kg7g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gbHJFZrumVE:pe7sxq3Kg7g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gbHJFZrumVE:pe7sxq3Kg7g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gbHJFZrumVE:pe7sxq3Kg7g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2695641774529035740
title: Critical Flaws Reported in Cisco VPN Routers for Businesses—Patch ASAP
uri: Critical-Flaws-Reported-in-Cisco-VPN-Routers-for-Businesses-Patch-AS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2695641774529035740
content:
Cisco has rolled out fixes for multiple critical vulnerabilities in the web-based management interface of Small Business routers that could potentially allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
The flaws — tracked from CVE-2021-1289 through CVE-2021-1295 (CVSS score 9.8) — impact RV160, RV160W, RV260, RV260P, and RV260W VPN <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nRWdI6QY_ZA:YZUQ9W6IOc8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nRWdI6QY_ZA:YZUQ9W6IOc8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nRWdI6QY_ZA:YZUQ9W6IOc8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nRWdI6QY_ZA:YZUQ9W6IOc8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nRWdI6QY_ZA:YZUQ9W6IOc8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nRWdI6QY_ZA:YZUQ9W6IOc8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nRWdI6QY_ZA:YZUQ9W6IOc8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nRWdI6QY_ZA:YZUQ9W6IOc8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2895304719533386115
title: New Chrome Browser 0-day Under Active Attack—Update Immediately!
uri: New-Chrome-Browser-0-day-Under-Active-Attack-Update-Immediately
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2895304719533386115
content:
Google has patched a zero-day vulnerability in Chrome web browser for desktop that it says is being actively exploited in the wild.
The company released 88.0.4324.150 for Windows, Mac, and Linux, with a fix for a heap buffer overflow flaw (CVE-2021-21148) in its V8 JavaScript rendering engine.
"Google is aware of reports that an exploit for CVE-2021-21148 exists in the wild," the company said in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-W7MLCx6Zt4:s9JRjIevi-Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-W7MLCx6Zt4:s9JRjIevi-Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-W7MLCx6Zt4:s9JRjIevi-Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-W7MLCx6Zt4:s9JRjIevi-Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-W7MLCx6Zt4:s9JRjIevi-Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-W7MLCx6Zt4:s9JRjIevi-Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-W7MLCx6Zt4:s9JRjIevi-Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-W7MLCx6Zt4:s9JRjIevi-Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3594821890068521799
title: Cybercriminals Now Using Plex Media Servers to Amplify DDoS Attacks
uri: Cybercriminals-Now-Using-Plex-Media-Servers-to-Amplify-DDoS-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3594821890068521799
content:
A new distributed denial-of-service attack (DDoS) vector has ensnared Plex Media Server systems to amplify malicious traffic against targets to take them offline.
"Plex's startup processes unintentionally expose a Plex UPnP-enabled service registration responder to the general Internet, where it can be abused to generate reflection/amplification DDoS attacks," Netscout researchers said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EEkmEHrAk7Y:WXSxwQNonXM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EEkmEHrAk7Y:WXSxwQNonXM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EEkmEHrAk7Y:WXSxwQNonXM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EEkmEHrAk7Y:WXSxwQNonXM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EEkmEHrAk7Y:WXSxwQNonXM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EEkmEHrAk7Y:WXSxwQNonXM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EEkmEHrAk7Y:WXSxwQNonXM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EEkmEHrAk7Y:WXSxwQNonXM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1549441537026238719
title: WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware
uri: WARNING-Hugely-Popular-The-Great-Suspender-Chrome-Extension-Cont
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1549441537026238719
content:
Google on Thursday removed The Great Suspender, a popular Chrome extension used by millions of users, from its Chrome Web Store for containing malware. It also took the unusual step of deactivating it from users' computers.
"This extension contains malware," read a terse notification from Google, but it has since emerged that the add-on stealthily added features that could be exploited to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BMLjgzJQcDM:aHRUF7WtJ9Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BMLjgzJQcDM:aHRUF7WtJ9Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BMLjgzJQcDM:aHRUF7WtJ9Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BMLjgzJQcDM:aHRUF7WtJ9Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BMLjgzJQcDM:aHRUF7WtJ9Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BMLjgzJQcDM:aHRUF7WtJ9Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BMLjgzJQcDM:aHRUF7WtJ9Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BMLjgzJQcDM:aHRUF7WtJ9Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1615531269304164233
title: Top 5 Bug Bounty Programs to Watch in 2021
uri: Top-5-Bug-Bounty-Programs-to-Watch-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1615531269304164233
content:
While Gartner does not have a dedicated Magic Quadrant for Bug Bounties or Crowd Security Testing yet, Gartner Peer Insights already lists 24 vendors in the "Application Crowdtesting Services" category.
We have compiled the top 5 most promising bug bounty platforms for those of you who are looking to enhance your existing software testing arsenal with knowledge and expertise from international <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WRmzW_EdBA4:Tvs3cDhmdWQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WRmzW_EdBA4:Tvs3cDhmdWQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WRmzW_EdBA4:Tvs3cDhmdWQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WRmzW_EdBA4:Tvs3cDhmdWQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WRmzW_EdBA4:Tvs3cDhmdWQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WRmzW_EdBA4:Tvs3cDhmdWQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WRmzW_EdBA4:Tvs3cDhmdWQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WRmzW_EdBA4:Tvs3cDhmdWQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6103331487817259143
title: Detailed: Here's How Iran Spies on Dissidents with the Help of Hackers
uri: Detailed-Here-s-How-Iran-Spies-on-Dissidents-with-the-Help-of-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6103331487817259143
content:
Twin cyber operations conducted by state-sponsored Iranian threat actors demonstrate their continued focus on compiling detailed dossiers on Iranian citizens that could threaten the stability of the Islamic Republic, including dissidents, opposition forces, and ISIS supporters, and Kurdish natives.
Tracing the extensive espionage operations to two advanced Iranian cyber-groups Domestic Kitten (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dcnT9AlrYGs:Na7brx_yLv8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dcnT9AlrYGs:Na7brx_yLv8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dcnT9AlrYGs:Na7brx_yLv8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dcnT9AlrYGs:Na7brx_yLv8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dcnT9AlrYGs:Na7brx_yLv8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dcnT9AlrYGs:Na7brx_yLv8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dcnT9AlrYGs:Na7brx_yLv8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dcnT9AlrYGs:Na7brx_yLv8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8225541994717770015
title: Webinar and eBook: The Dark Side of EDR. Are You Prepared?
uri: Webinar-and-eBook-The-Dark-Side-of-EDR-Are-You-Prepared
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8225541994717770015
content:
Endpoint Detection and Response (EDR) platforms have received incredible attention as the platform for security teams.
Whether you're evaluating an EDR for the first time or looking to replace your EDR, as an information security professional, you need to be aware of the gaps prior already to implementation so you can best prepare how to close the gaps.
It's important to understand that each <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N5pem-Ubyd4:9zZjb4nGcVQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N5pem-Ubyd4:9zZjb4nGcVQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N5pem-Ubyd4:9zZjb4nGcVQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N5pem-Ubyd4:9zZjb4nGcVQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N5pem-Ubyd4:9zZjb4nGcVQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N5pem-Ubyd4:9zZjb4nGcVQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N5pem-Ubyd4:9zZjb4nGcVQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N5pem-Ubyd4:9zZjb4nGcVQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2874481804146516241
title: Ukrainian Police Arrest Author of World's Largest Phishing Service U-Admin
uri: Ukrainian-Police-Arrest-Author-of-World-s-Largest-Phishing-Service-U-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2874481804146516241
content:
Law enforcement officials in Ukraine, in coordination with authorities from the U.S. and Australia, last week shut down one of the world's largest phishing services that were used to attack financial institutions in 11 countries, causing tens of millions of dollars in losses.
The Ukrainian attorney general's office said it worked with the National Police and its Main Investigation Department to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hffB8OEgdko:Qk73VlenGAY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hffB8OEgdko:Qk73VlenGAY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hffB8OEgdko:Qk73VlenGAY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hffB8OEgdko:Qk73VlenGAY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hffB8OEgdko:Qk73VlenGAY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hffB8OEgdko:Qk73VlenGAY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hffB8OEgdko:Qk73VlenGAY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hffB8OEgdko:Qk73VlenGAY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1894803315193104230
title: Hacker Tried Poisoning Water Supply After Breaking Into Florida's Treatment System
uri: Hacker-Tried-Poisoning-Water-Supply-After-Breaking-Into-Florida-s-Trea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1894803315193104230
content:
Hackers successfully infiltrated the computer system controlling a water treatment facility in the U.S. state of Florida and remotely changed a setting that drastically altered the levels of sodium hydroxide (NaOH) in the water.
During a press conference held yesterday, Pinellas County Sheriff Bob Gualtieri said an operator managed to catch the manipulation in real-time and restored the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RccqyqYpzZw:bFN26Aajqao:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RccqyqYpzZw:bFN26Aajqao:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RccqyqYpzZw:bFN26Aajqao:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RccqyqYpzZw:bFN26Aajqao:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RccqyqYpzZw:bFN26Aajqao:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RccqyqYpzZw:bFN26Aajqao:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RccqyqYpzZw:bFN26Aajqao:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RccqyqYpzZw:bFN26Aajqao:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-559917118902297589
title: Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs
uri: Microsoft-Issues-Patches-for-In-the-Wild-0-day-and-55-Others-Windows-B
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/559917118902297589
content:
Microsoft on Tuesday issued fixes for 56 flaws, including a critical vulnerability that's known to be actively exploited in the wild.
In all, 11 are listed as Critical, 43 are listed as Important, and two are listed as Moderate in severity — six of which are previously disclosed vulnerabilities.
The updates cover .NET Framework, Azure IoT, Microsoft Dynamics, Microsoft Edge for Android, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tPrz5HM4Ys:BOfYMjORDv0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tPrz5HM4Ys:BOfYMjORDv0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tPrz5HM4Ys:BOfYMjORDv0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3tPrz5HM4Ys:BOfYMjORDv0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tPrz5HM4Ys:BOfYMjORDv0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3tPrz5HM4Ys:BOfYMjORDv0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tPrz5HM4Ys:BOfYMjORDv0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3tPrz5HM4Ys:BOfYMjORDv0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5513701733467807365
title: Apple Patches 10-Year-Old macOS SUDO Root Privilege Escalation Bug
uri: Apple-Patches-10-Year-Old-macOS-SUDO-Root-Privilege-Escalation-Bug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5513701733467807365
content:
Apple has rolled out a fix for a critical sudo vulnerability in macOS Big Sur, Catalina, and Mojave that could allow unauthenticated local users to gain root-level privileges on the system.
"A local attacker may be able to elevate their privileges," Apple said in a security advisory. "This issue was addressed by updating to sudo version 1.9.5p2."
Sudo is a common utility built into most Unix and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PCUlk8WHpbM:NohdvNmRCQM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PCUlk8WHpbM:NohdvNmRCQM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PCUlk8WHpbM:NohdvNmRCQM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PCUlk8WHpbM:NohdvNmRCQM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PCUlk8WHpbM:NohdvNmRCQM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PCUlk8WHpbM:NohdvNmRCQM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PCUlk8WHpbM:NohdvNmRCQM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PCUlk8WHpbM:NohdvNmRCQM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4606817865136291872
title: LodaRAT Windows Malware Now Also Targets Android Devices
uri: LodaRAT-Windows-Malware-Now-Also-Targets-Android-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4606817865136291872
content:
A previously known Windows remote access Trojan (RAT) with credential-stealing capabilities has now expanded its scope to set its sights on users of Android devices to further the attacker's espionage motives.
"The developers of LodaRAT have added Android as a targeted platform," Cisco Talos researchers said in a Tuesday analysis. "A new iteration of LodaRAT for Windows has been identified with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yqhdx5Opmdo:9dOsOyXT9JA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yqhdx5Opmdo:9dOsOyXT9JA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yqhdx5Opmdo:9dOsOyXT9JA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yqhdx5Opmdo:9dOsOyXT9JA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yqhdx5Opmdo:9dOsOyXT9JA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yqhdx5Opmdo:9dOsOyXT9JA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yqhdx5Opmdo:9dOsOyXT9JA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yqhdx5Opmdo:9dOsOyXT9JA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5311743050829030792
title: Dependency Confusion Supply-Chain Attack Hit Over 35 High-Profile Companies
uri: Dependency-Confusion-Supply-Chain-Attack-Hit-Over-35-High-Profile-Comp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5311743050829030792
content:
In what's a novel supply chain attack, a security researcher managed to breach over 35 major companies' internal systems, including that of Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, and achieve remote code execution.
The technique, called dependency confusion or a substitution attack, takes advantage of the fact that a piece of software may include components from a mix <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrvY4re7MoE:0E5PzYYwMf0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrvY4re7MoE:0E5PzYYwMf0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrvY4re7MoE:0E5PzYYwMf0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xrvY4re7MoE:0E5PzYYwMf0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrvY4re7MoE:0E5PzYYwMf0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xrvY4re7MoE:0E5PzYYwMf0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrvY4re7MoE:0E5PzYYwMf0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xrvY4re7MoE:0E5PzYYwMf0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8211581132193513100
title: Iranian Hackers Utilize ScreenConnect to Spy On UAE, Kuwait Government Agencies
uri: Iranian-Hackers-Utilize-ScreenConnect-to-Spy-On-UAE-Kuwait-Government
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8211581132193513100
content:
UAE and Kuwait government agencies are targets of a new cyberespionage campaign potentially carried out by Iranian threat actors, according to new research.
Attributing the operation to be the work of Static Kitten (aka MERCURY or MuddyWater), Anomali said the "objective of this activity is to install a remote management tool called ScreenConnect (acquired by ConnectWise 2015) with unique launch<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jyqjJugp1-g:EuhNBTvdYBY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jyqjJugp1-g:EuhNBTvdYBY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jyqjJugp1-g:EuhNBTvdYBY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jyqjJugp1-g:EuhNBTvdYBY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jyqjJugp1-g:EuhNBTvdYBY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jyqjJugp1-g:EuhNBTvdYBY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jyqjJugp1-g:EuhNBTvdYBY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jyqjJugp1-g:EuhNBTvdYBY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7244415376931222936
title: The Weakest Link in Your Security Posture: Misconfigured SaaS Settings
uri: The-Weakest-Link-in-Your-Security-Posture-Misconfigured-SaaS-Settings
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7244415376931222936
content:
In the era of hacking and malicious actors, a company's cloud security posture is a concern that preoccupies most, if not all, organizations.
Yet even more than that, it is the SaaS Security Posture Management (SSPM) that is critical to today's company security. Recently Malwarebytes released a statement on how they were targeted by Nation-State Actors implicated in SolarWinds breach. Their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GuDbaXN989s:gUxr9V6GfpE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GuDbaXN989s:gUxr9V6GfpE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GuDbaXN989s:gUxr9V6GfpE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GuDbaXN989s:gUxr9V6GfpE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GuDbaXN989s:gUxr9V6GfpE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GuDbaXN989s:gUxr9V6GfpE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GuDbaXN989s:gUxr9V6GfpE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GuDbaXN989s:gUxr9V6GfpE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5741784215979357955
title: 10 SIM Swappers Arrested for Stealing $100M in Crypto from Celebrities
uri: 10-SIM-Swappers-Arrested-for-Stealing-100M-in-Crypto-from-Celebritie
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5741784215979357955
content:
Ten people belonging to a criminal network have been arrested in connection with a series of SIM-swapping attacks that resulted in the theft of more than $100 million by hijacking the mobile phone accounts of high-profile individuals in the U.S.
The Europol-coordinated year-long investigation was jointly conducted by law enforcement authorities from the U.K., U.S., Belgium, Malta, and Canada.
"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0M8fTaGAM_Y:20kbIN9yAwU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0M8fTaGAM_Y:20kbIN9yAwU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0M8fTaGAM_Y:20kbIN9yAwU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0M8fTaGAM_Y:20kbIN9yAwU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0M8fTaGAM_Y:20kbIN9yAwU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0M8fTaGAM_Y:20kbIN9yAwU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0M8fTaGAM_Y:20kbIN9yAwU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0M8fTaGAM_Y:20kbIN9yAwU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1096360819226002158
title: Poor Password Security Lead to Recent Water Treatment Facility Hack
uri: Poor-Password-Security-Lead-to-Recent-Water-Treatment-Facility-Hack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1096360819226002158
content:
New details have emerged about the remote computer intrusion at a Florida water treatment facility last Friday, highlighting a lack of adequate security measures needed to bulletproof critical infrastructure environments.
The breach, which occurred last Friday, involved an unsuccessful attempt on the part of an adversary to increase sodium hydroxide dosage in the water supply to dangerous levels<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHrDsyCOcRo:B0qxGEmwWno:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHrDsyCOcRo:B0qxGEmwWno:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHrDsyCOcRo:B0qxGEmwWno:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vHrDsyCOcRo:B0qxGEmwWno:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHrDsyCOcRo:B0qxGEmwWno:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vHrDsyCOcRo:B0qxGEmwWno:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHrDsyCOcRo:B0qxGEmwWno:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vHrDsyCOcRo:B0qxGEmwWno:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4370572439505226273
title: Researchers Uncover Android Spying Campaign Targeting Pakistan Officials
uri: Researchers-Uncover-Android-Spying-Campaign-Targeting-Pakistan-Officia
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4370572439505226273
content:
Two new Android surveillanceware families have been found to target military, nuclear, and election entities in Pakistan and Kashmir as part of a pro-India, state-sponsored hacking campaign.
Dubbed Hornbill and Sunbird, the malware impersonates legitimate or seemingly innocuous services to cover its tracks, only to stealthily collect SMS, encrypted messaging app content, and geolocation, among <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yndzor9jawU:C6jpqO2YBms:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yndzor9jawU:C6jpqO2YBms:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yndzor9jawU:C6jpqO2YBms:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yndzor9jawU:C6jpqO2YBms:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yndzor9jawU:C6jpqO2YBms:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yndzor9jawU:C6jpqO2YBms:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yndzor9jawU:C6jpqO2YBms:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yndzor9jawU:C6jpqO2YBms:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4654244822536819366
title: Secret Chat in Telegram Left Self-Destructing Media Files On Devices
uri: Secret-Chat-in-Telegram-Left-Self-Destructing-Media-Files-On-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4654244822536819366
content:
Popular messaging app Telegram fixed a privacy-defeating bug in its macOS app that made it possible to access self-destructing audio and video messages long after they disappeared from secret chats.
The vulnerability was discovered by security researcher Dhiraj Mishra in version 7.3 of the app, who disclosed his findings to Telegram on December 26, 2020. The issue has since been resolved in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbPl6pzp0xU:nbgudurVcoI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbPl6pzp0xU:nbgudurVcoI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbPl6pzp0xU:nbgudurVcoI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WbPl6pzp0xU:nbgudurVcoI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbPl6pzp0xU:nbgudurVcoI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WbPl6pzp0xU:nbgudurVcoI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WbPl6pzp0xU:nbgudurVcoI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WbPl6pzp0xU:nbgudurVcoI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1961478645369872087
title: Yandex Employee Caught Selling Access to Users' Email Inboxes
uri: Yandex-Employee-Caught-Selling-Access-to-Users-Email-Inboxes
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1961478645369872087
content:
Russian Dutch-domiciled search engine, ride-hailing and  email service provider Yandex on Friday disclosed a data breach that compromised 4,887 email accounts of its users.
The company blamed the incident on an unnamed employee who had been providing unauthorized access to the users' mailboxes for personal gain.
"The employee was one of three system administrators with the necessary access <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Fi_bYovO4H4:wwKO79GRkGA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Fi_bYovO4H4:wwKO79GRkGA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Fi_bYovO4H4:wwKO79GRkGA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Fi_bYovO4H4:wwKO79GRkGA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Fi_bYovO4H4:wwKO79GRkGA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Fi_bYovO4H4:wwKO79GRkGA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Fi_bYovO4H4:wwKO79GRkGA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Fi_bYovO4H4:wwKO79GRkGA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3223966148378702569
title: Apple will proxy Safe Browsing requests to hide iOS users' IP from Google
uri: Apple-will-proxy-Safe-Browsing-requests-to-hide-iOS-users-IP-from-Goo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3223966148378702569
content:
Apple's upcoming iOS 14.5 update will come with a new feature that will redirect all fraudulent website checks through its own proxy servers as a workaround to preserve user privacy and prevent leaking IP addresses to Google.
A built-in security-focused feature in the Safari browser, "Fraudulent Website Warning," alerts users about dangerous websites that have been reported as deceptive, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tG6buRSeoAQ:13MPncRfS34:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tG6buRSeoAQ:13MPncRfS34:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tG6buRSeoAQ:13MPncRfS34:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tG6buRSeoAQ:13MPncRfS34:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tG6buRSeoAQ:13MPncRfS34:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tG6buRSeoAQ:13MPncRfS34:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tG6buRSeoAQ:13MPncRfS34:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tG6buRSeoAQ:13MPncRfS34:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5470359284962940530
title: A Sticker Sent On Telegram Could Have Exposed Your Secret Chats
uri: A-Sticker-Sent-On-Telegram-Could-Have-Exposed-Your-Secret-Chats
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5470359284962940530
content:
Cybersecurity researchers on Monday disclosed details of a now-patched flaw in the Telegram messaging app that could have exposed users' secret messages, photos, and videos to remote malicious actors.
The issues were discovered by Italy-based Shielder in iOS, Android, and macOS versions of the app. Following responsible disclosure, Telegram addressed them in a series of patches on September 30 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j1gXKh-sLi8:OkMtiLzI7tY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j1gXKh-sLi8:OkMtiLzI7tY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j1gXKh-sLi8:OkMtiLzI7tY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j1gXKh-sLi8:OkMtiLzI7tY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j1gXKh-sLi8:OkMtiLzI7tY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j1gXKh-sLi8:OkMtiLzI7tY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j1gXKh-sLi8:OkMtiLzI7tY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j1gXKh-sLi8:OkMtiLzI7tY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4214352477110225797
title: Hackers Exploit IT Monitoring Tool Centreon to Target Several French Entities
uri: Hackers-Exploit-IT-Monitoring-Tool-Centreon-to-Target-Several-French-E
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4214352477110225797
content:
Russia-linked state-sponsored threat actor known as Sandworm has been linked to a three-year-long stealthy operation to hack targets by exploiting an IT monitoring tool called Centreon.
The intrusion campaign — which breached "several French entities" — is said to have started in late 2017 and lasted until 2020, with the attacks particularly impacting web-hosting providers, said the French <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz0HPIu8b4U:qVwpXvvysVU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz0HPIu8b4U:qVwpXvvysVU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz0HPIu8b4U:qVwpXvvysVU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jz0HPIu8b4U:qVwpXvvysVU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz0HPIu8b4U:qVwpXvvysVU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jz0HPIu8b4U:qVwpXvvysVU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz0HPIu8b4U:qVwpXvvysVU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jz0HPIu8b4U:qVwpXvvysVU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6402094806589730157
title: Learn How to Manage and Secure Active Directory Service Accounts
uri: Learn-How-to-Manage-and-Secure-Active-Directory-Service-Accounts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6402094806589730157
content:
There are many different types of accounts in a typical Active Directory environment. These include user accounts, computer accounts, and a particular type of account called a service account. 
A service account is a special type of account that serves a specific purpose for services, and ultimately, applications in the environment.
These special-purpose Active Directory accounts are also the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pDapp5HG2Ws:d5HCCr9Pc0A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pDapp5HG2Ws:d5HCCr9Pc0A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pDapp5HG2Ws:d5HCCr9Pc0A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pDapp5HG2Ws:d5HCCr9Pc0A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pDapp5HG2Ws:d5HCCr9Pc0A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pDapp5HG2Ws:d5HCCr9Pc0A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pDapp5HG2Ws:d5HCCr9Pc0A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pDapp5HG2Ws:d5HCCr9Pc0A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1556485077965973615
title: Unpatched ShareIT Android App Flaw Could Let Hackers Inject Malware
uri: Unpatched-ShareIT-Android-App-Flaw-Could-Let-Hackers-Inject-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1556485077965973615
content:
Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user's sensitive data, execute arbitrary code, and possibly lead to remote code execution.
The findings come from cybersecurity firm Trend Micro's analysis of the Android version of the app, which allows users to share or transfer files between devices<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H3XKnxBOOpI:2FRQKpiTGgk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H3XKnxBOOpI:2FRQKpiTGgk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H3XKnxBOOpI:2FRQKpiTGgk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H3XKnxBOOpI:2FRQKpiTGgk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H3XKnxBOOpI:2FRQKpiTGgk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H3XKnxBOOpI:2FRQKpiTGgk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H3XKnxBOOpI:2FRQKpiTGgk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H3XKnxBOOpI:2FRQKpiTGgk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6651965734220763216
title: Managed Service Provider? Watch This Video to Learn about Autonomous XDR
uri: Managed-Service-Provider-Watch-This-Video-to-Learn-about-Autonomous-X
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6651965734220763216
content:
As managed security service providers, you're always on the lookout for new platforms. One that can generate further business, enables you to scale easily without investing in more human resources and provides that value immediately.
In the meanwhile, your clients are constantly demanding more security for a lesser cost.
Cynet recently published an 8-min video detailing their platform, the Cynet<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_MVwVqXR7eo:FJVXWuOElHk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_MVwVqXR7eo:FJVXWuOElHk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_MVwVqXR7eo:FJVXWuOElHk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_MVwVqXR7eo:FJVXWuOElHk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_MVwVqXR7eo:FJVXWuOElHk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_MVwVqXR7eo:FJVXWuOElHk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_MVwVqXR7eo:FJVXWuOElHk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_MVwVqXR7eo:FJVXWuOElHk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1073767664494743404
title: Malvertisers Exploited WebKit 0-Day to Redirect Browser Users to Scam Sites
uri: Malvertisers-Exploited-WebKit-0-Day-to-Redirect-Browser-Users-to-Scam
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1073767664494743404
content:
A malvertising group known as "ScamClub" exploited a zero-day vulnerability in WebKit-based browsers to inject malicious payloads that redirected users to fraudulent websites gift card scams.
The attacks, first spotted by ad security firm Confiant in late June 2020, leveraged a bug (CVE-2021–1801) that allowed malicious parties to bypass the iframe sandboxing policy in the browser engine that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wq0SmX0FDrY:mTxSiRFM1Zw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wq0SmX0FDrY:mTxSiRFM1Zw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wq0SmX0FDrY:mTxSiRFM1Zw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wq0SmX0FDrY:mTxSiRFM1Zw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wq0SmX0FDrY:mTxSiRFM1Zw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wq0SmX0FDrY:mTxSiRFM1Zw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wq0SmX0FDrY:mTxSiRFM1Zw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wq0SmX0FDrY:mTxSiRFM1Zw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8755029281797488106
title: Researchers Unmask Hackers Behind APOMacroSploit Malware Builder
uri: Researchers-Unmask-Hackers-Behind-APOMacroSploit-Malware-Builder
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8755029281797488106
content:
Cybersecurity researchers have disclosed a new kind of Office malware distributed as part of a malicious email campaign that targeted more than 80 customers worldwide in an attempt to control victim machines and steal information remotely.
The tool — dubbed "APOMacroSploit" — is a macro exploit generator that allows the user to create an Excel document capable of bypassing antivirus software, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TEqwkRLX2Sk:deZ1MsCiIGA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TEqwkRLX2Sk:deZ1MsCiIGA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TEqwkRLX2Sk:deZ1MsCiIGA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TEqwkRLX2Sk:deZ1MsCiIGA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TEqwkRLX2Sk:deZ1MsCiIGA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TEqwkRLX2Sk:deZ1MsCiIGA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TEqwkRLX2Sk:deZ1MsCiIGA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TEqwkRLX2Sk:deZ1MsCiIGA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3395149907774532674
title: Agora SDK Bug Left Several Video Calling Apps Vulnerable to Snooping
uri: Agora-SDK-Bug-Left-Several-Video-Calling-Apps-Vulnerable-to-Snooping
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3395149907774532674
content:
A severe security vulnerability in a popular video calling software development kit (SDK) could have allowed an attacker to spy on ongoing private video and audio calls.
That's according to new research published by the McAfee Advanced Threat Research (ATR) team today, which found the aforementioned flaw in Agora.io's SDK used by several social apps such as eHarmony, Plenty of Fish, MeetMe, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZPUVDvxR8ps:AeAUGuKRWMo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZPUVDvxR8ps:AeAUGuKRWMo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZPUVDvxR8ps:AeAUGuKRWMo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZPUVDvxR8ps:AeAUGuKRWMo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZPUVDvxR8ps:AeAUGuKRWMo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZPUVDvxR8ps:AeAUGuKRWMo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZPUVDvxR8ps:AeAUGuKRWMo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZPUVDvxR8ps:AeAUGuKRWMo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6818942843076947720
title: U.S. Charges 3 North Korean Hackers Over $1.3 Billion Cryptocurrency Heist
uri: U-S-Charges-3-North-Korean-Hackers-Over-1-3-Billion-Cryptocurrency-H
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6818942843076947720
content:
The U.S. Department of Justice (DoJ) on Wednesday indicted three suspected North Korean hackers for allegedly conspiring to steal and extort over $1.3 billion in cash and cryptocurrencies from financial institutions and businesses.
The three defendants — Jon Chang Hyok, Kim Il, and Park Jin Hyok — are said to be members of the Reconnaissance General Bureau, a military intelligence division of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sHib2hj83GY:QFbk2uoz8dY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sHib2hj83GY:QFbk2uoz8dY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sHib2hj83GY:QFbk2uoz8dY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sHib2hj83GY:QFbk2uoz8dY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sHib2hj83GY:QFbk2uoz8dY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sHib2hj83GY:QFbk2uoz8dY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sHib2hj83GY:QFbk2uoz8dY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sHib2hj83GY:QFbk2uoz8dY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3257737606798802305
title: First Malware Designed for Apple M1 Chip Discovered in the Wild
uri: First-Malware-Designed-for-Apple-M1-Chip-Discovered-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3257737606798802305
content:
One of the first malware samples tailored to run natively on Apple's M1 chips has been discovered, suggesting a new development that indicates that bad actors have begun adapting malicious software to target the company's latest generation of Macs powered by its own processors.
While the transition to Apple silicon has necessitated developers to build new versions of their apps to ensure better <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B2J01CWlGQI:CowEG6jt8RE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B2J01CWlGQI:CowEG6jt8RE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B2J01CWlGQI:CowEG6jt8RE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B2J01CWlGQI:CowEG6jt8RE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B2J01CWlGQI:CowEG6jt8RE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B2J01CWlGQI:CowEG6jt8RE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B2J01CWlGQI:CowEG6jt8RE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B2J01CWlGQI:CowEG6jt8RE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-682339488546535391
title: SolarWinds Hackers Stole Some Source Code for Microsoft Azure, Exchange, Intune
uri: SolarWinds-Hackers-Stole-Some-Source-Code-for-Microsoft-Azure-Exchang
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/682339488546535391
content:
Microsoft on Thursday said it concluded its probe into the SolarWinds hack, finding that the attackers stole some source code but confirmed there's no evidence that they abused its internal systems to target other companies or gained access to production services or customer data.
The disclosure builds upon an earlier update on December 31, 2020, that uncovered a compromise of its own network to<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JJ-6x9wHUl0:9EHMt5VFTNo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JJ-6x9wHUl0:9EHMt5VFTNo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JJ-6x9wHUl0:9EHMt5VFTNo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JJ-6x9wHUl0:9EHMt5VFTNo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JJ-6x9wHUl0:9EHMt5VFTNo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JJ-6x9wHUl0:9EHMt5VFTNo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JJ-6x9wHUl0:9EHMt5VFTNo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JJ-6x9wHUl0:9EHMt5VFTNo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-517465160929589869
title: Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials
uri: Masslogger-Trojan-Upgraded-to-Steal-All-Your-Outlook-Chrome-Credentia
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/517465160929589869
content:
A credential stealer infamous for targeting Windows systems has resurfaced in a new phishing campaign that aims to steal credentials from Microsoft Outlook, Google Chrome, and instant messenger apps.
Primarily directed against users in Turkey, Latvia, and Italy starting mid-January, the attacks involve the use of MassLogger — a .NET-based malware with capabilities to hinder static analysis — <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euZDJpH8pEE:bxJOrIaq9LY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euZDJpH8pEE:bxJOrIaq9LY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euZDJpH8pEE:bxJOrIaq9LY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=euZDJpH8pEE:bxJOrIaq9LY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euZDJpH8pEE:bxJOrIaq9LY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=euZDJpH8pEE:bxJOrIaq9LY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=euZDJpH8pEE:bxJOrIaq9LY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=euZDJpH8pEE:bxJOrIaq9LY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-139622238026226163
title: New Hack Lets Attackers Bypass MasterCard PIN by Using Them As Visa Card
uri: New-Hack-Lets-Attackers-Bypass-MasterCard-PIN-by-Using-Them-As-Visa-Ca
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/139622238026226163
content:
Cybersecurity researchers have disclosed a novel attack that could allow criminals to trick a point of sale terminal into transacting with a victim's Mastercard contactless card while believing it to be a Visa card.
The research, published by a group of academics from the ETH Zurich, builds on a study detailed last September that delved into a PIN bypass attack, permitting bad actors to leverage<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2EndDI02n68:31eDUzs72cQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2EndDI02n68:31eDUzs72cQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2EndDI02n68:31eDUzs72cQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2EndDI02n68:31eDUzs72cQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2EndDI02n68:31eDUzs72cQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2EndDI02n68:31eDUzs72cQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2EndDI02n68:31eDUzs72cQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2EndDI02n68:31eDUzs72cQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1347638787076929519
title: Privacy Bug in Brave Browser Exposes Dark-Web Browsing History of Its Users
uri: Privacy-Bug-in-Brave-Browser-Exposes-Dark-Web-Browsing-History-of-Its
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1347638787076929519
content:
Brave has fixed a privacy issue in its browser that sent queries for .onion domains to public internet DNS resolvers rather than routing them through Tor nodes, thus exposing users' visits to dark web websites.
The bug was addressed in a hotfix release (V1.20.108) made available yesterday.
Brave ships with a built-in feature called "Private Window with Tor" that integrates the Tor anonymity <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4nxjoDPfRn8:WMhx_RW8C0Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4nxjoDPfRn8:WMhx_RW8C0Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4nxjoDPfRn8:WMhx_RW8C0Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4nxjoDPfRn8:WMhx_RW8C0Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4nxjoDPfRn8:WMhx_RW8C0Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4nxjoDPfRn8:WMhx_RW8C0Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4nxjoDPfRn8:WMhx_RW8C0Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4nxjoDPfRn8:WMhx_RW8C0Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5953018134571121779
title: New 'Silver Sparrow' Malware Infected Nearly 30,000 Apple Macs
uri: New-Silver-Sparrow-Malware-Infected-Nearly-30-000-Apple-Macs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5953018134571121779
content:
Days after the first malware targeting Apple M1 chips was discovered in the wild, researchers have disclosed yet another previously undetected piece of malicious software that was found in about 30,000 Macs running Intel x86_64 and the iPhone maker's M1 processors.
However, the ultimate goal of the operation remains something of a conundrum, what with the lack of a next-stage or final payload <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T4xSlSdvaUc:o_erZxoua-U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T4xSlSdvaUc:o_erZxoua-U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T4xSlSdvaUc:o_erZxoua-U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T4xSlSdvaUc:o_erZxoua-U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T4xSlSdvaUc:o_erZxoua-U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T4xSlSdvaUc:o_erZxoua-U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T4xSlSdvaUc:o_erZxoua-U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T4xSlSdvaUc:o_erZxoua-U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5225228250425303509
title: How to Fight Business Email Compromise (BEC) with Email Authentication?
uri: How-to-Fight-Business-Email-Compromise-(BEC)-with-Email-Authentication
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5225228250425303509
content:
An ever-evolving and rampant form of cybercrime that targets emails as the potential medium to conduct fraud is known as Business Email Compromise.
Targeting commercial, government as well as non-profit organizations, BEC can lead to huge amounts of data loss, security breach, and compromised financial assets.
It is a common misconception that cybercriminals usually lay their focus on MNCs and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_zJPB6nlgUE:HA6DHiu4SDU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_zJPB6nlgUE:HA6DHiu4SDU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_zJPB6nlgUE:HA6DHiu4SDU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_zJPB6nlgUE:HA6DHiu4SDU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_zJPB6nlgUE:HA6DHiu4SDU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_zJPB6nlgUE:HA6DHiu4SDU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_zJPB6nlgUE:HA6DHiu4SDU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_zJPB6nlgUE:HA6DHiu4SDU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1494875257508915892
title: Chinese Hackers Had Access to a U.S. Hacking Tool Years Before It Was Leaked Online
uri: Chinese-Hackers-Had-Access-to-a-U-S-Hacking-Tool-Years-Before-It-Was
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1494875257508915892
content:
On August 13, 2016, a hacking unit calling itself "The Shadow Brokers" announced that it had stolen malware tools and exploits used by the Equation Group, a sophisticated threat actor believed to be affiliated to the Tailored Access Operations (TAO) unit of the U.S. National Security Agency (NSA).
Although the group has since signed off following the unprecedented disclosures, new "conclusive" <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTKbRgGhns:qwaT4EQa82g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTKbRgGhns:qwaT4EQa82g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTKbRgGhns:qwaT4EQa82g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cBTKbRgGhns:qwaT4EQa82g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTKbRgGhns:qwaT4EQa82g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cBTKbRgGhns:qwaT4EQa82g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTKbRgGhns:qwaT4EQa82g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cBTKbRgGhns:qwaT4EQa82g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8920070880176357855
title: Hackers Exploit Accellion Zero-Days in Recent Data Theft and Extortion Attacks
uri: Hackers-Exploit-Accellion-Zero-Days-in-Recent-Data-Theft-and-Extortion
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8920070880176357855
content:
Cybersecurity researchers on Monday tied a string of attacks targeting Accellion File Transfer Appliance (FTA) servers over the past two months to data theft and extortion campaign orchestrated by a cybercrime group called UNC2546.
The attacks, which began in mid-December 2020, involved exploiting multiple zero-day vulnerabilities in the legacy FTA software to install a new web shell named <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qTSTdR5byVQ:4pc3By4Qc5U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qTSTdR5byVQ:4pc3By4Qc5U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qTSTdR5byVQ:4pc3By4Qc5U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qTSTdR5byVQ:4pc3By4Qc5U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qTSTdR5byVQ:4pc3By4Qc5U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qTSTdR5byVQ:4pc3By4Qc5U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qTSTdR5byVQ:4pc3By4Qc5U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qTSTdR5byVQ:4pc3By4Qc5U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4645799896666694494
title: 5 Security Lessons for Small Security Teams for the Post COVID19 Era
uri: 5-Security-Lessons-for-Small-Security-Teams-for-the-Post-COVID19-Era
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4645799896666694494
content:
A full-time mass work from home (WFH) workforce was once considered an extreme risk scenario that few risk or security professionals even bothered to think about.
Unfortunately, within a single day, businesses worldwide had to face such a reality. Their 3-year long digital transformation strategy was forced to become a 3-week sprint during which offices were abandoned, and people started working<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZvoHT4Vzhjc:qXibGeZ0JQI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZvoHT4Vzhjc:qXibGeZ0JQI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZvoHT4Vzhjc:qXibGeZ0JQI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZvoHT4Vzhjc:qXibGeZ0JQI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZvoHT4Vzhjc:qXibGeZ0JQI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZvoHT4Vzhjc:qXibGeZ0JQI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZvoHT4Vzhjc:qXibGeZ0JQI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZvoHT4Vzhjc:qXibGeZ0JQI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3160390791417665332
title: Shadow Attacks Let Attackers Replace Content in Digitally Signed PDFs
uri: Shadow-Attacks-Let-Attackers-Replace-Content-in-Digitally-Signed-PDFs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3160390791417665332
content:
Researchers have demonstrated a novel class of attacks that could allow a bad actor to potentially circumvent existing countermeasures and break the integrity protection of digitally signed PDF documents.
Called "Shadow attacks" by academics from Ruhr-University Bochum, the technique uses the "enormous flexibility provided by the PDF specification so that shadow documents remain <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A5OfTZs8TG0:VmBkoPUw5XU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A5OfTZs8TG0:VmBkoPUw5XU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A5OfTZs8TG0:VmBkoPUw5XU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A5OfTZs8TG0:VmBkoPUw5XU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A5OfTZs8TG0:VmBkoPUw5XU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A5OfTZs8TG0:VmBkoPUw5XU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A5OfTZs8TG0:VmBkoPUw5XU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A5OfTZs8TG0:VmBkoPUw5XU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4034963043252318170
title: Experts Find a Way to Learn What You're Typing During Video Calls
uri: Experts-Find-a-Way-to-Learn-What-You-re-Typing-During-Video-Calls
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4034963043252318170
content:
A new attack framework aims to infer keystrokes typed by a target user at the opposite end of a video conference call by simply leveraging the video feed to correlate observable body movements to the text being typed.
The research was undertaken by Mohd Sabra, and Murtuza Jadliwala from the University of Texas at San Antonio and Anindya Maiti from the University of Oklahoma, who say the attack <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jcYasj-GbrI:eWChu2aPra0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jcYasj-GbrI:eWChu2aPra0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jcYasj-GbrI:eWChu2aPra0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jcYasj-GbrI:eWChu2aPra0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jcYasj-GbrI:eWChu2aPra0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jcYasj-GbrI:eWChu2aPra0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jcYasj-GbrI:eWChu2aPra0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jcYasj-GbrI:eWChu2aPra0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4041403470516429629
title: Critical RCE Flaws Affect VMware ESXi and vSphere Client — Patch Now
uri: Critical-RCE-Flaws-Affect-VMware-ESXi-and-vSphere-Client-Patch-Now
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4041403470516429629
content:
VMware has addressed multiple critical remote code execution (RCE) vulnerabilities in VMware ESXi and vSphere Client virtual infrastructure management platform that may allow attackers to execute arbitrary commands and take control of affected systems.
"A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vbbWfPjXKcY:aSF6yk6nf5A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vbbWfPjXKcY:aSF6yk6nf5A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vbbWfPjXKcY:aSF6yk6nf5A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vbbWfPjXKcY:aSF6yk6nf5A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vbbWfPjXKcY:aSF6yk6nf5A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vbbWfPjXKcY:aSF6yk6nf5A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vbbWfPjXKcY:aSF6yk6nf5A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vbbWfPjXKcY:aSF6yk6nf5A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1968285417542854180
title: Experts Warns of Notable Increase in QuickBooks Data Files Theft Attacks
uri: Experts-Warns-of-Notable-Increase-in-QuickBooks-Data-Files-Theft-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1968285417542854180
content:
New research has uncovered a significant increase in QuickBooks file data theft using social engineering tricks to deliver malware and exploit the accounting software.
"A majority of the time, the attack involves basic malware that is often signed, making it hard to detect using antivirus or other threat detection software," researchers from ThreatLocker said in an analysis shared today with The<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ccEez0KurvY:EFpIxwnbR0U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ccEez0KurvY:EFpIxwnbR0U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ccEez0KurvY:EFpIxwnbR0U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ccEez0KurvY:EFpIxwnbR0U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ccEez0KurvY:EFpIxwnbR0U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ccEez0KurvY:EFpIxwnbR0U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ccEez0KurvY:EFpIxwnbR0U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ccEez0KurvY:EFpIxwnbR0U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1847770486258472194
title: Everything You Need to Know About Evolving Threat of Ransomware
uri: Everything-You-Need-to-Know-About-Evolving-Threat-of-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1847770486258472194
content:
The cybersecurity world is constantly evolving to new forms of threats and vulnerabilities. But ransomware proves to be a different animal—most destructive, persistent, notoriously challenging to prevent, and is showing no signs of slowing down.
Falling victim to a ransomware attack can cause significant data loss, data breach, operational downtime, costly recovery, legal consequences, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYlm0nH1BAY:bD5ZPW-EHWw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYlm0nH1BAY:bD5ZPW-EHWw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYlm0nH1BAY:bD5ZPW-EHWw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zYlm0nH1BAY:bD5ZPW-EHWw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYlm0nH1BAY:bD5ZPW-EHWw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zYlm0nH1BAY:bD5ZPW-EHWw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYlm0nH1BAY:bD5ZPW-EHWw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zYlm0nH1BAY:bD5ZPW-EHWw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8596867593111975775
title: Online Trackers Increasingly Switching to Invasive CNAME Cloaking Technique
uri: Online-Trackers-Increasingly-Switching-to-Invasive-CNAME-Cloaking-Tech
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8596867593111975775
content:
With browser makers steadily clamping down on third-party tracking, advertising technology companies are increasingly embracing a DNS technique to evade such defenses, thereby posing a threat to web security and privacy.
Called CNAME Cloaking, the practice of blurring the distinction between first-party and third-party cookies not only results in leaking sensitive private information without <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X1-Bwi6KjTE:cFlrZvjlFBA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X1-Bwi6KjTE:cFlrZvjlFBA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X1-Bwi6KjTE:cFlrZvjlFBA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X1-Bwi6KjTE:cFlrZvjlFBA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X1-Bwi6KjTE:cFlrZvjlFBA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X1-Bwi6KjTE:cFlrZvjlFBA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X1-Bwi6KjTE:cFlrZvjlFBA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X1-Bwi6KjTE:cFlrZvjlFBA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4397740724221118441
title: Russian Hackers Targeted Ukraine Authorities With Supply-Chain Malware Attack
uri: Russian-Hackers-Targeted-Ukraine-Authorities-With-Supply-Chain-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4397740724221118441
content:
Ukraine is formally pointing fingers at Russian hackers for hacking into one of its government systems and attempting to plant and distribute malicious documents that would install malware on target systems of public authorities.
"The purpose of the attack was the mass contamination of information resources of public authorities, as this system is used for the circulation of documents in most <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4zM5KLeXtpw:rnOJd150b_I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4zM5KLeXtpw:rnOJd150b_I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4zM5KLeXtpw:rnOJd150b_I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4zM5KLeXtpw:rnOJd150b_I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4zM5KLeXtpw:rnOJd150b_I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4zM5KLeXtpw:rnOJd150b_I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4zM5KLeXtpw:rnOJd150b_I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4zM5KLeXtpw:rnOJd150b_I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7073821803713800628
title: The Top Free Tools for Sysadmins in 2021
uri: The-Top-Free-Tools-for-Sysadmins-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7073821803713800628
content:
It's no secret that sysadmins have plenty on their plates. Managing, troubleshooting, and updating software or hardware is a tedious task. Additionally, admins must grapple with complex webs of permissions and security. This can quickly become overwhelming without the right tools.
If you're a sysadmin seeking to simplify your workflows, you're in luck. We've gathered some excellent software <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Y0z5CsoQPE:8FK9CTFmqmY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Y0z5CsoQPE:8FK9CTFmqmY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Y0z5CsoQPE:8FK9CTFmqmY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5Y0z5CsoQPE:8FK9CTFmqmY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Y0z5CsoQPE:8FK9CTFmqmY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5Y0z5CsoQPE:8FK9CTFmqmY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Y0z5CsoQPE:8FK9CTFmqmY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5Y0z5CsoQPE:8FK9CTFmqmY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4522853561067177220
title: Chinese Hackers Using Firefox Extension to Spy On Tibetan Organizations
uri: Chinese-Hackers-Using-Firefox-Extension-to-Spy-On-Tibetan-Organization
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4522853561067177220
content:
Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems.
"Threat actors aligned with the Chinese Communist Party's state interests delivered a customized malicious Mozilla Firefox browser extension that facilitated access and control of users' Gmail accounts," Proofpoint said <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wMmRJcey3oY:STk3aQLZGOU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wMmRJcey3oY:STk3aQLZGOU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wMmRJcey3oY:STk3aQLZGOU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wMmRJcey3oY:STk3aQLZGOU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wMmRJcey3oY:STk3aQLZGOU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wMmRJcey3oY:STk3aQLZGOU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wMmRJcey3oY:STk3aQLZGOU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wMmRJcey3oY:STk3aQLZGOU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3317980926602098360
title: Cisco Releases Security Patches for Critical Flaws Affecting its Products
uri: Cisco-Releases-Security-Patches-for-Critical-Flaws-Affecting-its-Produ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3317980926602098360
content:
Cisco has addressed a maximum severity vulnerability in its Application Centric Infrastructure (ACI) Multi-Site Orchestrator (MSO) that could allow an unauthenticated, remote attacker to bypass authentication on vulnerable devices.
"An attacker could exploit this vulnerability by sending a crafted request to the affected API," the company said in an advisory published yesterday. "A successful <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGWUKC89skI:yDfKuPiob-E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGWUKC89skI:yDfKuPiob-E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGWUKC89skI:yDfKuPiob-E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGWUKC89skI:yDfKuPiob-E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGWUKC89skI:yDfKuPiob-E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGWUKC89skI:yDfKuPiob-E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGWUKC89skI:yDfKuPiob-E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGWUKC89skI:yDfKuPiob-E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8553090419326242376
title: ALERT: Malicious Amazon Alexa Skills Can Easily Bypass Vetting Process
uri: ALERT-Malicious-Amazon-Alexa-Skills-Can-Easily-Bypass-Vetting-Process
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8553090419326242376
content:
Researchers have uncovered gaps in Amazon's skill vetting process for the Alexa voice assistant ecosystem that could allow a malicious actor to publish a deceptive skill under any arbitrary developer name and even make backend code changes after approval to trick users into giving up sensitive information.
The findings were presented on Wednesday at the Network and Distributed System Security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tPZAPoltEdk:3b7MPjUtYUo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tPZAPoltEdk:3b7MPjUtYUo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tPZAPoltEdk:3b7MPjUtYUo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tPZAPoltEdk:3b7MPjUtYUo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tPZAPoltEdk:3b7MPjUtYUo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tPZAPoltEdk:3b7MPjUtYUo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tPZAPoltEdk:3b7MPjUtYUo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tPZAPoltEdk:3b7MPjUtYUo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4516341358844120328
title: North Korean Hackers Targeting Defense Firms with ThreatNeedle Malware
uri: North-Korean-Hackers-Targeting-Defense-Firms-with-ThreatNeedle-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4516341358844120328
content:
A prolific North Korean state-sponsored hacking group has been tied to a new ongoing espionage campaign aimed at exfiltrating sensitive information from organizations in the defense industry.
Attributing the attacks with high confidence to the Lazarus Group, the new findings from Kaspersky signal an expansion of the APT actor's tactics by going beyond the usual gamut of financially-motivated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=70y1849WSoA:tSmEB4RwZCU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=70y1849WSoA:tSmEB4RwZCU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=70y1849WSoA:tSmEB4RwZCU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=70y1849WSoA:tSmEB4RwZCU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=70y1849WSoA:tSmEB4RwZCU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=70y1849WSoA:tSmEB4RwZCU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=70y1849WSoA:tSmEB4RwZCU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=70y1849WSoA:tSmEB4RwZCU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7120677852233915704
title: Why do companies fail to stop breaches despite soaring IT security investment?
uri: Why-do-companies-fail-to-stop-breaches-despite-soaring-IT-security-inv
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7120677852233915704
content:
Let's first take a look back at 2020!
Adding to the list of difficulties that surfaced last year, 2020 was also grim for personal data protection, as it has marked a new record number of leaked credentials and PI data.
A whopping 20 billion records were stolen in a single year, increasing 66% from 12 billion in 2019. Incredibly, this is a 9x increase from the comparatively "small" amount of 2.3 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AMvec3LM0A:ltgKB4ZmsNU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AMvec3LM0A:ltgKB4ZmsNU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AMvec3LM0A:ltgKB4ZmsNU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5AMvec3LM0A:ltgKB4ZmsNU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AMvec3LM0A:ltgKB4ZmsNU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5AMvec3LM0A:ltgKB4ZmsNU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AMvec3LM0A:ltgKB4ZmsNU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5AMvec3LM0A:ltgKB4ZmsNU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6327352144925877149
title: Chinese Hackers Targeted India's Power Grid Amid Geopolitical Tensions
uri: Chinese-Hackers-Targeted-India-s-Power-Grid-Amid-Geopolitical-Tensions
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6327352144925877149
content:
Amid heightened border tensions between India and China, cybersecurity researchers have revealed a concerted campaign against India's critical infrastructure, including the nation's power grid, from Chinese state-sponsored groups.
The attacks, which coincided with the standoff between the two nations in May 2020, targeted a total of 12 organizations, 10 of which are in the power generation and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lIJbp36Ry5Q:9S0TG83GlZc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lIJbp36Ry5Q:9S0TG83GlZc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lIJbp36Ry5Q:9S0TG83GlZc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lIJbp36Ry5Q:9S0TG83GlZc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lIJbp36Ry5Q:9S0TG83GlZc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lIJbp36Ry5Q:9S0TG83GlZc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lIJbp36Ry5Q:9S0TG83GlZc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lIJbp36Ry5Q:9S0TG83GlZc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7464599360558057041
title: SolarWinds Blames Intern for Weak Password That Led to Biggest Attack in 2020
uri: SolarWinds-Blames-Intern-for-Weak-Password-That-Led-to-Biggest-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7464599360558057041
content:
As cybersecurity researchers continue to piece together the sprawling SolarWinds supply chain attack, top executives of the Texas-based software services firm blamed an intern for a critical password lapse that went unnoticed for several years. 
The said password "solarwinds123" was originally believed to have been publicly accessible via a GitHub repository since June 17, 2018, before the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAjjh0_0k7M:xXAkte2gO94:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAjjh0_0k7M:xXAkte2gO94:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAjjh0_0k7M:xXAkte2gO94:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rAjjh0_0k7M:xXAkte2gO94:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAjjh0_0k7M:xXAkte2gO94:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rAjjh0_0k7M:xXAkte2gO94:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAjjh0_0k7M:xXAkte2gO94:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rAjjh0_0k7M:xXAkte2gO94:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2399864983038511560
title: Gootkit RAT Using SEO to Distribute Malware Through Compromised Sites
uri: Gootkit-RAT-Using-SEO-to-Distribute-Malware-Through-Compromised-Sites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2399864983038511560
content:
A framework notorious for delivering a banking Trojan has received a facelift to deploy a wider range of malware, including ransomware payloads.
"The Gootkit malware family has been around more than half a decade – a mature Trojan with functionality centered around banking credential theft," Sophos researchers Gabor Szappanos and Andrew Brandt said in a write-up published today.
"In recent years<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0i8FA0w-_6w:2c_DE3Qieio:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0i8FA0w-_6w:2c_DE3Qieio:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0i8FA0w-_6w:2c_DE3Qieio:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0i8FA0w-_6w:2c_DE3Qieio:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0i8FA0w-_6w:2c_DE3Qieio:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0i8FA0w-_6w:2c_DE3Qieio:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0i8FA0w-_6w:2c_DE3Qieio:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0i8FA0w-_6w:2c_DE3Qieio:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6670536894210287753
title: New 'unc0ver' Tool Can Jailbreak All iPhone Models Running iOS 11.0 - 14.3
uri: New-unc0ver-Tool-Can-Jailbreak-All-iPhone-Models-Running-iOS-11-0
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6670536894210287753
content:
A popular jailbreaking tool called "unc0ver" has been updated to support iOS 14.3 and earlier releases, thereby making it possible to unlock almost every single iPhone model using a vulnerability that Apple in January disclosed was actively exploited in the wild.
The latest release, dubbed unc0ver v6.0.0, was released on Sunday, according to its lead developer Pwn20wnd, expanding its <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IDm0uQI41x8:Y2EtubDRr_4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IDm0uQI41x8:Y2EtubDRr_4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IDm0uQI41x8:Y2EtubDRr_4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IDm0uQI41x8:Y2EtubDRr_4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IDm0uQI41x8:Y2EtubDRr_4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IDm0uQI41x8:Y2EtubDRr_4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IDm0uQI41x8:Y2EtubDRr_4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IDm0uQI41x8:Y2EtubDRr_4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6770676596628285633
title: Researchers Unearth Links Between SunCrypt and QNAPCrypt Ransomware
uri: Researchers-Unearth-Links-Between-SunCrypt-and-QNAPCrypt-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6770676596628285633
content:
SunCrypt, a ransomware strain that went on to infect several targets last year, may be an updated version of the QNAPCrypt ransomware, which targeted Linux-based file storage systems, according to new research.

"While the two ransomware [families] are operated by distinct different threat actors on the dark web, there are strong technical connections in code reuse and techniques, linking the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wqA_koAWeP8:YvDnhk7ve08:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wqA_koAWeP8:YvDnhk7ve08:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wqA_koAWeP8:YvDnhk7ve08:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wqA_koAWeP8:YvDnhk7ve08:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wqA_koAWeP8:YvDnhk7ve08:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wqA_koAWeP8:YvDnhk7ve08:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wqA_koAWeP8:YvDnhk7ve08:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wqA_koAWeP8:YvDnhk7ve08:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1060654502364521747
title: URGENT — 4 Actively Exploited 0-Day Flaws Found in Microsoft Exchange
uri: URGENT-4-Actively-Exploited-0-Day-Flaws-Found-in-Microsoft-Exchang
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1060654502364521747
content:
Microsoft has released emergency patches to address four previously undisclosed security flaws in Exchange Server that it says are being actively exploited by a new Chinese state-sponsored threat actor with the goal of perpetrating data theft.
Describing the attacks as "limited and targeted," Microsoft Threat Intelligence Center (MSTIC) said the threat actor used these vulnerabilities to access <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zy2QLHFNXu4:6CWbjKfptOc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zy2QLHFNXu4:6CWbjKfptOc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zy2QLHFNXu4:6CWbjKfptOc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zy2QLHFNXu4:6CWbjKfptOc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zy2QLHFNXu4:6CWbjKfptOc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zy2QLHFNXu4:6CWbjKfptOc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zy2QLHFNXu4:6CWbjKfptOc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zy2QLHFNXu4:6CWbjKfptOc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7851265716769946427
title: New Chrome 0-day Bug Under Active Attacks – Update Your Browser ASAP!
uri: New-Chrome-0-day-Bug-Under-Active-Attacks-Update-Your-Browser-ASAP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7851265716769946427
content:
Exactly a month after patching an actively exploited zero-day flaw in Chrome, Google today rolled out fixes for yet another zero-day vulnerability in the world's most popular web browser that it says is being abused in the wild.
Chrome 89.0.4389.72, released by the search giant for Windows, Mac, and Linux on Tuesday, comes with a total of 47 security fixes, the most severe of which concerns an "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kRUNfPbSnY0:aYWaW1wUV7M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kRUNfPbSnY0:aYWaW1wUV7M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kRUNfPbSnY0:aYWaW1wUV7M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kRUNfPbSnY0:aYWaW1wUV7M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kRUNfPbSnY0:aYWaW1wUV7M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kRUNfPbSnY0:aYWaW1wUV7M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kRUNfPbSnY0:aYWaW1wUV7M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kRUNfPbSnY0:aYWaW1wUV7M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9187778739633360853
title: Replacing EDR/NGAV with Autonomous XDR Makes a Big Difference for Small Security Teams
uri: Replacing-EDR-NGAV-with-Autonomous-XDR-Makes-a-Big-Difference-for-Smal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9187778739633360853
content:
The attack surface is virtually expanding before our eyes. Protecting assets across multiple locations, with multiple solutions from different vendors, has become a daily concern for CISOs globally. 
In a new e-book recently published (download here), CISOs with small security teams talk about the drivers for replacing their EDR/NGAV solutions with an Autonomous XDR solution and why they believe<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ug8BvjXc9t8:1GxeQJDDpGw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ug8BvjXc9t8:1GxeQJDDpGw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ug8BvjXc9t8:1GxeQJDDpGw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ug8BvjXc9t8:1GxeQJDDpGw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ug8BvjXc9t8:1GxeQJDDpGw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ug8BvjXc9t8:1GxeQJDDpGw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ug8BvjXc9t8:1GxeQJDDpGw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ug8BvjXc9t8:1GxeQJDDpGw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3313934273038748314
title: A $50,000 Bug Could've Allowed Hackers Access Any Microsoft Account
uri: A-50-000-Bug-Could-ve-Allowed-Hackers-Access-Any-Microsoft-Account
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3313934273038748314
content:
Microsoft has awarded an independent security researcher $50,000 as part of its bug bounty program for reporting a flaw that could have allowed a malicious actor to hijack users' accounts without their knowledge.
Reported by Laxman Muthiyah, the vulnerability aims to brute-force the seven-digit security code that's sent to a user's email address or mobile number to corroborate his (or her) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWt1lW6NsWM:2VmcsrDLqRw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWt1lW6NsWM:2VmcsrDLqRw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWt1lW6NsWM:2VmcsrDLqRw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWt1lW6NsWM:2VmcsrDLqRw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWt1lW6NsWM:2VmcsrDLqRw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWt1lW6NsWM:2VmcsrDLqRw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWt1lW6NsWM:2VmcsrDLqRw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWt1lW6NsWM:2VmcsrDLqRw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1386973716131430323
title: Hackers Now Hiding ObliqueRAT Payload in Images to Evade Detection
uri: Hackers-Now-Hiding-ObliqueRAT-Payload-in-Images-to-Evade-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1386973716131430323
content:
Cybercriminals are now deploying remote access Trojans (RATs) under the guise of seemingly innocuous images hosted on infected websites, once again highlighting how threat actors quickly change tactics when their attack methods are discovered and exposed publicly.
New research released by Cisco Talos reveals a new malware campaign targeting organizations in South Asia that utilize malicious <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XRIhZP_4QBk:U-6Pf7XUsmw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XRIhZP_4QBk:U-6Pf7XUsmw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XRIhZP_4QBk:U-6Pf7XUsmw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XRIhZP_4QBk:U-6Pf7XUsmw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XRIhZP_4QBk:U-6Pf7XUsmw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XRIhZP_4QBk:U-6Pf7XUsmw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XRIhZP_4QBk:U-6Pf7XUsmw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XRIhZP_4QBk:U-6Pf7XUsmw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6608660210193867304
title: CISA Issues Emergency Directive on In-the-Wild Microsoft Exchange Flaws
uri: CISA-Issues-Emergency-Directive-on-In-the-Wild-Microsoft-Exchange-Flaw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6608660210193867304
content:
Following Microsoft's release of out-of-band patches to address multiple zero-day flaws in on-premises versions of Microsoft Exchange Server, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive warning of "active exploitation" of the vulnerabilities.
&lt;!--adsense--&gt;
The alert comes on the heels of Microsoft's disclosure that China-based hackers were <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hvW0VVg2DbQ:T-oxUyoe5Fk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hvW0VVg2DbQ:T-oxUyoe5Fk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hvW0VVg2DbQ:T-oxUyoe5Fk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hvW0VVg2DbQ:T-oxUyoe5Fk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hvW0VVg2DbQ:T-oxUyoe5Fk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hvW0VVg2DbQ:T-oxUyoe5Fk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hvW0VVg2DbQ:T-oxUyoe5Fk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hvW0VVg2DbQ:T-oxUyoe5Fk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7587213079124136221
title: Extortion Gang Breaches Cybersecurity Firm Qualys Using Accellion Exploit
uri: Extortion-Gang-Breaches-Cybersecurity-Firm-Qualys-Using-Accellion-Expl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7587213079124136221
content:
Enterprise cloud security firm Qualys has become the latest victim to join a long list of entities to have suffered a data breach after zero-day vulnerabilities in its Accellion File Transfer Appliance (FTA) server were exploited to steal sensitive business documents.
As proof of access to the data, the cybercriminals behind the recent hacks targeting Accellion FTA servers have shared <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HMI9cSTHCQ:AQ2pfuo2saY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HMI9cSTHCQ:AQ2pfuo2saY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HMI9cSTHCQ:AQ2pfuo2saY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5HMI9cSTHCQ:AQ2pfuo2saY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HMI9cSTHCQ:AQ2pfuo2saY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5HMI9cSTHCQ:AQ2pfuo2saY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HMI9cSTHCQ:AQ2pfuo2saY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5HMI9cSTHCQ:AQ2pfuo2saY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4721736439267238685
title: Google Will Use 'FLoC' for Ad Targeting Once 3rd-Party Cookies Are Dead
uri: Google-Will-Use-FLoC-for-Ad-Targeting-Once-3rd-Party-Cookies-Are-Dea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4721736439267238685
content:
Signaling a major shift to its ads-driven business model, Google on Wednesday unequivocally stated it would not build alternate identifiers or tools to track users across multiple websites once it begins phasing out third-party tracking cookies from its Chrome browser by early 2022.
"Instead, our web products will be powered by privacy-preserving APIs which prevent individual tracking while <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikSVaaWHmbA:hdqpj0PN9J8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikSVaaWHmbA:hdqpj0PN9J8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikSVaaWHmbA:hdqpj0PN9J8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ikSVaaWHmbA:hdqpj0PN9J8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikSVaaWHmbA:hdqpj0PN9J8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ikSVaaWHmbA:hdqpj0PN9J8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikSVaaWHmbA:hdqpj0PN9J8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ikSVaaWHmbA:hdqpj0PN9J8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1926056775556021843
title: Google Cloud Certifications — Get Prep Courses and Practice Tests at 95% Discount
uri: Google-Cloud-Certifications-Get-Prep-Courses-and-Practice-Tests-at
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1926056775556021843
content:
As cloud computing continues to grow, Google Cloud is quickly becoming one of the most popular solutions. 
However, relatively few engineers know this platform well.
This leaves the door open for aspiring IT professionals who take the official exams.
The Google Cloud Certifications Practice Tests + Courses Bundle helps you get certified faster, with 43 hours of video content and over 1,000 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p4mtp6TG2YQ:Z4xSaA-miYc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p4mtp6TG2YQ:Z4xSaA-miYc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p4mtp6TG2YQ:Z4xSaA-miYc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p4mtp6TG2YQ:Z4xSaA-miYc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p4mtp6TG2YQ:Z4xSaA-miYc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p4mtp6TG2YQ:Z4xSaA-miYc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p4mtp6TG2YQ:Z4xSaA-miYc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p4mtp6TG2YQ:Z4xSaA-miYc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5565104563458699313
title: Mazafaka — Elite Hacking and Cybercrime Forum — Got Hacked!
uri: Mazafaka-Elite-Hacking-and-Cybercrime-Forum-Got-Hacked
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5565104563458699313
content:
In what's a case of hackers getting hacked, a prominent underground online criminal forum by the name of Maza has been compromised by unknown attackers, making it the fourth forum to have been breached since the start of the year.
The intrusion is said to have occurred on March 3, with information about the forum members — including usernames, email addresses, and hashed passwords — publicly <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CcQqDCgVP4w:X-beQ4KZ2Is:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CcQqDCgVP4w:X-beQ4KZ2Is:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CcQqDCgVP4w:X-beQ4KZ2Is:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CcQqDCgVP4w:X-beQ4KZ2Is:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CcQqDCgVP4w:X-beQ4KZ2Is:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CcQqDCgVP4w:X-beQ4KZ2Is:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CcQqDCgVP4w:X-beQ4KZ2Is:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CcQqDCgVP4w:X-beQ4KZ2Is:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5975837517818764230
title: Researchers Find 3 New Malware Strains Used by SolarWinds Hackers
uri: Researchers-Find-3-New-Malware-Strains-Used-by-SolarWinds-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5975837517818764230
content:
FireEye and Microsoft on Thursday said they discovered three more malware strains in connection with the SolarWinds supply-chain attack, including a "sophisticated second-stage backdoor," as the investigation into the sprawling espionage campaign continues to yield fresh clues about the threat actor's tactics and techniques. 
Dubbed GoldMax (aka SUNSHUTTLE), GoldFinder, and Sibot, the new set of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE7umcFDOHw:d_-o4xW9Skg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE7umcFDOHw:d_-o4xW9Skg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE7umcFDOHw:d_-o4xW9Skg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XE7umcFDOHw:d_-o4xW9Skg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE7umcFDOHw:d_-o4xW9Skg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XE7umcFDOHw:d_-o4xW9Skg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XE7umcFDOHw:d_-o4xW9Skg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XE7umcFDOHw:d_-o4xW9Skg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5883676382986816837
title: Bug in Apple's Find My Feature Could've Exposed Users' Location Histories
uri: Bug-in-Apple-s-Find-My-Feature-Could-ve-Exposed-Users-Location-Histor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5883676382986816837
content:
Cybersecurity researchers on Thursday disclosed two distinct design and implementation flaws in Apple's crowdsourced Bluetooth location tracking system that can lead to a location correlation attack and unauthorized access to the location history of the past seven days, thereby by deanonymizing users.
The findings are a consequence of an exhaustive review undertaken by the Open Wireless Link (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1GcDnWn15U:M7uljhICy6s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1GcDnWn15U:M7uljhICy6s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1GcDnWn15U:M7uljhICy6s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R1GcDnWn15U:M7uljhICy6s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1GcDnWn15U:M7uljhICy6s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R1GcDnWn15U:M7uljhICy6s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1GcDnWn15U:M7uljhICy6s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R1GcDnWn15U:M7uljhICy6s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1941508516480425108
title: Microsoft Exchange Cyber Attack — What Do We Know So Far?
uri: Microsoft-Exchange-Cyber-Attack-What-Do-We-Know-So-Far
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1941508516480425108
content:
Microsoft on Friday warned of active attacks exploiting unpatched Exchange Servers carried out by multiple threat actors, as the hacking campaign is believed to have infected tens of thousands of businesses, government entities in the U.S., Asia, and Europe.
The company said "it continues to see increased use of these vulnerabilities in attacks targeting unpatched systems by multiple malicious <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ETDAsUnOkuU:4LAG3opWyJ8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ETDAsUnOkuU:4LAG3opWyJ8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ETDAsUnOkuU:4LAG3opWyJ8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ETDAsUnOkuU:4LAG3opWyJ8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ETDAsUnOkuU:4LAG3opWyJ8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ETDAsUnOkuU:4LAG3opWyJ8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ETDAsUnOkuU:4LAG3opWyJ8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ETDAsUnOkuU:4LAG3opWyJ8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3120596911251447908
title: Malware Can Exploit New Flaw in Intel CPUs to Launch Side-Channel Attacks
uri: Malware-Can-Exploit-New-Flaw-in-Intel-CPUs-to-Launch-Side-Channel-Atta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3120596911251447908
content:
A new research has yielded yet another means to pilfer sensitive data by exploiting what's the first "on-chip, cross-core" side-channel in Intel Coffee Lake and Skylake processors.
Published by a group of academics from the University of Illinois at Urbana-Champaign, the findings are expected to be presented at the USENIX Security Symposium coming this August.
While information leakage attacks <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e3DB57Vi-T0:7aMul5hom9I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e3DB57Vi-T0:7aMul5hom9I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e3DB57Vi-T0:7aMul5hom9I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=e3DB57Vi-T0:7aMul5hom9I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e3DB57Vi-T0:7aMul5hom9I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=e3DB57Vi-T0:7aMul5hom9I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e3DB57Vi-T0:7aMul5hom9I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=e3DB57Vi-T0:7aMul5hom9I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8290573105282564875
title: Iranian Hackers Using Remote Utilities Software to Spy On Its Targets
uri: Iranian-Hackers-Using-Remote-Utilities-Software-to-Spy-On-Its-Targets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8290573105282564875
content:
Hackers with suspected ties to Iran are actively targeting academia, government agencies, and tourism entities in the Middle East and neighboring regions as part of an espionage campaign aimed at data theft.
Dubbed "Earth Vetala" by Trend Micro, the latest finding expands on previous research published by Anomali last month, which found evidence of malicious activity aimed at UAE and Kuwait <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VcvoRto4QK0:Jd1dOgRtuyo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VcvoRto4QK0:Jd1dOgRtuyo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VcvoRto4QK0:Jd1dOgRtuyo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VcvoRto4QK0:Jd1dOgRtuyo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VcvoRto4QK0:Jd1dOgRtuyo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VcvoRto4QK0:Jd1dOgRtuyo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VcvoRto4QK0:Jd1dOgRtuyo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VcvoRto4QK0:Jd1dOgRtuyo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1484411639261122555
title: Microsoft Exchange Hackers Also Breached European Banking Authority
uri: Microsoft-Exchange-Hackers-Also-Breached-European-Banking-Authority
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1484411639261122555
content:
The European Banking Authority (EBA) on Monday said it had been a victim of a cyberattack targeting its Microsoft Exchange Servers, forcing it to take its email systems offline as a precautionary measure temporarily.
"As the vulnerability is related to the EBA's email servers, access to personal data through emails held on that servers may have been obtained by the attacker," the Paris-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7LKVcpEoBA:_LTLq3V0Jps:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7LKVcpEoBA:_LTLq3V0Jps:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7LKVcpEoBA:_LTLq3V0Jps:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X7LKVcpEoBA:_LTLq3V0Jps:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7LKVcpEoBA:_LTLq3V0Jps:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X7LKVcpEoBA:_LTLq3V0Jps:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7LKVcpEoBA:_LTLq3V0Jps:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X7LKVcpEoBA:_LTLq3V0Jps:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1788706151682465974
title: Apple Issues Patch for Remote Hacking Bug Affecting Billions of its Devices
uri: Apple-Issues-Patch-for-Remote-Hacking-Bug-Affecting-Billions-of-its-De
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1788706151682465974
content:
Apple has released out-of-band patches for iOS, macOS, watchOS, and Safari browsers to address a security flaw that could allow attackers to run arbitrary code on devices via malicious web content.
Tracked as CVE-2021-1844, the vulnerability was discovered and reported to the company by Clément Lecigne of Google's Threat Analysis Group and Alison Huffman of Microsoft Browser Vulnerability <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mgmx_HZKI7M:kLNCOLFnWh4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mgmx_HZKI7M:kLNCOLFnWh4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mgmx_HZKI7M:kLNCOLFnWh4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mgmx_HZKI7M:kLNCOLFnWh4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mgmx_HZKI7M:kLNCOLFnWh4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mgmx_HZKI7M:kLNCOLFnWh4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mgmx_HZKI7M:kLNCOLFnWh4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mgmx_HZKI7M:kLNCOLFnWh4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1182570984540051224
title: 9 Android Apps On Google Play Caught Distributing AlienBot Banker and MRAT Malware
uri: 9-Android-Apps-On-Google-Play-Caught-Distributing-AlienBot-Banker-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1182570984540051224
content:
Cybersecurity researchers have discovered a new malware dropper contained in as many as 9 Android apps distributed via Google Play Store that deploys a second stage malware capable of gaining intrusive access to the financial accounts of victims as well as full control of their devices.
"This dropper, dubbed Clast82, utilizes a series of techniques to avoid detection by Google Play Protect <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aAe-Y-9blw:quxhfCACWxk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aAe-Y-9blw:quxhfCACWxk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aAe-Y-9blw:quxhfCACWxk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5aAe-Y-9blw:quxhfCACWxk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aAe-Y-9blw:quxhfCACWxk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5aAe-Y-9blw:quxhfCACWxk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aAe-Y-9blw:quxhfCACWxk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5aAe-Y-9blw:quxhfCACWxk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8396236199378061198
title: Cybersecurity Webinar — SolarWinds Sunburst: The Big Picture
uri: Cybersecurity-Webinar-SolarWinds-Sunburst-The-Big-Picture
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8396236199378061198
content:
The SolarWinds Sunburst attack has been in the headlines since it was first discovered in December 2020. 
As the so-called layers of the onion are peeled back, additional information regarding how the vulnerability was exploited, who was behind the attack, who is to blame for the attack, and the long-term ramifications of this type of supply chain vulnerabilities continue to be actively <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Y8jADtm7C8:dMnOLRI1PUg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Y8jADtm7C8:dMnOLRI1PUg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Y8jADtm7C8:dMnOLRI1PUg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Y8jADtm7C8:dMnOLRI1PUg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Y8jADtm7C8:dMnOLRI1PUg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Y8jADtm7C8:dMnOLRI1PUg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Y8jADtm7C8:dMnOLRI1PUg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Y8jADtm7C8:dMnOLRI1PUg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4089028276502333681
title: SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers
uri: SolarWinds-Hack-New-Evidence-Suggests-Potential-Links-to-Chinese-H
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4089028276502333681
content:
A malicious web shell deployed on Windows systems by leveraging a previously undisclosed zero-day in SolarWinds' Orion network monitoring software may have been the work of a possible Chinese threat group.
In a report published by Secureworks on Monday, the cybersecurity firm attributed the intrusions to a threat actor it calls Spiral.
Back on December 22, 2020, Microsoft disclosed that a second<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mnwl5OH0_Uw:cYxegLJ6L2g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mnwl5OH0_Uw:cYxegLJ6L2g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mnwl5OH0_Uw:cYxegLJ6L2g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mnwl5OH0_Uw:cYxegLJ6L2g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mnwl5OH0_Uw:cYxegLJ6L2g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mnwl5OH0_Uw:cYxegLJ6L2g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mnwl5OH0_Uw:cYxegLJ6L2g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mnwl5OH0_Uw:cYxegLJ6L2g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1701991101772138793
title: Microsoft Issues Security Patches for 82 Flaws — IE 0-Day Under Active Attacks
uri: Microsoft-Issues-Security-Patches-for-82-Flaws-IE-0-Day-Under-Acti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1701991101772138793
content:
Microsoft plugged as many as 89 security flaws as part of its monthly Patch Tuesday updates released today, including fixes for an actively exploited zero-day in Internet Explorer that could permit an attacker to run arbitrary code on target machines.
Of these flaws, 14 are listed as Critical, and 75 are listed as Important in severity, out of which two of the bugs are described as publicly <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I06Iy2sRjEU:rq2NEeY5l_4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I06Iy2sRjEU:rq2NEeY5l_4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I06Iy2sRjEU:rq2NEeY5l_4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I06Iy2sRjEU:rq2NEeY5l_4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I06Iy2sRjEU:rq2NEeY5l_4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I06Iy2sRjEU:rq2NEeY5l_4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I06Iy2sRjEU:rq2NEeY5l_4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I06Iy2sRjEU:rq2NEeY5l_4:F7zBnMyn0Lo" border="0"></img></a>
</div>


