# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4112994315589054771
title: Critical "Access:7" Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices
uri: Critical-Access-7-Supply-Chain-Vulnerabilities-Impact-ATMs-Medical
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4112994315589054771
content:
As many as seven security vulnerabilities have been disclosed in PTC's Axeda software that could be weaponized to gain unauthorized access to medical and IoT devices.
Collectively called "Access:7," the weaknesses – three of which are rated Critical in severity – potentially affect more than 150 device models spanning over 100 different manufacturers, posing a significant supply chain risk.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uUMlAQhmDxU:sPy_q7xVn6w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uUMlAQhmDxU:sPy_q7xVn6w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uUMlAQhmDxU:sPy_q7xVn6w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uUMlAQhmDxU:sPy_q7xVn6w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uUMlAQhmDxU:sPy_q7xVn6w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uUMlAQhmDxU:sPy_q7xVn6w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uUMlAQhmDxU:sPy_q7xVn6w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uUMlAQhmDxU:sPy_q7xVn6w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1949202231250743714
title: Google Buys Cybersecurity Firm Mandiant for $5.4 Billion
uri: Google-Buys-Cybersecurity-Firm-Mandiant-for-5-4-Billion
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1949202231250743714
content:
Google is officially buying cybersecurity company Mandiant in an all-cash deal approximately valued at $5.4 billion, the two technology firms announced Tuesday.
Mandiant is expected to be folded into Google Cloud upon the closure of the acquisition, which is slated to happen later this year, adding to the latter's growing portfolio of security offerings such as BeyondCorp Enterprise, VirusTotal,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_i1s4Vpudbc:iZfKTdZUYFs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_i1s4Vpudbc:iZfKTdZUYFs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_i1s4Vpudbc:iZfKTdZUYFs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_i1s4Vpudbc:iZfKTdZUYFs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_i1s4Vpudbc:iZfKTdZUYFs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_i1s4Vpudbc:iZfKTdZUYFs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_i1s4Vpudbc:iZfKTdZUYFs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_i1s4Vpudbc:iZfKTdZUYFs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8346261199716238718
title: Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code
uri: Samsung-Confirms-Data-Breach-After-Hackers-Leak-Galaxy-Source-Code
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8346261199716238718
content:
Samsung on Monday confirmed a security breach that resulted in the exposure of internal company data, including the source code related to its Galaxy smartphones.
"According to our initial analysis, the breach involves some source code relating to the operation of Galaxy devices, but does not include the personal information of our consumers or employees," the electronics giant told Bloomberg.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OQk-BiAqvFI:CgA2N-emAPA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OQk-BiAqvFI:CgA2N-emAPA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OQk-BiAqvFI:CgA2N-emAPA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OQk-BiAqvFI:CgA2N-emAPA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OQk-BiAqvFI:CgA2N-emAPA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OQk-BiAqvFI:CgA2N-emAPA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OQk-BiAqvFI:CgA2N-emAPA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OQk-BiAqvFI:CgA2N-emAPA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3673263788920733637
title: Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks
uri: Google-Russian-Hackers-Target-Ukrainians-European-Allies-via-Phishin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3673263788920733637
content:
A broad range of threat actors, including Fancy Bear, Ghostwriter, and Mustang Panda, have launched phishing campaigns against Ukraine, Poland, and other European entities amid Russia's invasion of Ukraine.
Google's Threat Analysis Group (TAG) said it took down two Blogspot domains that were used by the nation-state group FancyBear (aka APT28) – which is attributed to Russia's GRU military <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tRK_UJNyueY:YA5D7LZcHV8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tRK_UJNyueY:YA5D7LZcHV8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tRK_UJNyueY:YA5D7LZcHV8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tRK_UJNyueY:YA5D7LZcHV8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tRK_UJNyueY:YA5D7LZcHV8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tRK_UJNyueY:YA5D7LZcHV8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tRK_UJNyueY:YA5D7LZcHV8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tRK_UJNyueY:YA5D7LZcHV8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3467797496350110228
title: New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices
uri: New-16-High-Severity-UEFI-Firmware-Flaws-Discovered-in-Millions-of-HP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3467797496350110228
content:
Cybersecurity researchers on Tuesday disclosed 16 new high-severity vulnerabilities in various implementations of Unified Extensible Firmware Interface (UEFI) firmware impacting multiple HP enterprise devices.
The shortcomings, which have CVSS scores ranging from 7.5 to 8.8, have been uncovered in HP's UEFI firmware. The variety of devices affected includes HP's laptops, desktops, point-of-sale <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cE7SPPQ8RNs:zTwj7f73XM8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cE7SPPQ8RNs:zTwj7f73XM8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cE7SPPQ8RNs:zTwj7f73XM8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cE7SPPQ8RNs:zTwj7f73XM8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cE7SPPQ8RNs:zTwj7f73XM8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cE7SPPQ8RNs:zTwj7f73XM8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cE7SPPQ8RNs:zTwj7f73XM8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cE7SPPQ8RNs:zTwj7f73XM8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-151209869183649744
title: Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms
uri: Critical-Security-Patches-Issued-by-Microsoft-Adobe-and-Other-Major-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/151209869183649744
content:
Microsoft's Patch Tuesday update for the month of March has been made officially available with 71 fixes spanning across its software products such as Windows, Office, Exchange, and Defender, among others.
Of the total 71 patches, three are rated Critical and 68 are rated Important in severity. While none of the vulnerabilities are listed as actively exploited, three of them are publicly known <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EzLlZhrJuRM:lBc_tusxADQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EzLlZhrJuRM:lBc_tusxADQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EzLlZhrJuRM:lBc_tusxADQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EzLlZhrJuRM:lBc_tusxADQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EzLlZhrJuRM:lBc_tusxADQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EzLlZhrJuRM:lBc_tusxADQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EzLlZhrJuRM:lBc_tusxADQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EzLlZhrJuRM:lBc_tusxADQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-98444136962988454
title: Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times
uri: Hackers-Abuse-Mitel-Devices-to-Amplify-DDoS-Attacks-by-4-Billion-Times
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/98444136962988454
content:
Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service (DDoS) attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1.
The attack vector – dubbed TP240PhoneHome (CVE-2022-26143) – has been weaponized to launch significant DDoS attacks targeting broadband access ISPs, financial <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JsTqN4wS8qk:4g1KhErbG6A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JsTqN4wS8qk:4g1KhErbG6A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JsTqN4wS8qk:4g1KhErbG6A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JsTqN4wS8qk:4g1KhErbG6A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JsTqN4wS8qk:4g1KhErbG6A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JsTqN4wS8qk:4g1KhErbG6A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JsTqN4wS8qk:4g1KhErbG6A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JsTqN4wS8qk:4g1KhErbG6A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1178849828825234209
title: Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart UPS Devices
uri: Critical-Bugs-Could-Let-Attackers-Remotely-Hack-Damage-APC-Smart-UPS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1178849828825234209
content:
Three high-impact security vulnerabilities have been disclosed in APC Smart-UPS devices that could be abused by remote adversaries as a physical weapon to access and control them in an unauthorized manner.
Collectively dubbed TLStorm, the flaws "allow for complete remote takeover of Smart-UPS devices and the ability to carry out extreme cyber-physical attacks," Ben Seri and Barak Hadad, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LELG3TemXOw:WU3IPLE_fU4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LELG3TemXOw:WU3IPLE_fU4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LELG3TemXOw:WU3IPLE_fU4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LELG3TemXOw:WU3IPLE_fU4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LELG3TemXOw:WU3IPLE_fU4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LELG3TemXOw:WU3IPLE_fU4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LELG3TemXOw:WU3IPLE_fU4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LELG3TemXOw:WU3IPLE_fU4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4323260577368186195
title: Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant
uri: Chinese-APT41-Hackers-Broke-into-at-Least-6-U-S-State-Governments-Ma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4323260577368186195
content:
APT41, the state-sponsored threat actor affiliated with China, breached at least six U.S. state government networks between May 2021 and February 2022 by retooling its attack vectors to take advantage of vulnerable internet-facing web applications.
The exploited vulnerabilities included "a zero-day vulnerability in the USAHERDS application (CVE-2021-44207) as well as the now infamous zero-day in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-AIZj-2Vqc:U7lFWiEnfLk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-AIZj-2Vqc:U7lFWiEnfLk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-AIZj-2Vqc:U7lFWiEnfLk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V-AIZj-2Vqc:U7lFWiEnfLk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-AIZj-2Vqc:U7lFWiEnfLk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V-AIZj-2Vqc:U7lFWiEnfLk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V-AIZj-2Vqc:U7lFWiEnfLk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V-AIZj-2Vqc:U7lFWiEnfLk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4380908745132648889
title: Critical RCE Bugs Found in Pascom Cloud Phone System Used by Businesses
uri: Critical-RCE-Bugs-Found-in-Pascom-Cloud-Phone-System-Used-by-Businesse
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4380908745132648889
content:
Researchers have disclosed three security vulnerabilities affecting Pascom Cloud Phone System (CPS) that could be combined to achieve a full pre-authenticated remote code execution of affected systems.
Kerbit security researcher Daniel Eshetu said the shortcomings, when chained together, can lead to "an unauthenticated attacker gaining root on these devices."
Pascom Cloud Phone System is an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ijIUqjgvctU:d2guzZo7q7o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ijIUqjgvctU:d2guzZo7q7o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ijIUqjgvctU:d2guzZo7q7o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ijIUqjgvctU:d2guzZo7q7o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ijIUqjgvctU:d2guzZo7q7o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ijIUqjgvctU:d2guzZo7q7o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ijIUqjgvctU:d2guzZo7q7o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ijIUqjgvctU:d2guzZo7q7o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1399405537919377652
title: Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States
uri: Ukrainian-Hacker-Linked-to-REvil-Ransomware-Attacks-Extradited-to-Unit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1399405537919377652
content:
Yaroslav Vasinskyi, a Ukrainian national, linked to the Russia-based REvil ransomware group has been extradited to the U.S. to face charges for his role in carrying out the file-encrypting malware attacks against several companies, including Kaseya last July.
The 22-year-old had been previously arrested in Poland in October 2021, prompting the U.S. Justice Department (DoJ) to file charges of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQjHe1hzBb4:QBFAdqAgLrc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQjHe1hzBb4:QBFAdqAgLrc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQjHe1hzBb4:QBFAdqAgLrc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CQjHe1hzBb4:QBFAdqAgLrc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQjHe1hzBb4:QBFAdqAgLrc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CQjHe1hzBb4:QBFAdqAgLrc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQjHe1hzBb4:QBFAdqAgLrc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CQjHe1hzBb4:QBFAdqAgLrc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-678609288678451230
title: Emotet Botnet's Latest Resurgence Spreads to Over 100,000 Computers
uri: Emotet-Botnet-s-Latest-Resurgence-Spreads-to-Over-100-000-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/678609288678451230
content:
The insidious Emotet botnet, which staged a return in November 2021 after a 10-month-long hiatus, is once again exhibiting signs of steady growth, amassing a swarm of over 100,000 infected hosts for perpetrating its malicious activities.
"While Emotet has not yet attained the same scale it once had, the botnet is showing a strong resurgence with a total of approximately 130,000 unique bots <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=chiC4V8kjE8:v28u13K3bEU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=chiC4V8kjE8:v28u13K3bEU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=chiC4V8kjE8:v28u13K3bEU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=chiC4V8kjE8:v28u13K3bEU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=chiC4V8kjE8:v28u13K3bEU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=chiC4V8kjE8:v28u13K3bEU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=chiC4V8kjE8:v28u13K3bEU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=chiC4V8kjE8:v28u13K3bEU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5711827852213598767
title: Iranian Hackers Targeting Turkey and Arabian Peninsula in New Malware Campaign
uri: Iranian-Hackers-Targeting-Turkey-and-Arabian-Peninsula-in-New-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5711827852213598767
content:
The Iranian state-sponsored threat actor known as MuddyWater has been attributed to a new swarm of attacks targeting Turkey and the Arabian Peninsula with the goal of deploying remote access trojans (RATs) on compromised systems.
"The MuddyWater supergroup is highly motivated and can use unauthorized access to conduct espionage, intellectual property theft, and deploy ransomware and destructive <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=htgsZy_BKAM:KCuRADMRlZA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=htgsZy_BKAM:KCuRADMRlZA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=htgsZy_BKAM:KCuRADMRlZA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=htgsZy_BKAM:KCuRADMRlZA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=htgsZy_BKAM:KCuRADMRlZA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=htgsZy_BKAM:KCuRADMRlZA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=htgsZy_BKAM:KCuRADMRlZA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=htgsZy_BKAM:KCuRADMRlZA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1709163065406559854
title: New Exploit Bypasses Existing Spectre-v2 Mitigations in Intel, AMD, Arm CPUs
uri: New-Exploit-Bypasses-Existing-Spectre-v2-Mitigations-in-Intel-AMD-Ar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1709163065406559854
content:
Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm and stage speculative execution attacks such as Spectre to leak sensitive information from host memory.
Attacks like Spectre are designed to break the isolation between different applications by taking advantage of an optimization technique <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vh07TDp9yA8:IPqQpuu0NvA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vh07TDp9yA8:IPqQpuu0NvA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vh07TDp9yA8:IPqQpuu0NvA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vh07TDp9yA8:IPqQpuu0NvA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vh07TDp9yA8:IPqQpuu0NvA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vh07TDp9yA8:IPqQpuu0NvA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vh07TDp9yA8:IPqQpuu0NvA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vh07TDp9yA8:IPqQpuu0NvA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2195709037411351390
title: Here's How to Find if WhatsApp Web Code on Your Browser Has Been Hacked
uri: Here-s-How-to-Find-if-WhatsApp-Web-Code-on-Your-Browser-Has-Been-Hacke
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2195709037411351390
content:
Meta Platforms' WhatsApp and Cloudflare have banded together for a new initiative called Code Verify to validate the authenticity of the messaging service's web app on desktop computers.
Available in the form of a Chrome and Edge browser extension, the open-source add-on is designed to "automatically verif[y] the authenticity of the WhatsApp Web code being served to your browser," Facebook said <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r1AplfxPbDU:H9YU3MD9rUU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r1AplfxPbDU:H9YU3MD9rUU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r1AplfxPbDU:H9YU3MD9rUU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r1AplfxPbDU:H9YU3MD9rUU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r1AplfxPbDU:H9YU3MD9rUU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r1AplfxPbDU:H9YU3MD9rUU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r1AplfxPbDU:H9YU3MD9rUU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r1AplfxPbDU:H9YU3MD9rUU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8737861344681262751
title: Russian Pushing New State-run TLS Certificate Authority to Deal With Sanctions
uri: Russian-Pushing-New-State-run-TLS-Certificate-Authority-to-Deal-With-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8737861344681262751
content:
The Russian government has established its own TLS certificate authority (CA) to address issues with accessing websites that have arisen in the wake of sanctions imposed by the west following the country's unprovoked military invasion of Ukraine.
According to a message posted on the Gosuslugi public services portal, the Ministry of Digital Development is expected to provide a domestic <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdNUA0zPff4:LVAbxzeVIdg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdNUA0zPff4:LVAbxzeVIdg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdNUA0zPff4:LVAbxzeVIdg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fdNUA0zPff4:LVAbxzeVIdg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdNUA0zPff4:LVAbxzeVIdg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fdNUA0zPff4:LVAbxzeVIdg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdNUA0zPff4:LVAbxzeVIdg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fdNUA0zPff4:LVAbxzeVIdg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-277798611701012874
title: Multiple Security Flaws Discovered in Popular Software Package Managers
uri: Multiple-Security-Flaws-Discovered-in-Popular-Software-Package-Manager
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/277798611701012874
content:
Multiple security vulnerabilities have been disclosed in popular package managers that, if potentially exploited, could be abused to run arbitrary code and access sensitive information, including source code and access tokens, from compromised machines.
It's, however, worth noting that the flaws require the targeted developers to handle a malicious package in conjunction with one of the affected<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xz3IIcPZ53Y:ublgbTcstCY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xz3IIcPZ53Y:ublgbTcstCY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xz3IIcPZ53Y:ublgbTcstCY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Xz3IIcPZ53Y:ublgbTcstCY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xz3IIcPZ53Y:ublgbTcstCY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Xz3IIcPZ53Y:ublgbTcstCY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xz3IIcPZ53Y:ublgbTcstCY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Xz3IIcPZ53Y:ublgbTcstCY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-865952379547027438
title: Researchers Find New Evidence Linking Kwampirs Malware to Shamoon APT Hackers
uri: Researchers-Find-New-Evidence-Linking-Kwampirs-Malware-to-Shamoon-APT
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/865952379547027438
content:
New findings released last week showcase the overlapping source code and techniques between the operators of Shamoon and Kwampirs, indicating that they "are the same group or really close collaborators."
"Research evidence shows identification of co-evolution between both Shamoon and Kwampirs malware families during the known timeline," Pablo Rincón Crespo of Cylera Labs said.
"If Kwampirs is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jwGM3mBnnJQ:C8kBMTwKDRM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jwGM3mBnnJQ:C8kBMTwKDRM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jwGM3mBnnJQ:C8kBMTwKDRM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jwGM3mBnnJQ:C8kBMTwKDRM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jwGM3mBnnJQ:C8kBMTwKDRM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jwGM3mBnnJQ:C8kBMTwKDRM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jwGM3mBnnJQ:C8kBMTwKDRM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jwGM3mBnnJQ:C8kBMTwKDRM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2581502783220528915
title: Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords
uri: Gaming-Company-Ubisoft-Confirms-It-was-Hacked-Resets-Staff-Passwords
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2581502783220528915
content:
French video game company Ubisoft on Friday confirmed it was a victim of a "cyber security incident," causing temporary disruptions to its games, systems, and services.
The Montreuil-headquartered firm said that an investigation into the breach was underway and that it has initiated a company-wide password reset as a precautionary measure.
"Also, we can confirm that all our games and services <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiQ8GKQg63I:l1_Uut5WQSI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiQ8GKQg63I:l1_Uut5WQSI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiQ8GKQg63I:l1_Uut5WQSI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OiQ8GKQg63I:l1_Uut5WQSI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiQ8GKQg63I:l1_Uut5WQSI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OiQ8GKQg63I:l1_Uut5WQSI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiQ8GKQg63I:l1_Uut5WQSI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OiQ8GKQg63I:l1_Uut5WQSI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4107743701810891871
title: Why Enterprise Threat Mitigation Requires Automated, Single-Purpose Tools
uri: Why-Enterprise-Threat-Mitigation-Requires-Automated-Single-Purpose-To
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4107743701810891871
content:
As much as threat mitigation is to a degree a specialist task involving cybersecurity experts, the day to day of threat mitigation often still comes down to systems administrators. For these sysadmins it's not an easy task, however. In enterprise IT, sysadmins teams have a wide remit but limited resources.
For systems administrators finding the time and resources to mitigate against a growing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qcKPMO_5cnM:N8jjUlUugxg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qcKPMO_5cnM:N8jjUlUugxg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qcKPMO_5cnM:N8jjUlUugxg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qcKPMO_5cnM:N8jjUlUugxg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qcKPMO_5cnM:N8jjUlUugxg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qcKPMO_5cnM:N8jjUlUugxg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qcKPMO_5cnM:N8jjUlUugxg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qcKPMO_5cnM:N8jjUlUugxg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3718888432963240199
title: Russian Ransomware Gang Retool Custom Hacking Tools of Other APT Groups
uri: Russian-Ransomware-Gang-Retool-Custom-Hacking-Tools-of-Other-APT-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3718888432963240199
content:
A Russian-speaking ransomware outfit likely targeted an unnamed entity in the gambling and gaming sector in Europe and Central America by repurposing custom tools developed by other APT groups like Iran's MuddyWater, new research has found.
The unusual attack chain involved the abuse of stolen credentials to gain unauthorized access to the victim network, ultimately leading to the deployment of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ff8UyI1zfwY:K1bC1p2k9aE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ff8UyI1zfwY:K1bC1p2k9aE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ff8UyI1zfwY:K1bC1p2k9aE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ff8UyI1zfwY:K1bC1p2k9aE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ff8UyI1zfwY:K1bC1p2k9aE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ff8UyI1zfwY:K1bC1p2k9aE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ff8UyI1zfwY:K1bC1p2k9aE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ff8UyI1zfwY:K1bC1p2k9aE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-472991503861352578
title: New Linux Bug in Netfilter Firewall Module Lets Attackers Gain Root Access
uri: New-Linux-Bug-in-Netfilter-Firewall-Module-Lets-Attackers-Gain-Root-Ac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/472991503861352578
content:
A newly disclosed security flaw in the Linux kernel could be leveraged by a local adversary to gain elevated privileges on vulnerable systems to execute arbitrary code, escape containers, or induce a kernel panic.
Tracked as CVE-2022-25636 (CVSS score: 7.8), the vulnerability impacts Linux kernel versions 5.4 through 5.6.10 and is a result of a heap out-of-bounds write in the netfilter <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gM7xuGrHdxU:v5P1H6BTHTY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gM7xuGrHdxU:v5P1H6BTHTY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gM7xuGrHdxU:v5P1H6BTHTY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gM7xuGrHdxU:v5P1H6BTHTY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gM7xuGrHdxU:v5P1H6BTHTY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gM7xuGrHdxU:v5P1H6BTHTY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gM7xuGrHdxU:v5P1H6BTHTY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gM7xuGrHdxU:v5P1H6BTHTY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9140591267348369050
title: 'Dirty Pipe' Linux Flaw Affects a Wide Range of QNAP NAS Devices
uri: Dirty-Pipe-Linux-Flaw-Affects-a-Wide-Range-of-QNAP-NAS-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9140591267348369050
content:
Network-attached storage (NAS) appliance maker QNAP on Monday warned of a recently disclosed Linux vulnerability affecting its devices that could be abused to elevate privileges and gain control of affected systems.
"A local privilege escalation vulnerability, also known as 'Dirty Pipe,' has been reported to affect the Linux kernel on QNAP NAS running QTS 5.0.x and QuTS hero h5.0.x," the company<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WybUE52wA4U:sgiCLZmfhPU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WybUE52wA4U:sgiCLZmfhPU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WybUE52wA4U:sgiCLZmfhPU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WybUE52wA4U:sgiCLZmfhPU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WybUE52wA4U:sgiCLZmfhPU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WybUE52wA4U:sgiCLZmfhPU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WybUE52wA4U:sgiCLZmfhPU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WybUE52wA4U:sgiCLZmfhPU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7941686881118394791
title: Massive DDoS Attack Knocked Israeli Government Websites Offline
uri: Massive-DDoS-Attack-Knocked-Israeli-Government-Websites-Offline
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7941686881118394791
content:
A number of websites belonging to the Israeli government were felled in a distributed denial-of-service (DDoS) attack on Monday, rendering the portals inaccessible for a short period of time.
"In the past few hours, a DDoS attack against a communications provider was identified," the Israel National Cyber Directorate (INCD) said in a tweet. "As a result, access to several websites, among them <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ai-9BZpos2g:Y9u__Uc8bHo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ai-9BZpos2g:Y9u__Uc8bHo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ai-9BZpos2g:Y9u__Uc8bHo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ai-9BZpos2g:Y9u__Uc8bHo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ai-9BZpos2g:Y9u__Uc8bHo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ai-9BZpos2g:Y9u__Uc8bHo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ai-9BZpos2g:Y9u__Uc8bHo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ai-9BZpos2g:Y9u__Uc8bHo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-233926208462256775
title: CaddyWiper: Yet Another Data Wiping Malware Targeting Ukrainian Networks
uri: CaddyWiper-Yet-Another-Data-Wiping-Malware-Targeting-Ukrainian-Networ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/233926208462256775
content:
Two weeks after details emerged about a second data wiper strain delivered in attacks against Ukraine, yet another destructive malware has been detected amid Russia's continuing military invasion of the country.
Slovak cybersecurity company ESET dubbed the third wiper "CaddyWiper," which it said it first observed on March 14 around 9:38 a.m. UTC. Metadata associated with the executable ("<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dFT3PFnjurw:ouRmuCia6lw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dFT3PFnjurw:ouRmuCia6lw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dFT3PFnjurw:ouRmuCia6lw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dFT3PFnjurw:ouRmuCia6lw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dFT3PFnjurw:ouRmuCia6lw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dFT3PFnjurw:ouRmuCia6lw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dFT3PFnjurw:ouRmuCia6lw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dFT3PFnjurw:ouRmuCia6lw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1703698315513556510
title: Nearly 34 Ransomware Variants Observed in Hundreds of Cyberattacks in Q4 2021
uri: Nearly-34-Ransomware-Variants-Observed-in-Hundreds-of-Cyberattacks-in
url: https://thehackernews.com/2022/03/nearly-34-ransomware-variants-observed.html
content:
As many as 722 ransomware attacks were observed during the fourth quarter of 2021, with LockBit 2.0, Conti, PYSA, Hive, and Grief emerging as the most prevalent strains, according to new research published by Intel 471.
The attacks mark an increase of 110 and 129 attacks from the third and second quarters of 2021, respectively. In all, 34 different ransomware variants were detected during the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0ISqcCej3r4:WAgeinXAhcE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0ISqcCej3r4:WAgeinXAhcE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0ISqcCej3r4:WAgeinXAhcE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0ISqcCej3r4:WAgeinXAhcE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0ISqcCej3r4:WAgeinXAhcE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0ISqcCej3r4:WAgeinXAhcE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0ISqcCej3r4:WAgeinXAhcE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0ISqcCej3r4:WAgeinXAhcE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1251724559554497742
title: German Government Warns Against Using Russia's Kaspersky Antivirus Software
uri: German-Government-Warns-Against-Using-Russia-s-Kaspersky-Antivirus-Sof
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1251724559554497742
content:
Russian cybersecurity firm Kaspersky on Tuesday responded to an advisory released by Germany's Federal Office of Information Security (BSI) against using the company's security solutions in the country over "doubts about the reliability of the manufacturer."
Calling that the decision was made on "political grounds," the company said it will "continue to assure our partners and customers of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rSd_YBeQkjQ:8QBgtOow0aA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rSd_YBeQkjQ:8QBgtOow0aA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rSd_YBeQkjQ:8QBgtOow0aA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rSd_YBeQkjQ:8QBgtOow0aA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rSd_YBeQkjQ:8QBgtOow0aA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rSd_YBeQkjQ:8QBgtOow0aA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rSd_YBeQkjQ:8QBgtOow0aA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rSd_YBeQkjQ:8QBgtOow0aA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8550214013859850203
title: Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data
uri: Multiple-Flaws-Uncovered-in-ClickHouse-OLAP-Database-System-for-Big-Da
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8550214013859850203
content:
Researchers have disclosed seven new security vulnerabilities in an open-source database management system solution called ClickHouse that could be weaponized to crash the servers, leak memory contents, and even lead to the execution of arbitrary code.
"The vulnerabilities require authentication, but can be triggered by any user with read permissions," Uriya Yavnieli and Or Peles, researchers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X3WzcHm52eM:J8-P1qO-RNM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X3WzcHm52eM:J8-P1qO-RNM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X3WzcHm52eM:J8-P1qO-RNM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X3WzcHm52eM:J8-P1qO-RNM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X3WzcHm52eM:J8-P1qO-RNM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X3WzcHm52eM:J8-P1qO-RNM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X3WzcHm52eM:J8-P1qO-RNM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X3WzcHm52eM:J8-P1qO-RNM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8792336720358282337
title: Facebook Hit With $18.6 Million GDPR Fine Over 12 Data Breaches in 2018
uri: Facebook-Hit-With-18-6-Million-GDPR-Fine-Over-12-Data-Breaches-in-201
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8792336720358282337
content:
The Irish Data Protection Commission (DPC) on Tuesday slapped Facebook and WhatsApp owner Meta Platforms a fine of €17 million (~$18.6 million) for a series of security lapses that occurred in violation of the European Union's GDPR laws in the region.
"The DPC found that Meta Platforms failed to have in place appropriate technical and organizational measures which would enable it to readily <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lHyHptt3Vc:1enr7lQrzW4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lHyHptt3Vc:1enr7lQrzW4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lHyHptt3Vc:1enr7lQrzW4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4lHyHptt3Vc:1enr7lQrzW4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lHyHptt3Vc:1enr7lQrzW4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4lHyHptt3Vc:1enr7lQrzW4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lHyHptt3Vc:1enr7lQrzW4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4lHyHptt3Vc:1enr7lQrzW4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8480849317245485047
title: New "B1txor20" Linux Botnet Uses DNS Tunnel and Exploits Log4J Flaw
uri: New-B1txor20-Linux-Botnet-Uses-DNS-Tunnel-and-Exploits-Log4J-Flaw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8480849317245485047
content:
A previously undocumented backdoor has been observed targeting Linux systems with the goal of corralling the machines into a botnet and acting as a conduit for downloading and installing rootkits.
Qihoo 360's Netlab security team called it B1txor20 "based on its propagation using the file name 'b1t,' the XOR encryption algorithm, and the RC4 algorithm key length of 20 bytes."
&lt;!--adsense--&gt;
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuedjz4-V8w:F1eyaC-TfI4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuedjz4-V8w:F1eyaC-TfI4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuedjz4-V8w:F1eyaC-TfI4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yuedjz4-V8w:F1eyaC-TfI4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuedjz4-V8w:F1eyaC-TfI4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yuedjz4-V8w:F1eyaC-TfI4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yuedjz4-V8w:F1eyaC-TfI4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yuedjz4-V8w:F1eyaC-TfI4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4803320371400115364
title: New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers
uri: New-Infinite-Loop-Bug-in-OpenSSL-Could-Let-Attackers-Crash-Remote-Serv
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4803320371400115364
content:
The maintainers of OpenSSL have shipped patches to resolve a high-severity security flaw in its software library that could lead to a denial-of-service (DoS) condition when parsing certificates.
Tracked as CVE-2022-0778 (CVSS score: 7.5), the issue stems from parsing a malformed certificate with invalid explicit elliptic-curve parameters, resulting in what's called an "infinite loop." The flaw <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aGTXF6KwswY:dEsG65zxR8k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aGTXF6KwswY:dEsG65zxR8k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aGTXF6KwswY:dEsG65zxR8k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aGTXF6KwswY:dEsG65zxR8k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aGTXF6KwswY:dEsG65zxR8k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aGTXF6KwswY:dEsG65zxR8k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aGTXF6KwswY:dEsG65zxR8k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aGTXF6KwswY:dEsG65zxR8k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1533373524285095782
title: FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug
uri: FBI-CISA-Warn-of-Russian-Hackers-Exploiting-MFA-and-PrintNightmare-Bu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1533373524285095782
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a joint advisory warning that Russia-backed threat actors hacked the network of an unnamed non-governmental entity by exploiting a combination of flaws.
"As early as May 2021, Russian state-sponsored cyber actors took advantage of a misconfigured account set to default [<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_nnCScPG3oc:A6A-qWlrTKE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_nnCScPG3oc:A6A-qWlrTKE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_nnCScPG3oc:A6A-qWlrTKE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_nnCScPG3oc:A6A-qWlrTKE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_nnCScPG3oc:A6A-qWlrTKE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_nnCScPG3oc:A6A-qWlrTKE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_nnCScPG3oc:A6A-qWlrTKE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_nnCScPG3oc:A6A-qWlrTKE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3926027329564199172
title: Unpatched RCE Bug in dompdf Project Affects HTML to PDF Converters
uri: Unpatched-RCE-Bug-in-dompdf-Project-Affects-HTML-to-PDF-Converters
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3926027329564199172
content:
Researchers have disclosed an unpatched security vulnerability in "dompdf," a PHP-based HTML to PDF converter, that, if successfully exploited, could lead to remote code execution in certain configurations.
"By injecting CSS into the data processed by dompdf, it can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed by accessing it <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkIRWV60YKk:buRkFaNuNf8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkIRWV60YKk:buRkFaNuNf8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkIRWV60YKk:buRkFaNuNf8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkIRWV60YKk:buRkFaNuNf8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkIRWV60YKk:buRkFaNuNf8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkIRWV60YKk:buRkFaNuNf8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkIRWV60YKk:buRkFaNuNf8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkIRWV60YKk:buRkFaNuNf8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2049611945344489433
title: Ukraine Secret Service Arrests Hacker Helping Russian Invaders
uri: Ukraine-Secret-Service-Arrests-Hacker-Helping-Russian-Invaders
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2049611945344489433
content:
The Security Service of Ukraine (SBU) said it has detained a "hacker" who offered technical assistance to the invading Russian troops by providing mobile communication services inside the Ukrainian territory.
The anonymous suspect is said to have broadcasted text messages to Ukrainian officials, including security officers and civil servants, proposing that they surrender and take the side of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5r0Zdqe-ow:bAHtEcdtn2g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5r0Zdqe-ow:bAHtEcdtn2g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5r0Zdqe-ow:bAHtEcdtn2g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G5r0Zdqe-ow:bAHtEcdtn2g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5r0Zdqe-ow:bAHtEcdtn2g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G5r0Zdqe-ow:bAHtEcdtn2g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G5r0Zdqe-ow:bAHtEcdtn2g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G5r0Zdqe-ow:bAHtEcdtn2g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6274703001276360383
title: New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers
uri: New-Vulnerability-in-CRI-O-Engine-Lets-Attackers-Escape-Kubernetes-Con
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6274703001276360383
content:
A newly disclosed security vulnerability in the Kubernetes container engine CRI-O called cr8escape could be exploited by an attacker to break out of containers and obtain root access to the host.
"Invocation of CVE-2022-0811 can allow an attacker to perform a variety of actions on objectives, including execution of malware, exfiltration of data, and lateral movement across pods," CrowdStrike <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OIJNzU8YoNc:xzNgJkfcf-g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OIJNzU8YoNc:xzNgJkfcf-g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OIJNzU8YoNc:xzNgJkfcf-g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OIJNzU8YoNc:xzNgJkfcf-g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OIJNzU8YoNc:xzNgJkfcf-g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OIJNzU8YoNc:xzNgJkfcf-g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OIJNzU8YoNc:xzNgJkfcf-g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OIJNzU8YoNc:xzNgJkfcf-g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-303984399269906003
title: TrickBot Malware Abusing MikroTik Routers as Proxies for Command-and-Control
uri: TrickBot-Malware-Abusing-MikroTik-Routers-as-Proxies-for-Command-and-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/303984399269906003
content:
Microsoft on Wednesday detailed a previously undiscovered technique put to use by the TrickBot malware that involves using compromised Internet of Things (IoT) devices as a go-between for establishing communications with the command-and-control (C2) servers.
"By using MikroTik routers as proxy servers for its C2 servers and redirecting the traffic through non-standard ports, TrickBot adds <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuCpFhEoRp8:pYoYzQerL_M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuCpFhEoRp8:pYoYzQerL_M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuCpFhEoRp8:pYoYzQerL_M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KuCpFhEoRp8:pYoYzQerL_M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuCpFhEoRp8:pYoYzQerL_M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KuCpFhEoRp8:pYoYzQerL_M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KuCpFhEoRp8:pYoYzQerL_M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KuCpFhEoRp8:pYoYzQerL_M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8789996358444743962
title: Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion
uri: Popular-NPM-Package-Updated-to-Wipe-Russia-Belarus-Systems-to-Protest
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8789996358444743962
content:
In what's yet another act of sabotage, the developer behind the popular "node-ipc" NPM package shipped a new version to protest Russia's invasion of Ukraine, raising concerns about security in the open-source and the software supply chain.
Affecting versions 10.1.1 and 10.1.2 of the library, the changes introduced undesirable behavior by its maintainer RIAEvangelist, targeting users with IP <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rXjNbbPpR5c:N0ytr43cwlM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rXjNbbPpR5c:N0ytr43cwlM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rXjNbbPpR5c:N0ytr43cwlM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rXjNbbPpR5c:N0ytr43cwlM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rXjNbbPpR5c:N0ytr43cwlM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rXjNbbPpR5c:N0ytr43cwlM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rXjNbbPpR5c:N0ytr43cwlM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rXjNbbPpR5c:N0ytr43cwlM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9098908045084129046
title: DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly
uri: DirtyMoe-Botnet-Gains-New-Exploits-in-Wormable-Module-to-Spread-Rapidl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9098908045084129046
content:
The malware known as DirtyMoe has gained new worm-like propagation capabilities that allow it to expand its reach without requiring any user interaction, the latest research has found.
"The worming module targets older well-known vulnerabilities, e.g., EternalBlue and Hot Potato Windows privilege escalation," Avast researcher Martin Chlumecký said in a report published Wednesday.
"One worm <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QTDFWlUF5ps:9tUJcmKOpAw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QTDFWlUF5ps:9tUJcmKOpAw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QTDFWlUF5ps:9tUJcmKOpAw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QTDFWlUF5ps:9tUJcmKOpAw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QTDFWlUF5ps:9tUJcmKOpAw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QTDFWlUF5ps:9tUJcmKOpAw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QTDFWlUF5ps:9tUJcmKOpAw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QTDFWlUF5ps:9tUJcmKOpAw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3474726304528764764
title: The Golden Hour of Incident Response
uri: The-Golden-Hour-of-Incident-Response
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3474726304528764764
content:
As a CSIRT consultant, I cannot overemphasize the importance of effectively managing the first hour in a critical incident.
Finding out what to do is often a daunting task in a critical incident. In addition, the feeling of uneasiness often prevents an incident response analyst from making effective decisions. However, keeping a cool head and actions planned out is crucial in successfully <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmJrSY7JMH8:twTl5XcRmaY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmJrSY7JMH8:twTl5XcRmaY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmJrSY7JMH8:twTl5XcRmaY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CmJrSY7JMH8:twTl5XcRmaY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmJrSY7JMH8:twTl5XcRmaY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CmJrSY7JMH8:twTl5XcRmaY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmJrSY7JMH8:twTl5XcRmaY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CmJrSY7JMH8:twTl5XcRmaY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2503323425841984983
title: Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang
uri: Google-Uncovers-Initial-Access-Broker-Working-with-Conti-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2503323425841984983
content:
Google's Threat Analysis Group (TAG) took the wraps off a new initial access broker that it said is closely affiliated to a Russian cyber crime gang notorious for its Conti and Diavol ransomware operations.
Dubbed Exotic Lily, the financially motivated threat actor has been observed exploiting a now-patched critical flaw in the Microsoft Windows MSHTML platform (CVE-2021-40444) as part of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NNPYzGXy4wE:5TGoiuaemBY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NNPYzGXy4wE:5TGoiuaemBY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NNPYzGXy4wE:5TGoiuaemBY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NNPYzGXy4wE:5TGoiuaemBY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NNPYzGXy4wE:5TGoiuaemBY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NNPYzGXy4wE:5TGoiuaemBY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NNPYzGXy4wE:5TGoiuaemBY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NNPYzGXy4wE:5TGoiuaemBY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2545427967753641265
title: New Variant of Russian Cyclops Blink Botnet Targeting ASUS Routers
uri: New-Variant-of-Russian-Cyclops-Blink-Botnet-Targeting-ASUS-Routers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2545427967753641265
content:
ASUS routers have emerged as the target of a nascent botnet called Cyclops Blink, almost a month after it was revealed the malware abused WatchGuard firewall appliances as a stepping stone to gain remote access to breached networks.
According to a new report published by Trend Micro, the botnet's "main purpose is to build an infrastructure for further attacks on high-value targets," given that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6fuSDAbCw_g:ZGfgb1eHlHs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6fuSDAbCw_g:ZGfgb1eHlHs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6fuSDAbCw_g:ZGfgb1eHlHs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6fuSDAbCw_g:ZGfgb1eHlHs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6fuSDAbCw_g:ZGfgb1eHlHs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6fuSDAbCw_g:ZGfgb1eHlHs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6fuSDAbCw_g:ZGfgb1eHlHs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6fuSDAbCw_g:ZGfgb1eHlHs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7258689498988115490
title: Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware
uri: Experts-Find-Some-Affiliates-of-BlackMatter-Now-Spreading-BlackCat-Ran
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7258689498988115490
content:
An analysis of two ransomware attacks has identified overlaps in the tactics, techniques, and procedures (TTPs) between BlackCat and BlackMatter, indicating a strong connection between the two groups.
While it's typical of ransomware groups to rebrand their operations in response to increased visibility into their attacks, BlackCat (aka Alphv) marks a new frontier in that the cyber crime cartel <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rQYmPsApTM:vC_pvV_A52Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rQYmPsApTM:vC_pvV_A52Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rQYmPsApTM:vC_pvV_A52Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1rQYmPsApTM:vC_pvV_A52Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rQYmPsApTM:vC_pvV_A52Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1rQYmPsApTM:vC_pvV_A52Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rQYmPsApTM:vC_pvV_A52Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1rQYmPsApTM:vC_pvV_A52Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-390616692074646738
title: Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines
uri: Hackers-Target-Bank-Networks-with-new-Rootkit-to-Steal-Money-from-ATM
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/390616692074646738
content:
A financially motivated threat actor has been observed deploying a previously unknown rootkit targeting Oracle Solaris systems with the goal of compromising Automatic Teller Machine (ATM) switching networks and carrying out unauthorized cash withdrawals at different banks using fraudulent cards.
Threat intelligence and incident response firm Mandiant is tracking the cluster under the moniker <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uhg5PsmFLJQ:dGSkpxCqnuw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uhg5PsmFLJQ:dGSkpxCqnuw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uhg5PsmFLJQ:dGSkpxCqnuw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uhg5PsmFLJQ:dGSkpxCqnuw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uhg5PsmFLJQ:dGSkpxCqnuw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uhg5PsmFLJQ:dGSkpxCqnuw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uhg5PsmFLJQ:dGSkpxCqnuw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uhg5PsmFLJQ:dGSkpxCqnuw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-238451185074105488
title: South Korean DarkHotel Hackers Targeted Luxury Hotels in Macau
uri: South-Korean-DarkHotel-Hackers-Targeted-Luxury-Hotels-in-Macau
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/238451185074105488
content:
Luxury hotels in the Chinese special administrative region of Macau were the target of a malicious spear-phishing campaign from the second half of November 2021 and through mid-January 2022.
Cybersecurity firm Trellix attributed the campaign with moderate confidence to a suspected South Korean advanced persistent threat (APT) tracked as DarkHotel, building on research previously published by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZBtTfinlQ:Qet-W2WOJhU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZBtTfinlQ:Qet-W2WOJhU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZBtTfinlQ:Qet-W2WOJhU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6AZBtTfinlQ:Qet-W2WOJhU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZBtTfinlQ:Qet-W2WOJhU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6AZBtTfinlQ:Qet-W2WOJhU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZBtTfinlQ:Qet-W2WOJhU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6AZBtTfinlQ:Qet-W2WOJhU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7735834579071008929
title: New Backdoor Targets French Entities via Open-Source Package Installer
uri: New-Backdoor-Targets-French-Entities-via-Open-Source-Package-Installer
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7735834579071008929
content:
Researchers have exposed a new targeted email campaign aimed at French entities in the construction, real estate, and government sectors that leverages the Chocolatey Windows package manager to deliver a backdoor called Serpent on compromised systems.
Enterprise security firm Proofpoint attributed the attacks to a likely advanced threat actor based on the tactics and the victimology patterns <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZlVP0Zz2gYc:MRXXx61HzO4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZlVP0Zz2gYc:MRXXx61HzO4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZlVP0Zz2gYc:MRXXx61HzO4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZlVP0Zz2gYc:MRXXx61HzO4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZlVP0Zz2gYc:MRXXx61HzO4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZlVP0Zz2gYc:MRXXx61HzO4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZlVP0Zz2gYc:MRXXx61HzO4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZlVP0Zz2gYc:MRXXx61HzO4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6273696464073871098
title: 'CryptoRom' Crypto Scam Abusing iPhone Features to Target Mobile Users
uri: CryptoRom-Crypto-Scam-Abusing-iPhone-Features-to-Target-Mobile-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6273696464073871098
content:
Social engineering attacks leveraging a combination of romantic lures and cryptocurrency fraud have been luring unsuspecting victims into installing fake apps by taking advantage of legitimate iOS features like TestFlight and Web Clips.
Cybersecurity company Sophos, which has named the organized crime campaign "CryptoRom," characterized it as a wide-ranging global scam.
"This style of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pY5gAgw_pFI:vGJb_JNIoCk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pY5gAgw_pFI:vGJb_JNIoCk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pY5gAgw_pFI:vGJb_JNIoCk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pY5gAgw_pFI:vGJb_JNIoCk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pY5gAgw_pFI:vGJb_JNIoCk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pY5gAgw_pFI:vGJb_JNIoCk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pY5gAgw_pFI:vGJb_JNIoCk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pY5gAgw_pFI:vGJb_JNIoCk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8715082948150048552
title: New Browser-in-the Browser (BITB) Attack Makes Phishing Nearly Undetectable
uri: New-Browser-in-the-Browser-(BITB)-Attack-Makes-Phishing-Nearly-Undetec
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8715082948150048552
content:
A novel phishing technique called browser-in-the-browser (BitB) attack can be exploited to simulate a browser window within the browser in order to spoof a legitimate domain, thereby making it possible to stage convincing phishing attacks.
According to penetration tester and security researcher, who goes by the handle mrd0x_, the method takes advantage of third-party single sign-on (SSO) options<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0oCkGC5MYRw:5H3A9V6Ghjg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0oCkGC5MYRw:5H3A9V6Ghjg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0oCkGC5MYRw:5H3A9V6Ghjg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0oCkGC5MYRw:5H3A9V6Ghjg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0oCkGC5MYRw:5H3A9V6Ghjg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0oCkGC5MYRw:5H3A9V6Ghjg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0oCkGC5MYRw:5H3A9V6Ghjg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0oCkGC5MYRw:5H3A9V6Ghjg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6324713161358227887
title: New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS, Alienware Systems
uri: New-Dell-BIOS-Bugs-Affect-Millions-of-Inspiron-Vostro-XPS-Alienware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6324713161358227887
content:
Five new security weaknesses have been disclosed in Dell BIOS that, if successfully exploited, could lead to code execution on vulnerable systems, joining the likes of firmware vulnerabilities recently uncovered in Insyde Software's InsydeH2O and HP Unified Extensible Firmware Interface (UEFI).
Tracked as CVE-2022-24415, CVE-2022-24416, CVE-2022-24419, CVE-2022-24420, and CVE-2022-24421, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q2Nnd600e0A:-cdIKqyqUkw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q2Nnd600e0A:-cdIKqyqUkw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q2Nnd600e0A:-cdIKqyqUkw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q2Nnd600e0A:-cdIKqyqUkw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q2Nnd600e0A:-cdIKqyqUkw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q2Nnd600e0A:-cdIKqyqUkw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q2Nnd600e0A:-cdIKqyqUkw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q2Nnd600e0A:-cdIKqyqUkw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1129791285089320110
title: Wazuh Offers XDR Functionality at a Price Enterprises Will Love — Free!
uri: Wazuh-Offers-XDR-Functionality-at-a-Price-Enterprises-Will-Love-Fr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1129791285089320110
content:
Back in 2018, Palo Alto Networks CTO and co-founder Nir Zuk coined a new term to describe the way that businesses needed to approach cybersecurity in the years to come. That term, of course, was extended detection and response (XDR). It described a unified cybersecurity infrastructure that brought endpoint threat detection, network analysis and visibility (NAV), access management, and more under<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3UMw4LgdQeQ:qHZGEMK2A24:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3UMw4LgdQeQ:qHZGEMK2A24:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3UMw4LgdQeQ:qHZGEMK2A24:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3UMw4LgdQeQ:qHZGEMK2A24:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3UMw4LgdQeQ:qHZGEMK2A24:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3UMw4LgdQeQ:qHZGEMK2A24:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3UMw4LgdQeQ:qHZGEMK2A24:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3UMw4LgdQeQ:qHZGEMK2A24:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3567055729383323400
title: U.S. Government Warns Companies of Potential Russian Cyberattacks
uri: U-S-Government-Warns-Companies-of-Potential-Russian-Cyberattacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3567055729383323400
content:
The U.S. government on Monday once again cautioned of potential cyber attacks from Russia in retaliation for economic sanctions imposed by the west on the country following its military assault on Ukraine last month.
"It's part of Russia's playbook," U.S. President Joe Biden said in a statement, citing "evolving intelligence that the Russian Government is exploring options."
The development <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZHZk0Pv1Rc:HySlIyrCXMk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZHZk0Pv1Rc:HySlIyrCXMk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZHZk0Pv1Rc:HySlIyrCXMk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sZHZk0Pv1Rc:HySlIyrCXMk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZHZk0Pv1Rc:HySlIyrCXMk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sZHZk0Pv1Rc:HySlIyrCXMk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sZHZk0Pv1Rc:HySlIyrCXMk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sZHZk0Pv1Rc:HySlIyrCXMk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8450378429694863119
title: LAPSUS$ Hackers Claim to Have Breached Microsoft and Authentication Firm Okta
uri: LAPSUS-Hackers-Claim-to-Have-Breached-Microsoft-and-Authentication-Fi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8450378429694863119
content:
Microsoft and authentication services provider Okta said they are investigating claims of a potential breach alleged by the LAPSUS$ extortionist gang.
The development, which was first reported by Vice and Reuters, comes after the cyber criminal group posted screenshots and source code of what it said were the companies' internal projects and systems on its Telegram channel.
The leaked 37GB <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b4qgMhIubrw:YPCl8YbbElo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b4qgMhIubrw:YPCl8YbbElo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b4qgMhIubrw:YPCl8YbbElo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b4qgMhIubrw:YPCl8YbbElo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b4qgMhIubrw:YPCl8YbbElo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b4qgMhIubrw:YPCl8YbbElo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b4qgMhIubrw:YPCl8YbbElo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b4qgMhIubrw:YPCl8YbbElo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1203334130015537277
title: Microsoft and Okta Confirm Breach by LAPSUS$ Extortion Group
uri: Microsoft-and-Okta-Confirm-Breach-by-LAPSUS-Extortion-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1203334130015537277
content:
Microsoft on Tuesday confirmed that the LAPSUS$ extortion-focused hacking crew had gained "limited access" to its systems, as authentication services provider Okta revealed that nearly 2.5% of its customers have been potentially impacted in the wake of the breach.
"No customer code or data was involved in the observed activities," Microsoft's Threat Intelligence Center (MSTIC) said, adding that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bG77XLREc:_nTvkahSIOM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bG77XLREc:_nTvkahSIOM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bG77XLREc:_nTvkahSIOM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n4bG77XLREc:_nTvkahSIOM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bG77XLREc:_nTvkahSIOM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n4bG77XLREc:_nTvkahSIOM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bG77XLREc:_nTvkahSIOM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n4bG77XLREc:_nTvkahSIOM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-840844989978916844
title: Chinese 'Mustang Panda' Hackers Spotted Deploying New 'Hodur' Malware
uri: Chinese-Mustang-Panda-Hackers-Spotted-Deploying-New-Hodur-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/840844989978916844
content:
A China-based advanced persistent threat (APT) known as Mustang Panda has been linked to an ongoing cyberespionage campaign using a previously undocumented variant of the PlugX remote access trojan on infected machines.
Slovak cybersecurity firm ESET dubbed the new version Hodur, owing to its resemblance to another PlugX (aka Korplug) variant called THOR that came to light in July 2021.
"Most <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iFEH7LtkW7I:YFROgY-wLQ4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iFEH7LtkW7I:YFROgY-wLQ4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iFEH7LtkW7I:YFROgY-wLQ4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iFEH7LtkW7I:YFROgY-wLQ4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iFEH7LtkW7I:YFROgY-wLQ4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iFEH7LtkW7I:YFROgY-wLQ4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iFEH7LtkW7I:YFROgY-wLQ4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iFEH7LtkW7I:YFROgY-wLQ4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-856478323129097926
title: New Variant of Chinese Gimmick Malware Targeting macOS Users
uri: New-Variant-of-Chinese-Gimmick-Malware-Targeting-macOS-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/856478323129097926
content:
Researchers have disclosed details of a newly discovered macOS variant of a malware implant developed by a Chinese espionage threat actor known to strike attack organizations across Asia.
Attributing the attacks to a group tracked as Storm Cloud, cybersecurity firm Volexity characterized the new malware, dubbed Gimmick, a "feature-rich, multi-platform malware family that uses public cloud <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ed7xYdAPvwI:d77LHcnIHhI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ed7xYdAPvwI:d77LHcnIHhI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ed7xYdAPvwI:d77LHcnIHhI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ed7xYdAPvwI:d77LHcnIHhI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ed7xYdAPvwI:d77LHcnIHhI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ed7xYdAPvwI:d77LHcnIHhI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ed7xYdAPvwI:d77LHcnIHhI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ed7xYdAPvwI:d77LHcnIHhI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8923914613861052469
title: Over 200,000 MicroTik Routers Worldwide Are Under the Control of Botnet Malware
uri: Over-200-000-MicroTik-Routers-Worldwide-Are-Under-the-Control-of-Botne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8923914613861052469
content:
Vulnerable routers from MikroTik have been misused to form what cybersecurity researchers have called one of the largest botnet-as-a-service cybercrime operations seen in recent years. 
According to a new piece of research published by Avast, a cryptocurrency mining campaign leveraging the new-disrupted Glupteba botnet as well as the infamous TrickBot malware were all distributed using the same <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0VmbxFKIpWs:VOYA7VPqOws:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0VmbxFKIpWs:VOYA7VPqOws:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0VmbxFKIpWs:VOYA7VPqOws:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0VmbxFKIpWs:VOYA7VPqOws:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0VmbxFKIpWs:VOYA7VPqOws:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0VmbxFKIpWs:VOYA7VPqOws:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0VmbxFKIpWs:VOYA7VPqOws:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0VmbxFKIpWs:VOYA7VPqOws:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5967525535715272449
title: VMware Issues Patches for Critical Flaws Affecting Carbon Black App Control
uri: VMware-Issues-Patches-for-Critical-Flaws-Affecting-Carbon-Black-App-Co
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5967525535715272449
content:
VMware on Wednesday released software updates to plug two critical security vulnerabilities affecting its Carbon Black App Control platform that could be abused by a malicious actor to execute arbitrary code on affected installations in Windows systems.
Tracked as CVE-2022-22951 and CVE-2022-22952, both the flaws are rated 9.1 out of a maximum of 10 on the CVSS vulnerability scoring system. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnyIXM-sXVc:UhWGnzkEAl0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnyIXM-sXVc:UhWGnzkEAl0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnyIXM-sXVc:UhWGnzkEAl0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bnyIXM-sXVc:UhWGnzkEAl0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnyIXM-sXVc:UhWGnzkEAl0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bnyIXM-sXVc:UhWGnzkEAl0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnyIXM-sXVc:UhWGnzkEAl0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bnyIXM-sXVc:UhWGnzkEAl0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2714627757176384934
title: Over 200 Malicious NPM Packages Caught Targeting Azure Developers
uri: Over-200-Malicious-NPM-Packages-Caught-Targeting-Azure-Developers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2714627757176384934
content:
A new large scale supply chain attack has been observed targeting Azure developers with no less than 218 malicious NPM packages with the goal of stealing personal identifiable information.
"After manually inspecting some of these packages, it became apparent that this was a targeted attack against the entire @azure NPM scope, by an attacker that employed an automatic script to create accounts <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTe_KXyvUe8:wWeynp5aDgY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTe_KXyvUe8:wWeynp5aDgY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTe_KXyvUe8:wWeynp5aDgY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTe_KXyvUe8:wWeynp5aDgY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTe_KXyvUe8:wWeynp5aDgY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTe_KXyvUe8:wWeynp5aDgY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTe_KXyvUe8:wWeynp5aDgY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTe_KXyvUe8:wWeynp5aDgY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8885531930265882859
title: Researchers Trace LAPSUS$ Cyber Attacks to 16-Year-Old Hacker from England
uri: Researchers-Trace-LAPSUS-Cyber-Attacks-to-16-Year-Old-Hacker-from-Eng
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8885531930265882859
content:
Authentication services provider Okta on Wednesday named Sitel as the third-party linked to a security incident experienced by the company in late January that allowed the LAPSUS$ extortion gang to remotely take over an internal account belonging to a customer support engineer.
The company added that 366 corporate customers, or about 2.5% of its customer base, may have been impacted by the "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mV7li4L0dqA:Ilrxh36mr7I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mV7li4L0dqA:Ilrxh36mr7I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mV7li4L0dqA:Ilrxh36mr7I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mV7li4L0dqA:Ilrxh36mr7I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mV7li4L0dqA:Ilrxh36mr7I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mV7li4L0dqA:Ilrxh36mr7I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mV7li4L0dqA:Ilrxh36mr7I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mV7li4L0dqA:Ilrxh36mr7I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2889761785079900623
title: 23-Year-Old Russian Hacker Wanted by FBI for Running Marketplace of Stolen Logins
uri: 23-Year-Old-Russian-Hacker-Wanted-by-FBI-for-Running-Marketplace-of-St
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2889761785079900623
content:
A 23-year-old Russian national has been indicted in the U.S. and added to the Federal Bureau of Investigation's (FBI) Cyber Most Wanted List for his alleged role as the administrator of Marketplace A, a cyber crime forum that sold stolen login credentials, personal information, and credit card data.
Igor Dekhtyarchuk, who first appeared in hacker forums in 2013 under the alias "floraby," has <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7JiTTaKnq8U:8A_0oGGc2T0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7JiTTaKnq8U:8A_0oGGc2T0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7JiTTaKnq8U:8A_0oGGc2T0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7JiTTaKnq8U:8A_0oGGc2T0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7JiTTaKnq8U:8A_0oGGc2T0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7JiTTaKnq8U:8A_0oGGc2T0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7JiTTaKnq8U:8A_0oGGc2T0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7JiTTaKnq8U:8A_0oGGc2T0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-536150209497029194
title: Chinese APT Hackers Targeting Betting Companies in Southeast Asia
uri: Chinese-APT-Hackers-Targeting-Betting-Companies-in-Southeast-Asia
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/536150209497029194
content:
A Chinese-speaking advanced persistent threat (APT) has been linked to a new campaign targeting gambling-related companies in South East Asia, particularly Taiwan, the Philippines, and Hong Kong.
Cybersecurity firm Avast dubbed the campaign Operation Dragon Castling, describing its malware arsenal as a "robust and modular toolset." The ultimate motives of the threat actor are not immediately <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bWOjYV0DEXQ:c8XxUcJUgoA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bWOjYV0DEXQ:c8XxUcJUgoA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bWOjYV0DEXQ:c8XxUcJUgoA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bWOjYV0DEXQ:c8XxUcJUgoA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bWOjYV0DEXQ:c8XxUcJUgoA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bWOjYV0DEXQ:c8XxUcJUgoA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bWOjYV0DEXQ:c8XxUcJUgoA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bWOjYV0DEXQ:c8XxUcJUgoA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8398872222374989819
title: How to Build a Custom Malware Analysis Sandbox
uri: How-to-Build-a-Custom-Malware-Analysis-Sandbox
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8398872222374989819
content:
Before hunting malware, every researcher needs to find a system where to analyze it. There are several ways to do it: build your own environment or use third-party solutions. Today we will walk through all the steps of creating a custom malware sandbox where you can perform a proper analysis without infecting your computer. And then compare it with a ready-made service.
Why do you need a malware<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n24bqsBwhK0:j5CPkTizb9I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n24bqsBwhK0:j5CPkTizb9I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n24bqsBwhK0:j5CPkTizb9I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n24bqsBwhK0:j5CPkTizb9I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n24bqsBwhK0:j5CPkTizb9I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n24bqsBwhK0:j5CPkTizb9I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n24bqsBwhK0:j5CPkTizb9I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n24bqsBwhK0:j5CPkTizb9I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4524605336851706604
title: North Korean Hackers Exploited Chrome Zero-Day to Target Fintech, IT and Media Firms
uri: North-Korean-Hackers-Exploited-Chrome-Zero-Day-to-Target-Fintech-IT-a
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4524605336851706604
content:
Google's Threat Analysis Group (TAG) on Thursday disclosed that it acted to mitigate threats from two distinct government-backed attacker groups based in North Korea that exploited a recently-uncovered remote code execution flaw in the Chrome web browser.
The campaigns, once again "reflective of the regime's immediate concerns and priorities," are said to have targeted U.S. based organizations <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_sm3eTJRN8:T13KtcOBbBU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_sm3eTJRN8:T13KtcOBbBU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_sm3eTJRN8:T13KtcOBbBU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z_sm3eTJRN8:T13KtcOBbBU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_sm3eTJRN8:T13KtcOBbBU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z_sm3eTJRN8:T13KtcOBbBU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_sm3eTJRN8:T13KtcOBbBU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z_sm3eTJRN8:T13KtcOBbBU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5954719846336388960
title: U.S. Charges 4 Russian Govt. Employees Over Hacking Critical Infrastructure Worldwide
uri: U-S-Charges-4-Russian-Govt-Employees-Over-Hacking-Critical-Infrastru
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5954719846336388960
content:
The U.S. government on Thursday released a cybersecurity advisory outlining multiple intrusion campaigns conducted by state-sponsored Russian cyber actors from 2011 to 2018 that targeted the energy sector in the U.S. and beyond.
"The [Federal Security Service] conducted a multi-stage campaign in which they gained remote access to U.S. and international Energy Sector networks, deployed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6gbFHd2X6I:ss2MfxPgXvw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6gbFHd2X6I:ss2MfxPgXvw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6gbFHd2X6I:ss2MfxPgXvw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l6gbFHd2X6I:ss2MfxPgXvw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6gbFHd2X6I:ss2MfxPgXvw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l6gbFHd2X6I:ss2MfxPgXvw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6gbFHd2X6I:ss2MfxPgXvw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l6gbFHd2X6I:ss2MfxPgXvw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8924333619848964755
title: 7 Suspected Members of LAPSUS$ Hacker Gang, Aged 16 to 21, Arrested in U.K.
uri: 7-Suspected-Members-of-LAPSUS-Hacker-Gang-Aged-16-to-21-Arrested-in
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8924333619848964755
content:
The City of London Police has arrested seven teenagers between the ages of 16 and 21 for their alleged connections to the prolific LAPSUS$ extortion gang that's linked to a recent burst of attacks targeting NVIDIA, Samsung, Ubisoft, LG, Microsoft, and Okta.
The development, which was first disclosed by BBC News, comes after a report from Bloomberg revealed that a 16-year-old Oxford-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F21zima8DMY:97dnNizNeC4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F21zima8DMY:97dnNizNeC4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F21zima8DMY:97dnNizNeC4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F21zima8DMY:97dnNizNeC4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F21zima8DMY:97dnNizNeC4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F21zima8DMY:97dnNizNeC4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F21zima8DMY:97dnNizNeC4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F21zima8DMY:97dnNizNeC4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3404978655777253115
title: Experts Uncover Campaign Stealing Cryptocurrency from Android and iPhone Users
uri: Experts-Uncover-Campaign-Stealing-Cryptocurrency-from-Android-and-iPho
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3404978655777253115
content:
Researchers have blown the lid off a sophisticated malicious scheme primarily targeting Chinese users via copycat apps on Android and iOS that mimic legitimate digital wallet services to siphon cryptocurrency funds.
"These malicious apps were able to steal victims' secret seed phrases by impersonating Coinbase, imToken, MetaMask, Trust Wallet, Bitpie, TokenPocket, or OneKey," said Lukáš Štefanko<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V2m_3PYqn6Q:QRc4LunVeSo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V2m_3PYqn6Q:QRc4LunVeSo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V2m_3PYqn6Q:QRc4LunVeSo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V2m_3PYqn6Q:QRc4LunVeSo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V2m_3PYqn6Q:QRc4LunVeSo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V2m_3PYqn6Q:QRc4LunVeSo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V2m_3PYqn6Q:QRc4LunVeSo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V2m_3PYqn6Q:QRc4LunVeSo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1909510476849665772
title: Google Issues Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability
uri: Google-Issues-Urgent-Chrome-Update-to-Patch-Actively-Exploited-Zero-Da
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1909510476849665772
content:
Google on Friday shipped an out-of-band security update to address a high severity vulnerability in its Chrome browser that it said is being actively exploited in the wild.
Tracked as CVE-2022-1096, the zero-day flaw relates to a type confusion vulnerability in the V8 JavaScript engine. An anonymous researcher has been credited with reporting the bug on March 23, 2022.
Type confusion errors, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FW3pk_KMvvA:MaJ_h1PSZi0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FW3pk_KMvvA:MaJ_h1PSZi0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FW3pk_KMvvA:MaJ_h1PSZi0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FW3pk_KMvvA:MaJ_h1PSZi0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FW3pk_KMvvA:MaJ_h1PSZi0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FW3pk_KMvvA:MaJ_h1PSZi0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FW3pk_KMvvA:MaJ_h1PSZi0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FW3pk_KMvvA:MaJ_h1PSZi0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9183594661290366782
title: FCC Adds Kaspersky and Chinese Telecom Firms to National Security Threat List
uri: FCC-Adds-Kaspersky-and-Chinese-Telecom-Firms-to-National-Security-Thre
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9183594661290366782
content:
The U.S. Federal Communications Commission (FCC) on Friday moved to add Russian cybersecurity company Kaspersky Lab to the "Covered List" of companies that pose an "unacceptable risk to the national security" of the country.
The development marks the first time a Russian entity has been added to the list that's been otherwise dominated by Chinese telecommunications firms. Also added alongside <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykoaSYfq5HM:qvgiGL_9Qp4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykoaSYfq5HM:qvgiGL_9Qp4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykoaSYfq5HM:qvgiGL_9Qp4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ykoaSYfq5HM:qvgiGL_9Qp4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykoaSYfq5HM:qvgiGL_9Qp4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ykoaSYfq5HM:qvgiGL_9Qp4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ykoaSYfq5HM:qvgiGL_9Qp4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ykoaSYfq5HM:qvgiGL_9Qp4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4490072223422117436
title: Another Chinese Hacking Group Spotted Targeting Ukraine Amid Russia Invasion
uri: Another-Chinese-Hacking-Group-Spotted-Targeting-Ukraine-Amid-Russia-In
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4490072223422117436
content:
A Chinese-speaking threat actor called Scarab has been linked to a custom backdoor dubbed HeaderTip as part of a campaign targeting Ukraine since Russia embarked on an invasion last month, making it the second China-based hacking group after Mustang Panda to capitalize on the conflict.
"The malicious activity represents one of the first public examples of a Chinese threat actor targeting Ukraine<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FMVQCNr-ufQ:G2qeQFAfVo4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FMVQCNr-ufQ:G2qeQFAfVo4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FMVQCNr-ufQ:G2qeQFAfVo4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FMVQCNr-ufQ:G2qeQFAfVo4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FMVQCNr-ufQ:G2qeQFAfVo4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FMVQCNr-ufQ:G2qeQFAfVo4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FMVQCNr-ufQ:G2qeQFAfVo4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FMVQCNr-ufQ:G2qeQFAfVo4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7981034687679236490
title: Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability
uri: Muhstik-Botnet-Targeting-Redis-Servers-Using-Recently-Disclosed-Vulner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7981034687679236490
content:
Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system.
The vulnerability relates to CVE-2022-0543, a Lua sandbox escape flaw in the open-source, in-memory, key-value data store that could be abused to achieve remote code execution on the underlying machine. The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnYSHbJeQ48:1Hh4FPAP1ms:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnYSHbJeQ48:1Hh4FPAP1ms:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnYSHbJeQ48:1Hh4FPAP1ms:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bnYSHbJeQ48:1Hh4FPAP1ms:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnYSHbJeQ48:1Hh4FPAP1ms:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bnYSHbJeQ48:1Hh4FPAP1ms:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bnYSHbJeQ48:1Hh4FPAP1ms:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bnYSHbJeQ48:1Hh4FPAP1ms:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7251846581969783777
title: 'Purple Fox' Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks
uri: Purple-Fox-Hackers-Spotted-Using-New-Variant-of-FatalRAT-in-Recent-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7251846581969783777
content:
The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software.
"Users' machines are targeted via trojanized software packages masquerading as legitimate application installers," Trend Micro researchers said in a report published on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iyBXQHS4b-Q:TH-8jmgKgOM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iyBXQHS4b-Q:TH-8jmgKgOM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iyBXQHS4b-Q:TH-8jmgKgOM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iyBXQHS4b-Q:TH-8jmgKgOM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iyBXQHS4b-Q:TH-8jmgKgOM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iyBXQHS4b-Q:TH-8jmgKgOM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iyBXQHS4b-Q:TH-8jmgKgOM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iyBXQHS4b-Q:TH-8jmgKgOM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3485975951400945846
title: Of Cybercriminals and IP Addresses
uri: Of-Cybercriminals-and-IP-Addresses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3485975951400945846
content:
You don't like having the FBI knocking on your door at 6 am in the morning. Surprisingly, nor does your usual cybercriminal. That is why they hide (at least the good ones), for example, behind layers of proxies, VPNs, or TOR nodes.
Their IP address will never be exposed directly to the target's machine. Cybercriminals will always use third-party IP addresses to deliver their attacks.
There are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pxMwj2k7eyA:mWF00EDChN0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pxMwj2k7eyA:mWF00EDChN0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pxMwj2k7eyA:mWF00EDChN0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pxMwj2k7eyA:mWF00EDChN0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pxMwj2k7eyA:mWF00EDChN0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pxMwj2k7eyA:mWF00EDChN0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pxMwj2k7eyA:mWF00EDChN0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pxMwj2k7eyA:mWF00EDChN0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1765557087710300154
title: Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread Malware
uri: Hackers-Hijack-Email-Reply-Chains-on-Unpatched-Exchange-Servers-to-Spr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1765557087710300154
content:
A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IcedID info-stealing malware onto infected machines by making use of unpatched and publicly-exposed Microsoft Exchange servers.
"The emails use a social engineering technique of conversation hijacking (also known as thread hijacking)," Israeli company Intezer said in a report shared with<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNAYUIOVx58:A25sPPGK67U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNAYUIOVx58:A25sPPGK67U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNAYUIOVx58:A25sPPGK67U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UNAYUIOVx58:A25sPPGK67U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNAYUIOVx58:A25sPPGK67U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UNAYUIOVx58:A25sPPGK67U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UNAYUIOVx58:A25sPPGK67U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UNAYUIOVx58:A25sPPGK67U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3650790763548129438
title: New Report on Okta Hack Reveals the Entire Episode LAPSUS$ Attack
uri: New-Report-on-Okta-Hack-Reveals-the-Entire-Episode-LAPSUS-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3650790763548129438
content:
An independent security researcher has shared what's a detailed timeline of events that transpired as the notorious LAPSUS$ extortion gang broke into a third-party provider linked to the cyber incident at Okta in late January 2022.
In a set of screenshots posted on Twitter, Bill Demirkapi published a two-page "intrusion timeline" allegedly prepared by Mandiant, the cybersecurity firm hired by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GN2RWyrWRMQ:LpsGxs_-BnI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GN2RWyrWRMQ:LpsGxs_-BnI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GN2RWyrWRMQ:LpsGxs_-BnI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GN2RWyrWRMQ:LpsGxs_-BnI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GN2RWyrWRMQ:LpsGxs_-BnI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GN2RWyrWRMQ:LpsGxs_-BnI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GN2RWyrWRMQ:LpsGxs_-BnI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GN2RWyrWRMQ:LpsGxs_-BnI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8225520162496990637
title: Critical Sophos Firewall RCE Vulnerability Under Active Exploitation
uri: Critical-Sophos-Firewall-RCE-Vulnerability-Under-Active-Exploitation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8225520162496990637
content:
Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks.
The flaw, tracked as CVE-2022-1040, is rated 9.8 out of 10 on the CVSS scoring system and impacts Sophos Firewall versions 18.5 MR3 (18.5.3) and older. It relates to an authentication bypass vulnerability in the User Portal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tvagQGs8KGQ:cPKygo2rT-4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tvagQGs8KGQ:cPKygo2rT-4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tvagQGs8KGQ:cPKygo2rT-4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tvagQGs8KGQ:cPKygo2rT-4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tvagQGs8KGQ:cPKygo2rT-4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tvagQGs8KGQ:cPKygo2rT-4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tvagQGs8KGQ:cPKygo2rT-4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tvagQGs8KGQ:cPKygo2rT-4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2817009298454923940
title: New Malware Loader 'Verblecon' Infects Hacked PCs with Cryptocurrency Miners
uri: New-Malware-Loader-Verblecon-Infects-Hacked-PCs-with-Cryptocurrency
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2817009298454923940
content:
An unidentified threat actor has been observed employing a "complex and powerful" malware loader with the ultimate objective of deploying cryptocurrency miners on compromised systems and potentially facilitating the theft of Discord tokens.
"The evidence found on victim networks appears to indicate that the goal of the attacker was to install cryptocurrency mining software on victim machines," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HPImWMEoD0:eJwhrZyc1MI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HPImWMEoD0:eJwhrZyc1MI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HPImWMEoD0:eJwhrZyc1MI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5HPImWMEoD0:eJwhrZyc1MI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HPImWMEoD0:eJwhrZyc1MI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5HPImWMEoD0:eJwhrZyc1MI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5HPImWMEoD0:eJwhrZyc1MI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5HPImWMEoD0:eJwhrZyc1MI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3169030825788960427
title: Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation
uri: Experts-Detail-Virtual-Machine-Used-by-Wslink-Malware-Loader-for-Obfus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3169030825788960427
content:
Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an "advanced multi-layered virtual machine" used by the malware to fly under the radar.
Wslink, as the malicious loader is called, was first documented by Slovak cybersecurity company ESET in October 2021, with very few telemetry hits <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QFp_39V1Dak:1KoE_OofuEw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QFp_39V1Dak:1KoE_OofuEw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QFp_39V1Dak:1KoE_OofuEw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QFp_39V1Dak:1KoE_OofuEw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QFp_39V1Dak:1KoE_OofuEw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QFp_39V1Dak:1KoE_OofuEw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QFp_39V1Dak:1KoE_OofuEw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QFp_39V1Dak:1KoE_OofuEw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-151542298778106079
title: A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages
uri: A-Large-Scale-Supply-Chain-Attack-Distributed-Over-800-Malicious-NPM-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/151542298778106079
content:
A threat actor dubbed "RED-LILI" has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules.
"Customarily, attackers use an anonymous disposable NPM account from which they launch their attacks," Israeli security company Checkmarx said. "As it seems this time, the attacker has fully-automated the process <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=px-yNuWLqC0:Xbuj83E2fKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=px-yNuWLqC0:Xbuj83E2fKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=px-yNuWLqC0:Xbuj83E2fKo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=px-yNuWLqC0:Xbuj83E2fKo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=px-yNuWLqC0:Xbuj83E2fKo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=px-yNuWLqC0:Xbuj83E2fKo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=px-yNuWLqC0:Xbuj83E2fKo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=px-yNuWLqC0:Xbuj83E2fKo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-907196133007257698
title: New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials
uri: New-Hacking-Campaign-by-Transparent-Tribe-Hackers-Targeting-Indian-Off
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/907196133007257698
content:
A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at least June 2021.
"Transparent Tribe has been a highly active APT group in the Indian subcontinent," Cisco Talos researchers said in an analysis shared with The Hacker News. "Their primary targets have <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4_AerQgHws0:E-xwFCjzVV0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4_AerQgHws0:E-xwFCjzVV0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4_AerQgHws0:E-xwFCjzVV0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4_AerQgHws0:E-xwFCjzVV0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4_AerQgHws0:E-xwFCjzVV0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4_AerQgHws0:E-xwFCjzVV0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4_AerQgHws0:E-xwFCjzVV0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4_AerQgHws0:E-xwFCjzVV0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2458764121490180738
title: Privid: A Privacy-Preserving Surveillance Video Analytics System
uri: Privid-A-Privacy-Preserving-Surveillance-Video-Analytics-System
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2458764121490180738
content:
A group of academics has designed a new system known as "Privid" that enables video analytics in a privacy-preserving manner to combat concerns with invasive tracking.
"We're at a stage right now where cameras are practically ubiquitous. If there's a camera on every street corner, every place you go, and if someone could actually process all of those videos in aggregate, you can imagine that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LhOL9CfVK_w:KBJvp_6EX44:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LhOL9CfVK_w:KBJvp_6EX44:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LhOL9CfVK_w:KBJvp_6EX44:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LhOL9CfVK_w:KBJvp_6EX44:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LhOL9CfVK_w:KBJvp_6EX44:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LhOL9CfVK_w:KBJvp_6EX44:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LhOL9CfVK_w:KBJvp_6EX44:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LhOL9CfVK_w:KBJvp_6EX44:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1612469800587359749
title: Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances
uri: Critical-SonicOS-Vulnerability-Affects-SonicWall-Firewall-Appliances
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1612469800587359749
content:
SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a denial-of-service (DoS) condition.
Tracked as CVE-2022-22274 (CVSS score: 9.4), the issue has been described as a stack-based buffer overflow in the web management interface of SonicOS that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbxBY0pynpc:Sw46ItvyJnw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbxBY0pynpc:Sw46ItvyJnw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbxBY0pynpc:Sw46ItvyJnw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rbxBY0pynpc:Sw46ItvyJnw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbxBY0pynpc:Sw46ItvyJnw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rbxBY0pynpc:Sw46ItvyJnw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbxBY0pynpc:Sw46ItvyJnw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rbxBY0pynpc:Sw46ItvyJnw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4203535997383984319
title: CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices
uri: CISA-Warns-of-Ongoing-Cyber-Attacks-Targeting-Internet-Connected-UPS-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4203535997383984319
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default usernames and passwords.
"Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when normal power sources are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCuMOSbOvn0:GyUcePK0OUc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCuMOSbOvn0:GyUcePK0OUc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCuMOSbOvn0:GyUcePK0OUc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gCuMOSbOvn0:GyUcePK0OUc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCuMOSbOvn0:GyUcePK0OUc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gCuMOSbOvn0:GyUcePK0OUc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCuMOSbOvn0:GyUcePK0OUc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gCuMOSbOvn0:GyUcePK0OUc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6577699746395793695
title: Improve Your Hacking Skills with 9 Python Courses for Just $39
uri: Improve-Your-Hacking-Skills-with-9-Python-Courses-for-Just-39
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6577699746395793695
content:
For anyone with interest in cybersecurity, learning Python is a must. The language is used extensively in white hat hacking, and professionals use Python scripts to automate tests. It also has a use in the “soft” side of cybersecurity — like scraping the web for compromised data and detecting bugs. 
Featuring nine full-length video courses, The Complete 2022 Python Programmer Bundle helps you <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jrj_s7RDTio:QErdtb7bXrc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jrj_s7RDTio:QErdtb7bXrc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jrj_s7RDTio:QErdtb7bXrc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jrj_s7RDTio:QErdtb7bXrc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jrj_s7RDTio:QErdtb7bXrc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jrj_s7RDTio:QErdtb7bXrc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jrj_s7RDTio:QErdtb7bXrc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jrj_s7RDTio:QErdtb7bXrc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1836771574114088451
title: LAPSUS$ Claims to Have Breached IT Firm Globant; Leaks 70GB of Data
uri: LAPSUS-Claims-to-Have-Breached-IT-Firm-Globant-Leaks-70GB-of-Data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1836771574114088451
content:
The LAPSUS$ data extortion gang announced their return on Telegram after a week-long "vacation," leaking what they claim is data from software services company Globant.
"We are officially back from a vacation," the group wrote on their Telegram channel – which has nearly around 54,000 members as of writing – posting images of extracted data and credentials belonging to the company's DevOps <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lqXM1cS7vrQ:hUTUQhW-UNw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lqXM1cS7vrQ:hUTUQhW-UNw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lqXM1cS7vrQ:hUTUQhW-UNw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lqXM1cS7vrQ:hUTUQhW-UNw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lqXM1cS7vrQ:hUTUQhW-UNw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lqXM1cS7vrQ:hUTUQhW-UNw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lqXM1cS7vrQ:hUTUQhW-UNw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lqXM1cS7vrQ:hUTUQhW-UNw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3507968932413454273
title: Researchers Expose Mars Stealer Malware Campaign Using Google Ads to Spread
uri: Researchers-Expose-Mars-Stealer-Malware-Campaign-Using-Google-Ads-to-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3507968932413454273
content:
A nascent information stealer called Mars has been observed in campaigns that take advantage of cracked versions of the malware to steal information stored in web browsers and cryptocurrency wallets.
"Mars Stealer is being distributed via social engineering techniques, malspam campaigns, malicious software cracks, and keygens," Morphisec malware researcher Arnold Osipov said in a report <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LH6EuCa1qCo:gnESG5Nhjp4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LH6EuCa1qCo:gnESG5Nhjp4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LH6EuCa1qCo:gnESG5Nhjp4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LH6EuCa1qCo:gnESG5Nhjp4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LH6EuCa1qCo:gnESG5Nhjp4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LH6EuCa1qCo:gnESG5Nhjp4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LH6EuCa1qCo:gnESG5Nhjp4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LH6EuCa1qCo:gnESG5Nhjp4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6624231757293689193
title: Honda’s Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles
uri: Honda-s-Keyless-Access-Bug-Could-Let-Thieves-Remotely-Unlock-and-Sta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6624231757293689193
content:
A duo of researchers has released a proof-of-concept (PoC) demonstrating the ability for a malicious actor to remote lock, unlock, and even start Honda and Acura vehicles by means of what's called a replay attack.
The attack is made possible, thanks to a vulnerability in its remote keyless system (CVE-2022-27254) that affects Honda Civic LX, EX, EX-L, Touring, Si, and Type R models manufactured <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Imxd_A9EGGU:i0GjJMw9qyc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Imxd_A9EGGU:i0GjJMw9qyc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Imxd_A9EGGU:i0GjJMw9qyc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Imxd_A9EGGU:i0GjJMw9qyc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Imxd_A9EGGU:i0GjJMw9qyc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Imxd_A9EGGU:i0GjJMw9qyc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Imxd_A9EGGU:i0GjJMw9qyc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Imxd_A9EGGU:i0GjJMw9qyc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2652724435325707185
title: QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Devices
uri: QNAP-Warns-of-OpenSSL-Infinite-Loop-Vulnerability-Affecting-NAS-Device
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2652724435325707185
content:
Taiwanese company QNAP this week revealed that a selected number of its network-attached storage (NAS) appliances are affected by a recently-disclosed bug in the open-source OpenSSL cryptographic library.
"An infinite loop vulnerability in OpenSSL has been reported to affect certain QNAP NAS," the company said in an advisory published on March 29, 2022. "If exploited, the vulnerability allows <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v9nT-FxvnuI:9XmaaDVzd8c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v9nT-FxvnuI:9XmaaDVzd8c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v9nT-FxvnuI:9XmaaDVzd8c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v9nT-FxvnuI:9XmaaDVzd8c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v9nT-FxvnuI:9XmaaDVzd8c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v9nT-FxvnuI:9XmaaDVzd8c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v9nT-FxvnuI:9XmaaDVzd8c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v9nT-FxvnuI:9XmaaDVzd8c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6083428557642107912
title: Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security
uri: Unpatched-Java-Spring-Framework-0-Day-RCE-Bug-Threatens-Enterprise-Web
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6083428557642107912
content:
A zero-day remote code execution (RCE) vulnerability has come to light in the Spring framework shortly after a Chinese security researcher briefly leaked a proof-of-concept (PoC) exploit on GitHub before deleting their account.
According to cybersecurity firm Praetorian, the unpatched flaw impacts Spring Core on Java Development Kit (JDK) versions 9 and later and is a bypass for another <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y48iwpR_F68:TYRfxOSf28M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y48iwpR_F68:TYRfxOSf28M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y48iwpR_F68:TYRfxOSf28M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y48iwpR_F68:TYRfxOSf28M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y48iwpR_F68:TYRfxOSf28M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y48iwpR_F68:TYRfxOSf28M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y48iwpR_F68:TYRfxOSf28M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y48iwpR_F68:TYRfxOSf28M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7751979020463414806
title: Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds
uri: Bugs-in-Wyze-Cams-Could-Let-Attackers-Takeover-Devices-and-Access-Vide
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7751979020463414806
content:
Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as well as unauthorizedly read the SD cards, the latter of which remained unresolved for nearly three years after the initial discovery.
The security flaws relate to an authentication bypass (CVE-2019-9564), a remote code execution bug <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZUgSk6eFL0:lAolMbohvT0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZUgSk6eFL0:lAolMbohvT0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZUgSk6eFL0:lAolMbohvT0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XZUgSk6eFL0:lAolMbohvT0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZUgSk6eFL0:lAolMbohvT0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XZUgSk6eFL0:lAolMbohvT0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZUgSk6eFL0:lAolMbohvT0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XZUgSk6eFL0:lAolMbohvT0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6472187051467771121
title: New Python-based Ransomware Targeting JupyterLab Web Notebooks
uri: New-Python-based-Ransomware-Targeting-JupyterLab-Web-Notebooks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6472187051467771121
content:
Researchers have disclosed what they say is the first-ever Python-based ransomware strain specifically designed to target exposed Jupyter notebooks, a web-based interactive computing platform that allows editing and running programs via a browser.
"The attackers gained initial access via misconfigured environments, then ran a ransomware script that encrypts every file on a given path on the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-b4Ii3cZkjU:n4Feal0Yvyk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-b4Ii3cZkjU:n4Feal0Yvyk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-b4Ii3cZkjU:n4Feal0Yvyk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-b4Ii3cZkjU:n4Feal0Yvyk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-b4Ii3cZkjU:n4Feal0Yvyk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-b4Ii3cZkjU:n4Feal0Yvyk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-b4Ii3cZkjU:n4Feal0Yvyk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-b4Ii3cZkjU:n4Feal0Yvyk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8434364820796571856
title: Hackers Increasingly Using 'Browser in a Browser' Technique in Ukraine Related Attacks
uri: Hackers-Increasingly-Using-Browser-in-a-Browser-Technique-in-Ukraine
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8434364820796571856
content:
A Belarusian threat actor known as Ghostwriter (aka UNC1151) has been spotted leveraging the recently disclosed browser-in-the-browser (BitB) technique as part of their credential phishing campaigns exploiting the ongoing Russo-Ukrainian conflict.
The method, which masquerades as a legitimate domain by simulating a browser window within the browser, makes it possible to mount convincing social <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TKVceADyJtM:3nILKjFbVa4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TKVceADyJtM:3nILKjFbVa4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TKVceADyJtM:3nILKjFbVa4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TKVceADyJtM:3nILKjFbVa4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TKVceADyJtM:3nILKjFbVa4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TKVceADyJtM:3nILKjFbVa4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TKVceADyJtM:3nILKjFbVa4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TKVceADyJtM:3nILKjFbVa4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2659247734912365733
title: Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework
uri: Security-Patch-Releases-for-Critical-Zero-Day-Bug-in-Java-Spring-Frame
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2659247734912365733
content:
The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system.
Tracked as CVE-2022-22965, the high-severity flaw impacts Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and other older, unsupported versions. Users<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ji0PZ1yxreU:ucaSm45E4WQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ji0PZ1yxreU:ucaSm45E4WQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ji0PZ1yxreU:ucaSm45E4WQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ji0PZ1yxreU:ucaSm45E4WQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ji0PZ1yxreU:ucaSm45E4WQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ji0PZ1yxreU:ucaSm45E4WQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ji0PZ1yxreU:ucaSm45E4WQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ji0PZ1yxreU:ucaSm45E4WQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4891048624271625309
title: Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices
uri: Apple-Issues-Patches-for-2-Actively-Exploited-Zero-Days-in-iPhone-iPa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4891048624271625309
content:
Apple on Thursday rolled out emergency patches to address two zero-day flaws in its mobile and desktop operating systems that it said may have been exploited in the wild.
The shortcomings have been fixed as part of updates to iOS and iPadOS 15.4.1, macOS Monterey 12.3.1, tvOS 15.4.1, and watchOS 8.5.1. Both the vulnerabilities have been reported to Apple anonymously.
Tracked as CVE-2022-22675, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O83nqqqYtqg:9_MenlPhjog:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O83nqqqYtqg:9_MenlPhjog:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O83nqqqYtqg:9_MenlPhjog:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O83nqqqYtqg:9_MenlPhjog:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O83nqqqYtqg:9_MenlPhjog:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O83nqqqYtqg:9_MenlPhjog:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O83nqqqYtqg:9_MenlPhjog:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O83nqqqYtqg:9_MenlPhjog:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3660421789924801827
title: Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices
uri: Zyxel-Releases-Patches-for-Critical-Bug-Affecting-Business-Firewall-an
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3660421789924801827
content:
Networking equipment maker Zyxel has pushed security updates for a critical vulnerability affecting some of its business firewall and VPN products that could enable an attacker to take control of the devices.
"An authentication bypass vulnerability caused by the lack of a proper access control mechanism has been found in the CGI program of some firewall versions," the company said in an advisory<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jo_DPmH-Oho:8npZaTeUcdI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jo_DPmH-Oho:8npZaTeUcdI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jo_DPmH-Oho:8npZaTeUcdI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jo_DPmH-Oho:8npZaTeUcdI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jo_DPmH-Oho:8npZaTeUcdI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jo_DPmH-Oho:8npZaTeUcdI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jo_DPmH-Oho:8npZaTeUcdI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jo_DPmH-Oho:8npZaTeUcdI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4439969834387730006
title: Chinese Hackers Target VMware Horizon Servers with Log4Shell to Deploy Rootkit
uri: Chinese-Hackers-Target-VMware-Horizon-Servers-with-Log4Shell-to-Deploy
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4439969834387730006
content:
A Chinese advanced persistent threat tracked as Deep Panda has been observed exploiting the Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor and a novel rootkit on infected machines with the goal of stealing sensitive data.
"The nature of targeting was opportunistic insofar that multiple infections in several countries and various sectors occurred on the same dates," said <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uA1X-aVoE7g:jvMy1AZWH_0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uA1X-aVoE7g:jvMy1AZWH_0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uA1X-aVoE7g:jvMy1AZWH_0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uA1X-aVoE7g:jvMy1AZWH_0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uA1X-aVoE7g:jvMy1AZWH_0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uA1X-aVoE7g:jvMy1AZWH_0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uA1X-aVoE7g:jvMy1AZWH_0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uA1X-aVoE7g:jvMy1AZWH_0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8616217211352130592
title: Results Overview: 2022 MITRE ATT&CK Evaluation – Wizard Spider and Sandworm Edition
uri: Results-Overview-2022-MITRE-ATT-CK-Evaluation-Wizard-Spider-and-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8616217211352130592
content:
Threat actor groups like Wizard Spider and Sandworm have been wreaking havoc over the past few years – developing and deploying cybercrime tools like Conti, Trickbot, and Ryuk ransomware. Most recently, Sandworm (suspected to be a Russian cyber-military unit) unleashed cyberattacks against Ukranian infrastructure targets.
To ensure cybersecurity providers are battle ready, MITRE Engenuity uses <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9BYTbLHDYg:x8RU6lSkYp4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9BYTbLHDYg:x8RU6lSkYp4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9BYTbLHDYg:x8RU6lSkYp4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d9BYTbLHDYg:x8RU6lSkYp4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9BYTbLHDYg:x8RU6lSkYp4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d9BYTbLHDYg:x8RU6lSkYp4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9BYTbLHDYg:x8RU6lSkYp4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d9BYTbLHDYg:x8RU6lSkYp4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2188385911778205131
title: North Korean Hackers Distributing Trojanized DeFi Wallet Apps to Steal Victims' Crypto
uri: North-Korean-Hackers-Distributing-Trojanized-DeFi-Wallet-Apps-to-Steal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2188385911778205131
content:
The North Korean state-backed hacking crew, otherwise known as the Lazarus Group, has been attributed to yet another financially motivated campaign that leverages a trojanized decentralized finance (DeFi) wallet app to distribute a fully-featured backdoor onto compromised Windows systems.
The app, which is equipped with functionalities to save and manage a cryptocurrency wallet, is also designed<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7mO4avMKx44:QKvImNLOL9c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7mO4avMKx44:QKvImNLOL9c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7mO4avMKx44:QKvImNLOL9c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7mO4avMKx44:QKvImNLOL9c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7mO4avMKx44:QKvImNLOL9c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7mO4avMKx44:QKvImNLOL9c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7mO4avMKx44:QKvImNLOL9c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7mO4avMKx44:QKvImNLOL9c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3820014090260826298
title: Russian Wiper Malware Likely Behind Recent Cyberattack on Viasat KA-SAT Modems
uri: Russian-Wiper-Malware-Likely-Behind-Recent-Cyberattack-on-Viasat-KA-SA
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3820014090260826298
content:
The cyberattack aimed at Viasat that temporarily knocked KA-SAT modems offline on February 24, 2022, the same day Russian military forces invaded Ukraine, is believed to have been the consequence of wiper malware, according to the latest research from SentinelOne.
The findings come as the U.S. telecom company disclosed that it was the target of a multifaceted and deliberate" cyberattack against <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bm4nkZjMUdw:sBLPoO-M9gU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bm4nkZjMUdw:sBLPoO-M9gU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bm4nkZjMUdw:sBLPoO-M9gU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Bm4nkZjMUdw:sBLPoO-M9gU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bm4nkZjMUdw:sBLPoO-M9gU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Bm4nkZjMUdw:sBLPoO-M9gU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bm4nkZjMUdw:sBLPoO-M9gU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Bm4nkZjMUdw:sBLPoO-M9gU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1711934280500611671
title: Critical Bugs in Rockwell PLC Could Allow Hackers to Implant Malicious Code
uri: Critical-Bugs-in-Rockwell-PLC-Could-Allow-Hackers-to-Implant-Malicious
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1711934280500611671
content:
Two new security vulnerabilities have been disclosed in Rockwell Automation's programmable logic controllers (PLCs) and engineering workstation software that could be exploited by an attacker to inject malicious code on affected systems and stealthily modify automation processes.
The flaws have the potential to disrupt industrial operations and cause physical damage to factories in a manner <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g_OWhDbE-Bw:UXsaeeRHfXk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g_OWhDbE-Bw:UXsaeeRHfXk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g_OWhDbE-Bw:UXsaeeRHfXk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g_OWhDbE-Bw:UXsaeeRHfXk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g_OWhDbE-Bw:UXsaeeRHfXk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g_OWhDbE-Bw:UXsaeeRHfXk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g_OWhDbE-Bw:UXsaeeRHfXk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g_OWhDbE-Bw:UXsaeeRHfXk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3054900230046737928
title: 15-Year-Old Bug in PEAR PHP Repository Could've Enabled Supply Chain Attacks
uri: 15-Year-Old-Bug-in-PEAR-PHP-Repository-Could-ve-Enabled-Supply-Chain-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3054900230046737928
content:
A 15-year-old security vulnerability has been disclosed in the PEAR PHP repository that could permit an attacker to carry out a supply chain attack, including obtaining unauthorized access to publish rogue packages and execute arbitrary code.
"An attacker exploiting the first one could take over any developer account and publish malicious releases, while the second bug would allow the attacker <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1Fc1JXg2bkM:75MW9Cd2lc0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1Fc1JXg2bkM:75MW9Cd2lc0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1Fc1JXg2bkM:75MW9Cd2lc0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1Fc1JXg2bkM:75MW9Cd2lc0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1Fc1JXg2bkM:75MW9Cd2lc0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1Fc1JXg2bkM:75MW9Cd2lc0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1Fc1JXg2bkM:75MW9Cd2lc0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1Fc1JXg2bkM:75MW9Cd2lc0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7784662053548853605
title: British Police Charge Two Teenagers Linked to LAPSUS$ Hacker Group
uri: British-Police-Charge-Two-Teenagers-Linked-to-LAPSUS-Hacker-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7784662053548853605
content:
The City of London Police on Friday disclosed that it has charged two of the seven teenagers, a 16-year-old and a 17-year-old, who were arrested last week for their alleged connections to the LAPSUS$ data extortion gang.
"Both teenagers have been charged with: three counts of unauthorized access to a computer with intent to impair the reliability of data; one count of fraud by false <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3wUJ5SDgcA:MY0wbxu1NsI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3wUJ5SDgcA:MY0wbxu1NsI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3wUJ5SDgcA:MY0wbxu1NsI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3wUJ5SDgcA:MY0wbxu1NsI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3wUJ5SDgcA:MY0wbxu1NsI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3wUJ5SDgcA:MY0wbxu1NsI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3wUJ5SDgcA:MY0wbxu1NsI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3wUJ5SDgcA:MY0wbxu1NsI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5945687959377667074
title: GitLab Releases Patch for Critical Vulnerability That Could Let Attackers Hijack Accounts
uri: GitLab-Releases-Patch-for-Critical-Vulnerability-That-Could-Let-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5945687959377667074
content:
DevOps platform GitLab has released software updates to address a critical security vulnerability that, if potentially exploited, could permit an adversary to seize control of accounts.
Tracked as CVE-2022-1162, the issue has a CVSS score of 9.1 and is said to have been discovered internally by the GitLab team.
&lt;!--adsense--&gt;
"A hardcoded password was set for accounts registered using an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9KwhxlR-6qc:QCuHikMS9hk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9KwhxlR-6qc:QCuHikMS9hk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9KwhxlR-6qc:QCuHikMS9hk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9KwhxlR-6qc:QCuHikMS9hk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9KwhxlR-6qc:QCuHikMS9hk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9KwhxlR-6qc:QCuHikMS9hk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9KwhxlR-6qc:QCuHikMS9hk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9KwhxlR-6qc:QCuHikMS9hk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7098789432867242524
title: Beastmode DDoS Botnet Exploiting New TOTOLINK Bugs to Enslave More Routers
uri: Beastmode-DDoS-Botnet-Exploiting-New-TOTOLINK-Bugs-to-Enslave-More-Rou
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7098789432867242524
content:
A variant of the Mirai botnet called Beastmode has been observed adopting newly disclosed vulnerabilities in TOTOLINK routers between February and March 2022 to infect unpatched devices and expand its reach potentially.
"The Beastmode (aka B3astmode) Mirai-based DDoS campaign has aggressively updated its arsenal of exploits," Fortinet's FortiGuard Labs Research team said. "Five new exploits were<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aP98O3I9zg:qcFQOH3NPNE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aP98O3I9zg:qcFQOH3NPNE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aP98O3I9zg:qcFQOH3NPNE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5aP98O3I9zg:qcFQOH3NPNE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aP98O3I9zg:qcFQOH3NPNE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5aP98O3I9zg:qcFQOH3NPNE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5aP98O3I9zg:qcFQOH3NPNE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5aP98O3I9zg:qcFQOH3NPNE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8621309771917143754
title: Experts Shed Light on BlackGuard Infostealer Malware Sold on Russian Hacking Forums
uri: Experts-Shed-Light-on-BlackGuard-Infostealer-Malware-Sold-on-Russian-H
url: https://thehackernews.com/2022/04/experts-shed-light-on-blackguard.html
content:
A previously undocumented "sophisticated" information-stealing malware named BlackGuard is being advertised for sale on Russian underground forums for a monthly subscription of $200.
"BlackGuard has the capability to steal all types of information related to Crypto wallets, VPN, Messengers, FTP credentials, saved browser credentials, and email clients," Zscaler ThreatLabz researchers Mitesh Wani<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_BHa8dxl7UI:gDZq9jyM4Ac:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_BHa8dxl7UI:gDZq9jyM4Ac:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_BHa8dxl7UI:gDZq9jyM4Ac:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_BHa8dxl7UI:gDZq9jyM4Ac:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_BHa8dxl7UI:gDZq9jyM4Ac:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_BHa8dxl7UI:gDZq9jyM4Ac:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_BHa8dxl7UI:gDZq9jyM4Ac:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_BHa8dxl7UI:gDZq9jyM4Ac:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8673412026287270454
title: Brokenwire Hack Could Let Remote Attackers Disrupt Charging for Electric Vehicles
uri: Brokenwire-Hack-Could-Let-Remote-Attackers-Disrupt-Charging-for-Electr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8673412026287270454
content:
A group of academics from the University of Oxford and Armasuisse S+T has disclosed details of a new attack technique against the popular Combined Charging System (CCS) that could potentially disrupt the ability to charge electric vehicles at scale.
Dubbed "Brokenwire," the method interferes with the control communications that transpire between the vehicle and charger to wirelessly abort the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C50ORVCQLAE:KR51wTVgoM0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C50ORVCQLAE:KR51wTVgoM0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C50ORVCQLAE:KR51wTVgoM0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=C50ORVCQLAE:KR51wTVgoM0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C50ORVCQLAE:KR51wTVgoM0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=C50ORVCQLAE:KR51wTVgoM0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C50ORVCQLAE:KR51wTVgoM0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=C50ORVCQLAE:KR51wTVgoM0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3675009068488970716
title: Researchers Uncover New Android Spyware With C2 Server Linked to Turla Hackers
uri: Researchers-Uncover-New-Android-Spyware-With-C2-Server-Linked-to-Turla
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3675009068488970716
content:
An Android spyware application has been spotted masquerading as a "Process Manager" service to stealthily siphon sensitive information stored in the infected devices.
Interestingly, the app — that has the package name "com.remote.app" — establishes contact with a remote command-and-control server, 82.146.35[.]240, which has been previously identified as infrastructure belonging to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=raRtm1DavhA:x3y3yu-A-JA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=raRtm1DavhA:x3y3yu-A-JA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=raRtm1DavhA:x3y3yu-A-JA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=raRtm1DavhA:x3y3yu-A-JA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=raRtm1DavhA:x3y3yu-A-JA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=raRtm1DavhA:x3y3yu-A-JA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=raRtm1DavhA:x3y3yu-A-JA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=raRtm1DavhA:x3y3yu-A-JA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2960090187932338165
title: Multiple Hacker Groups Capitalizing on Ukraine Conflict for Distributing Malware
uri: Multiple-Hacker-Groups-Capitalizing-on-Ukraine-Conflict-for-Distributi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2960090187932338165
content:
At least three different advanced persistent threat (APT) groups from across the world have launched spear-phishing campaigns in mid-March 2022 using the ongoing Russo-Ukrainian war as a lure to distribute malware and steal sensitive information.
The campaigns, undertaken by El Machete, Lyceum, and SideWinder, have targeted a variety of sectors, including energy, financial, and governmental <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqduFC2hGOc:ZlJTldYp3tI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqduFC2hGOc:ZlJTldYp3tI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqduFC2hGOc:ZlJTldYp3tI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kqduFC2hGOc:ZlJTldYp3tI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqduFC2hGOc:ZlJTldYp3tI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kqduFC2hGOc:ZlJTldYp3tI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqduFC2hGOc:ZlJTldYp3tI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kqduFC2hGOc:ZlJTldYp3tI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3148606062303989165
title: CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability
uri: CISA-Warns-of-Active-Exploitation-of-Critical-Spring4Shell-Vulnerabili
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3148606062303989165
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added the recently disclosed remote code execution (RCE) vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation."
The critical severity flaw, assigned the identifier CVE-2022-22965 (CVSS score: 9.8) and dubbed "Spring4Shell", impacts Spring <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hC5f9CGphEE:cVboCa_QY38:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hC5f9CGphEE:cVboCa_QY38:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hC5f9CGphEE:cVboCa_QY38:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hC5f9CGphEE:cVboCa_QY38:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hC5f9CGphEE:cVboCa_QY38:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hC5f9CGphEE:cVboCa_QY38:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hC5f9CGphEE:cVboCa_QY38:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hC5f9CGphEE:cVboCa_QY38:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8641850577373045500
title: Researchers Trace Widespread Espionage Attacks Back to Chinese 'Cicada' Hackers
uri: Researchers-Trace-Widespread-Espionage-Attacks-Back-to-Chinese-Cicada
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8641850577373045500
content:
A Chinese state-backed advanced persistent threat (APT) group known for singling out Japanese entities has been attributed to a new long-running espionage campaign targeting new geographies, suggesting a "widening" of the threat actor's targeting.
The widespread intrusions, which are believed to have commenced at the earliest in mid-2021 and continued as recently as February 2022, have been tied<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1OZMS41nq4k:tcfDo4Jd_Q8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1OZMS41nq4k:tcfDo4Jd_Q8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1OZMS41nq4k:tcfDo4Jd_Q8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1OZMS41nq4k:tcfDo4Jd_Q8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1OZMS41nq4k:tcfDo4Jd_Q8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1OZMS41nq4k:tcfDo4Jd_Q8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1OZMS41nq4k:tcfDo4Jd_Q8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1OZMS41nq4k:tcfDo4Jd_Q8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1818361529073902087
title: Is API Security on Your Radar?
uri: Is-API-Security-on-Your-Radar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1818361529073902087
content:
With the growth in digital transformation, the API management market is set to grow by more than 30%  by the year 2025 as more businesses build web APIs and consumers grow to rely on them for everything from mobile apps to customized digital services.
As part of strategic business planning, an API helps generate revenue by allowing customers access to the functionality of a website or computer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8zOrkZQhTw:dm9J_f4vH8c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8zOrkZQhTw:dm9J_f4vH8c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8zOrkZQhTw:dm9J_f4vH8c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m8zOrkZQhTw:dm9J_f4vH8c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8zOrkZQhTw:dm9J_f4vH8c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m8zOrkZQhTw:dm9J_f4vH8c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8zOrkZQhTw:dm9J_f4vH8c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m8zOrkZQhTw:dm9J_f4vH8c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8216297496117897777
title: Hackers Breach Mailchimp Email Marketing Firm to Launch Crypto Phishing Scams
uri: Hackers-Breach-Mailchimp-Email-Marketing-Firm-to-Launch-Crypto-Phishin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8216297496117897777
content:
Email marketing service Mailchimp on Monday revealed a data breach that resulted in the compromise of an internal tool to gain unauthorized access to customer accounts and stage phishing attacks. 
The development was first reported by Bleeping Computer.
The company, which was acquired by financial software firm Intuit in September 2021, told the publication that it became aware of the incident <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ITFd5jJ7i1c:UxLuvW1SHck:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ITFd5jJ7i1c:UxLuvW1SHck:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ITFd5jJ7i1c:UxLuvW1SHck:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ITFd5jJ7i1c:UxLuvW1SHck:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ITFd5jJ7i1c:UxLuvW1SHck:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ITFd5jJ7i1c:UxLuvW1SHck:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ITFd5jJ7i1c:UxLuvW1SHck:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ITFd5jJ7i1c:UxLuvW1SHck:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-269580619762855250
title: Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin
uri: Germany-Shuts-Down-Russian-Hydra-Darknet-Market-Seizes-25-Million-in
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/269580619762855250
content:
Germany's Federal Criminal Police Office, the Bundeskriminalamt (BKA), on Tuesday announced the official takedown of Hydra, the world's largest illegal dark web marketplace.
"[543] Bitcoins amounting to currently the equivalent of approximately €23 million were seized, which are attributed to the marketplace," the BKA said in a press release.
&lt;!--adsense--&gt;
The agency attributed the shutdown of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vQEBOa-lnmA:ZESbppkWr0o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vQEBOa-lnmA:ZESbppkWr0o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vQEBOa-lnmA:ZESbppkWr0o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vQEBOa-lnmA:ZESbppkWr0o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vQEBOa-lnmA:ZESbppkWr0o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vQEBOa-lnmA:ZESbppkWr0o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vQEBOa-lnmA:ZESbppkWr0o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vQEBOa-lnmA:ZESbppkWr0o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8276517519867126034
title: FIN7 Hackers Leveraging Password Reuse and Software Supply Chain Attacks
uri: FIN7-Hackers-Leveraging-Password-Reuse-and-Software-Supply-Chain-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8276517519867126034
content:
The notorious cybercrime group known as FIN7 has diversified its initial access vectors to incorporate software supply chain compromise and the use of stolen credentials, new research has revealed.
"Data theft extortion or ransomware deployment following FIN7-attributed activity at multiple organizations, as well as technical overlaps, suggests that FIN7 actors have been associated with various <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-d3cJCfH09U:CWJwTm1DOy0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-d3cJCfH09U:CWJwTm1DOy0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-d3cJCfH09U:CWJwTm1DOy0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-d3cJCfH09U:CWJwTm1DOy0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-d3cJCfH09U:CWJwTm1DOy0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-d3cJCfH09U:CWJwTm1DOy0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-d3cJCfH09U:CWJwTm1DOy0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-d3cJCfH09U:CWJwTm1DOy0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7793465386041606890
title: Battling Cybersecurity Risk: How to Start Somewhere, Right Now
uri: Battling-Cybersecurity-Risk-How-to-Start-Somewhere-Right-Now
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7793465386041606890
content:
Between a series of recent high-profile cybersecurity incidents and the heightened geopolitical tensions, there's rarely been a more dangerous cybersecurity environment. It's a danger that affects every organization – automated attack campaigns don't discriminate between targets.
The situation is driven in large part due to a relentless rise in vulnerabilities, with tens of thousands of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bvnuPeDqZ_Q:CyS29ErpGtA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bvnuPeDqZ_Q:CyS29ErpGtA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bvnuPeDqZ_Q:CyS29ErpGtA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bvnuPeDqZ_Q:CyS29ErpGtA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bvnuPeDqZ_Q:CyS29ErpGtA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bvnuPeDqZ_Q:CyS29ErpGtA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bvnuPeDqZ_Q:CyS29ErpGtA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bvnuPeDqZ_Q:CyS29ErpGtA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7615041359142374653
title: U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace
uri: U-S-Treasury-Department-Sanctions-Russia-based-Hydra-Darknet-Marketpl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7615041359142374653
content:
The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world's largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials.
The sanctions are part of an "international effort to disrupt proliferation of malicious cybercrime services, dangerous drugs, and other illegal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YZdeepJYOpA:islCTeNQ3C0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YZdeepJYOpA:islCTeNQ3C0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YZdeepJYOpA:islCTeNQ3C0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YZdeepJYOpA:islCTeNQ3C0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YZdeepJYOpA:islCTeNQ3C0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YZdeepJYOpA:islCTeNQ3C0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YZdeepJYOpA:islCTeNQ3C0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YZdeepJYOpA:islCTeNQ3C0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5373449642277878223
title: Block Admits Data Breach Involving Cash App Data Accessed by Former Employee
uri: Block-Admits-Data-Breach-Involving-Cash-App-Data-Accessed-by-Former-Em
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5373449642277878223
content:
Block, the company formerly known as Square, has disclosed a data breach that involved a former employee downloading unspecified reports pertaining to its Cash App Investing that contained information about its U.S. customers.
"While this employee had regular access to these reports as part of their past job responsibilities, in this instance these reports were accessed without permission after <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-AOnlojT38:Zh3x8mU0uyM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-AOnlojT38:Zh3x8mU0uyM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-AOnlojT38:Zh3x8mU0uyM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-AOnlojT38:Zh3x8mU0uyM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-AOnlojT38:Zh3x8mU0uyM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-AOnlojT38:Zh3x8mU0uyM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-AOnlojT38:Zh3x8mU0uyM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-AOnlojT38:Zh3x8mU0uyM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6431556977165275972
title: Ukraine Warns of Cyber attack Aiming to Hack Users' Telegram Messenger Accounts
uri: Ukraine-Warns-of-Cyber-attack-Aiming-to-Hack-Users-Telegram-Messenger
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6431556977165275972
content:
Ukraine's technical security and intelligence service is warning of a new wave of cyber attacks that are aimed at gaining access to users' Telegram accounts.
"The criminals sent messages with malicious links to the Telegram website in order to gain unauthorized access to the records, including the possibility to transfer a one-time code from SMS," the State Service of Special Communication and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iuWlqKiYcdU:EPHMdrIAgEs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iuWlqKiYcdU:EPHMdrIAgEs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iuWlqKiYcdU:EPHMdrIAgEs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iuWlqKiYcdU:EPHMdrIAgEs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iuWlqKiYcdU:EPHMdrIAgEs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iuWlqKiYcdU:EPHMdrIAgEs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iuWlqKiYcdU:EPHMdrIAgEs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iuWlqKiYcdU:EPHMdrIAgEs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6387123728598279240
title: Hackers Distributing Fake Shopping Apps to Steal Banking Data of Malaysian Users
uri: Hackers-Distributing-Fake-Shopping-Apps-to-Steal-Banking-Data-of-Malay
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6387123728598279240
content:
Threat actors have been distributing malicious applications under the guise of seemingly harmless shopping apps to target customers of eight Malaysian banks since at least November 2021.
The attacks involved setting up fraudulent but legitimate-looking websites to trick users into downloading the apps, Slovak cybersecurity firm ESET said in a report shared with The Hacker News.
The copycat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GALR7BA1W08:1XjhpIlkTks:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GALR7BA1W08:1XjhpIlkTks:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GALR7BA1W08:1XjhpIlkTks:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GALR7BA1W08:1XjhpIlkTks:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GALR7BA1W08:1XjhpIlkTks:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GALR7BA1W08:1XjhpIlkTks:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GALR7BA1W08:1XjhpIlkTks:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GALR7BA1W08:1XjhpIlkTks:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2089260269467131603
title: FBI Shut Down Russia-linked "Cyclops Blink" Botnet That Infected Thousands of Devices
uri: FBI-Shut-Down-Russia-linked-Cyclops-Blink-Botnet-That-Infected-Thous
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2089260269467131603
content:
The U.S. Department of Justice (DoJ) announced that it neutralized Cyclops Blink, a modular botnet controlled by a threat actor known as Sandworm, which has been attributed to the Main Intelligence Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU).
"The operation copied and removed malware from vulnerable internet-connected firewall devices that Sandworm used <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkJU_O_VLMw:0Uk8SVROTps:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkJU_O_VLMw:0Uk8SVROTps:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkJU_O_VLMw:0Uk8SVROTps:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkJU_O_VLMw:0Uk8SVROTps:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkJU_O_VLMw:0Uk8SVROTps:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkJU_O_VLMw:0Uk8SVROTps:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkJU_O_VLMw:0Uk8SVROTps:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkJU_O_VLMw:0Uk8SVROTps:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-14229833046795550
title: VMware Releases Critical Patches for New Vulnerabilities Affecting Multiple Products
uri: VMware-Releases-Critical-Patches-for-New-Vulnerabilities-Affecting-Mul
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/14229833046795550
content:
VMware has released security updates to patch eight vulnerabilities spanning its products, some of which could be exploited to launch remote code execution attacks.
Tracked from CVE-2022-22954 to CVE-2022-22961 (CVSS scores: 5.3 - 9.8), the issues impact VMware Workspace ONE Access, VMware Identity Manager, VMware vRealize Automation, VMware Cloud Foundation, and vRealize Suite Lifecycle Manager<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-ibEo40iVGA:xBEqwwHlKSE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-ibEo40iVGA:xBEqwwHlKSE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-ibEo40iVGA:xBEqwwHlKSE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-ibEo40iVGA:xBEqwwHlKSE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-ibEo40iVGA:xBEqwwHlKSE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-ibEo40iVGA:xBEqwwHlKSE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-ibEo40iVGA:xBEqwwHlKSE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-ibEo40iVGA:xBEqwwHlKSE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2765299840793601175
title: SharkBot Banking Trojan Resurfaces On Google Play Store Hidden Behind 7 New Apps
uri: SharkBot-Banking-Trojan-Resurfaces-On-Google-Play-Store-Hidden-Behind
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2765299840793601175
content:
As many as seven malicious Android apps discovered on the Google Play Store masqueraded as antivirus solutions to deploy a banking trojan called SharkBot.
"SharkBot steals credentials and banking information," Check Point researchers Alex Shamshur and Raman Ladutska said in a report shared with The Hacker News. "This malware implements a geofencing feature and evasion techniques, which makes it <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Os48Qiwh0rs:YTas2FS3-no:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Os48Qiwh0rs:YTas2FS3-no:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Os48Qiwh0rs:YTas2FS3-no:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Os48Qiwh0rs:YTas2FS3-no:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Os48Qiwh0rs:YTas2FS3-no:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Os48Qiwh0rs:YTas2FS3-no:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Os48Qiwh0rs:YTas2FS3-no:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Os48Qiwh0rs:YTas2FS3-no:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2397965111590472434
title: Researchers Uncover How Colibri Malware Stays Persistent on Hacked Systems
uri: Researchers-Uncover-How-Colibri-Malware-Stays-Persistent-on-Hacked-Sys
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2397965111590472434
content:
Cybersecurity researchers have detailed a "simple but efficient" persistence mechanism adopted by a relatively nascent malware loader called Colibri, which has been observed deploying a Windows information stealer known as Vidar as part of a new campaign.
"The attack starts with a malicious Word document deploying a Colibri bot that then delivers the Vidar Stealer," Malwarebytes Labs said in an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I6yXPJHWpcw:M9vYNLzyRjo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I6yXPJHWpcw:M9vYNLzyRjo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I6yXPJHWpcw:M9vYNLzyRjo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I6yXPJHWpcw:M9vYNLzyRjo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I6yXPJHWpcw:M9vYNLzyRjo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I6yXPJHWpcw:M9vYNLzyRjo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I6yXPJHWpcw:M9vYNLzyRjo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I6yXPJHWpcw:M9vYNLzyRjo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4480055375587127667
title: First Malware Targeting AWS Lambda Serverless Platform Discovered
uri: First-Malware-Targeting-AWS-Lambda-Serverless-Platform-Discovered
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4480055375587127667
content:
A first-of-its-kind malware targeting Amazon Web Services' (AWS) Lambda serverless computing platform has been discovered in the wild.
Dubbed "Denonia" after the name of the domain it communicates with, "the malware uses newer address resolution techniques for command and control traffic to evade typical detection measures and virtual network access controls," Cado Labs researcher Matt Muir said<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IYVcxzwS7GI:H7xRVybrWr0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IYVcxzwS7GI:H7xRVybrWr0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IYVcxzwS7GI:H7xRVybrWr0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IYVcxzwS7GI:H7xRVybrWr0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IYVcxzwS7GI:H7xRVybrWr0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IYVcxzwS7GI:H7xRVybrWr0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IYVcxzwS7GI:H7xRVybrWr0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IYVcxzwS7GI:H7xRVybrWr0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8033113611914650751
title: Hamas-linked Hackers Targeting High-Ranking Israelis Using 'Catfish' Lures
uri: Hamas-linked-Hackers-Targeting-High-Ranking-Israelis-Using-Catfish-L
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8033113611914650751
content:
A threat actor with affiliations to the cyber warfare division of Hamas has been linked to an "elaborate campaign" targeting high-profile Israeli individuals employed in sensitive defense, law enforcement, and emergency services organizations.
"The campaign operators use sophisticated social engineering techniques, ultimately aimed to deliver previously undocumented backdoors for Windows and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mKyf90pSCKA:6t1QjMgctoo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mKyf90pSCKA:6t1QjMgctoo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mKyf90pSCKA:6t1QjMgctoo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mKyf90pSCKA:6t1QjMgctoo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mKyf90pSCKA:6t1QjMgctoo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mKyf90pSCKA:6t1QjMgctoo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mKyf90pSCKA:6t1QjMgctoo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mKyf90pSCKA:6t1QjMgctoo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-54282978737509813
title: Into the Breach: Breaking Down 3 SaaS App Cyber Attacks in 2022
uri: Into-the-Breach-Breaking-Down-3-SaaS-App-Cyber-Attacks-in-2022
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/54282978737509813
content:
During the last week of March, three major tech companies - Microsoft, Okta, and HubSpot - reported significant data breaches. DEV-0537, also known as LAPSUS$, performed the first two. This highly sophisticated group utilizes state-of-the-art attack vectors to great success. Meanwhile, the group behind the HubSpot breach was not disclosed. This blog will review the three breaches based on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TgN5E3VmCrM:WLQytYk34cU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TgN5E3VmCrM:WLQytYk34cU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TgN5E3VmCrM:WLQytYk34cU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TgN5E3VmCrM:WLQytYk34cU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TgN5E3VmCrM:WLQytYk34cU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TgN5E3VmCrM:WLQytYk34cU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TgN5E3VmCrM:WLQytYk34cU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TgN5E3VmCrM:WLQytYk34cU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6741429701089200309
title: Microsoft Obtains Court Order to Take Down Domains Used to Target Ukraine
uri: Microsoft-Obtains-Court-Order-to-Take-Down-Domains-Used-to-Target-Ukra
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6741429701089200309
content:
Microsoft on Thursday disclosed that it obtained a court order to take control of seven domains used by APT28, a state-sponsored group operated by Russia's military intelligence service, with the goal of neutralizing its attacks on Ukraine.
"We have since re-directed these domains to a sinkhole controlled by Microsoft, enabling us to mitigate Strontium's current use of these domains and enable <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xFi473mSMXw:ak6cZK-wtLw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xFi473mSMXw:ak6cZK-wtLw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xFi473mSMXw:ak6cZK-wtLw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xFi473mSMXw:ak6cZK-wtLw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xFi473mSMXw:ak6cZK-wtLw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xFi473mSMXw:ak6cZK-wtLw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xFi473mSMXw:ak6cZK-wtLw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xFi473mSMXw:ak6cZK-wtLw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7122996415459728889
title: New Octo Banking Trojan Spreading via Fake Apps on Google Play Store
uri: New-Octo-Banking-Trojan-Spreading-via-Fake-Apps-on-Google-Play-Store
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7122996415459728889
content:
A number of rogue Android apps that have been cumulatively installed from the official Google Play Store more than 50,000 times are being used to target banks and other financial entities.
The rental banking trojan, dubbed Octo, is said to be a rebrand of another Android malware called ExobotCompact, which, in turn, is a "lite" replacement for its Exobot predecessor, Dutch mobile security firm <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zzUOxCD5TVc:VrD3bXsyPwM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zzUOxCD5TVc:VrD3bXsyPwM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zzUOxCD5TVc:VrD3bXsyPwM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zzUOxCD5TVc:VrD3bXsyPwM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zzUOxCD5TVc:VrD3bXsyPwM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zzUOxCD5TVc:VrD3bXsyPwM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zzUOxCD5TVc:VrD3bXsyPwM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zzUOxCD5TVc:VrD3bXsyPwM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3020326211925868587
title: Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States
uri: Ukrainian-FIN7-Hacker-Gets-5-Year-Sentence-in-the-United-States
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3020326211925868587
content:
A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7.
Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, had been previously arrested in Bangkok, Thailand in November 2019, before being extradited to the U.S.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lvm1nCQg2wM:jLfGxt3eCkI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lvm1nCQg2wM:jLfGxt3eCkI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lvm1nCQg2wM:jLfGxt3eCkI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lvm1nCQg2wM:jLfGxt3eCkI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lvm1nCQg2wM:jLfGxt3eCkI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lvm1nCQg2wM:jLfGxt3eCkI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lvm1nCQg2wM:jLfGxt3eCkI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lvm1nCQg2wM:jLfGxt3eCkI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1431689579974029178
title: Chinese Hacker Groups Continue to Target Indian Power Grid Assets
uri: Chinese-Hacker-Groups-Continue-to-Target-Indian-Power-Grid-Assets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1431689579974029178
content:
China-linked adversaries have been attributed to an ongoing onslaught against Indian power grid organizations, one year after a concerted campaign targeting critical infrastructure in the country came to light.
Most of the intrusions involved a modular backdoor named ShadowPad, according to Recorded Future's Insikt Group, a sophisticated remote access trojan which has been dubbed a "masterpiece <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nlZ9XGh-M3U:yMYCXhAVp18:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nlZ9XGh-M3U:yMYCXhAVp18:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nlZ9XGh-M3U:yMYCXhAVp18:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nlZ9XGh-M3U:yMYCXhAVp18:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nlZ9XGh-M3U:yMYCXhAVp18:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nlZ9XGh-M3U:yMYCXhAVp18:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nlZ9XGh-M3U:yMYCXhAVp18:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nlZ9XGh-M3U:yMYCXhAVp18:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9005082026511822950
title: Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity
uri: Researchers-Connect-BlackCat-Ransomware-with-Past-BlackMatter-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9005082026511822950
content:
Cybersecurity researchers have uncovered further links between BlackCat (aka AlphaV) and BlackMatter ransomware families, the former of which emerged as a replacement following international scrutiny last year.
"At least some members of the new BlackCat group have links to the BlackMatter group, because they modified and reused a custom exfiltration tool [...] and which has only been observed in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wCGZkZTyB6k:1Qsmr4PsRJM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wCGZkZTyB6k:1Qsmr4PsRJM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wCGZkZTyB6k:1Qsmr4PsRJM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wCGZkZTyB6k:1Qsmr4PsRJM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wCGZkZTyB6k:1Qsmr4PsRJM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wCGZkZTyB6k:1Qsmr4PsRJM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wCGZkZTyB6k:1Qsmr4PsRJM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wCGZkZTyB6k:1Qsmr4PsRJM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5421861747691520204
title: Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware
uri: Hackers-Exploiting-Spring4Shell-Vulnerability-to-Deploy-Mirai-Botnet-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5421861747691520204
content:
The recently disclosed critical Spring4Shell vulnerability is being actively exploited by threat actors to execute the Mirai botnet malware, particularly in the Singapore region since the start of April 2022.
"The exploitation allows threat actors to download the Mirai sample to the '/tmp' folder and execute them after permission change using 'chmod,'" Trend Micro researchers Deep Patel, Nitesh <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T0SmYPgr84U:LgaWNdxWZV0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T0SmYPgr84U:LgaWNdxWZV0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T0SmYPgr84U:LgaWNdxWZV0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T0SmYPgr84U:LgaWNdxWZV0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T0SmYPgr84U:LgaWNdxWZV0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T0SmYPgr84U:LgaWNdxWZV0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T0SmYPgr84U:LgaWNdxWZV0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T0SmYPgr84U:LgaWNdxWZV0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7852544800936491508
title: Microsoft's New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date
uri: Microsoft-s-New-Autopatch-Feature-to-Help-Businesses-Keep-Their-System
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7852544800936491508
content:
Microsoft last week announced that it intends to make generally available a feature called Autopatch as part of Windows Enterprise E3 in July 2022.
"This service will keep Windows and Office software on enrolled endpoints up-to-date automatically, at no additional cost," said Lior Bela, senior product marketing manager at Microsoft, in a post last week. "The second Tuesday of every month will be<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z1ANTWh5jNg:MWGo3yn140A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z1ANTWh5jNg:MWGo3yn140A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z1ANTWh5jNg:MWGo3yn140A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z1ANTWh5jNg:MWGo3yn140A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z1ANTWh5jNg:MWGo3yn140A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z1ANTWh5jNg:MWGo3yn140A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z1ANTWh5jNg:MWGo3yn140A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z1ANTWh5jNg:MWGo3yn140A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1627937596919704997
title: Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild
uri: Researchers-warn-of-FFDroider-and-Lightning-info-stealers-targeting-us
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1627937596919704997
content:
Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks.
"Designed to send stolen credentials and cookies to a Command &amp; Control server, FFDroider disguises itself on victim's machines to look like the instant messaging application 'Telegram,'" Zscaler ThreatLabz <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8LLrRNVVpmo:Ign29NLQT_g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8LLrRNVVpmo:Ign29NLQT_g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8LLrRNVVpmo:Ign29NLQT_g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8LLrRNVVpmo:Ign29NLQT_g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8LLrRNVVpmo:Ign29NLQT_g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8LLrRNVVpmo:Ign29NLQT_g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8LLrRNVVpmo:Ign29NLQT_g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8LLrRNVVpmo:Ign29NLQT_g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3645949029341548670
title: Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service
uri: Over-16-500-Sites-Hacked-to-Distribute-Malware-via-Web-Redirect-Servic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3645949029341548670
content:
A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns.
"The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, personal websites, university sites, and local government sites," Avast researchers Pavel Novák and Jan Rubín said in a report <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RmhROIaZzl0:L2GNm4StY9U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RmhROIaZzl0:L2GNm4StY9U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RmhROIaZzl0:L2GNm4StY9U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RmhROIaZzl0:L2GNm4StY9U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RmhROIaZzl0:L2GNm4StY9U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RmhROIaZzl0:L2GNm4StY9U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RmhROIaZzl0:L2GNm4StY9U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RmhROIaZzl0:L2GNm4StY9U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6983080896219414179
title: Critical LFI Vulnerability Reported in Hashnode Blogging Platform
uri: Critical-LFI-Vulnerability-Reported-in-Hashnode-Blogging-Platform
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6983080896219414179
content:
Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server's IP address, and other network information.
"The LFI originates in a Bulk Markdown Import feature that can be manipulated to provide attackers with unimpeded ability to download <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21M1Ck9KGBc:aelLkEa4iyg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21M1Ck9KGBc:aelLkEa4iyg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21M1Ck9KGBc:aelLkEa4iyg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=21M1Ck9KGBc:aelLkEa4iyg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21M1Ck9KGBc:aelLkEa4iyg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=21M1Ck9KGBc:aelLkEa4iyg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=21M1Ck9KGBc:aelLkEa4iyg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=21M1Ck9KGBc:aelLkEa4iyg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5218075953362638483
title: E.U. Officials Reportedly Targeted with Israeli Pegasus Spyware
uri: E-U-Officials-Reportedly-Targeted-with-Israeli-Pegasus-Spyware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5218075953362638483
content:
Senior officials in the European Union were allegedly targeted with NSO Group's infamous Pegasus surveillance tool, according to a new report from Reuters.
At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, the news agency said, citing documents and two unnamed E.U. officials. However, it's not clear who used the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jQm-u1igFiw:2GfjdARBgZ4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jQm-u1igFiw:2GfjdARBgZ4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jQm-u1igFiw:2GfjdARBgZ4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jQm-u1igFiw:2GfjdARBgZ4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jQm-u1igFiw:2GfjdARBgZ4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jQm-u1igFiw:2GfjdARBgZ4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jQm-u1igFiw:2GfjdARBgZ4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jQm-u1igFiw:2GfjdARBgZ4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1728225491487732894
title: NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation
uri: NGINX-Shares-Mitigations-for-Zero-Day-Bug-Affecting-LDAP-Implementatio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1728225491487732894
content:
The maintainers of the NGINX web server project have issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation.
"NGINX Open Source and NGINX Plus are not themselves affected, and no corrective action is necessary if you do not use the reference implementation," Liam Crilly and Timo Stark of F5 Networks said in an advisory <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YzfmQpipr-w:Se8uFZ7HaU8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YzfmQpipr-w:Se8uFZ7HaU8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YzfmQpipr-w:Se8uFZ7HaU8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YzfmQpipr-w:Se8uFZ7HaU8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YzfmQpipr-w:Se8uFZ7HaU8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YzfmQpipr-w:Se8uFZ7HaU8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YzfmQpipr-w:Se8uFZ7HaU8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YzfmQpipr-w:Se8uFZ7HaU8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1545955747858733124
title: Finding Attack Paths in Cloud Environments
uri: Finding-Attack-Paths-in-Cloud-Environments
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1545955747858733124
content:
The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations' most sensitive business applications, workloads, and data are in the cloud.
Hackers, good and bad, have noticed that trend and effectively evolved their attack techniques to match this new tantalizing target landscape. With threat actors' high reactivity and adaptability, it<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8SLe-ZKK9c:gbjgCu-Hb4M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8SLe-ZKK9c:gbjgCu-Hb4M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8SLe-ZKK9c:gbjgCu-Hb4M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z8SLe-ZKK9c:gbjgCu-Hb4M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8SLe-ZKK9c:gbjgCu-Hb4M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z8SLe-ZKK9c:gbjgCu-Hb4M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8SLe-ZKK9c:gbjgCu-Hb4M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z8SLe-ZKK9c:gbjgCu-Hb4M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2389051677756178778
title: Google Sues Scammer for Running 'Puppy Fraud Scheme' Website
uri: Google-Sues-Scammer-for-Running-Puppy-Fraud-Scheme-Website
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2389051677756178778
content:
Google on Monday disclosed that it's taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies.
"The actor used a network of fraudulent websites that claimed to sell basset hound puppies — with alluring photos and fake customer testimonials — in order to take advantage of people during the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3Sb0-I952XI:q1gK190ovm0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3Sb0-I952XI:q1gK190ovm0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3Sb0-I952XI:q1gK190ovm0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3Sb0-I952XI:q1gK190ovm0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3Sb0-I952XI:q1gK190ovm0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3Sb0-I952XI:q1gK190ovm0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3Sb0-I952XI:q1gK190ovm0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3Sb0-I952XI:q1gK190ovm0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8755584884209280668
title: Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities
uri: Microsoft-Issues-Patches-for-2-Windows-Zero-Days-and-126-Other-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8755584884209280668
content:
Microsoft's Patch Tuesday updates for the month of April have addressed a total of 128 security vulnerabilities spanning across its software product portfolio, including Windows, Defender, Office, Exchange Server, Visual Studio, and Print Spooler, among others.
10 of the 128 bugs fixed are rated Critical, 115 are rated Important, and three are rated Moderate in severity, with one of the flaws <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gILCWhmRX40:7CUSd_R4mdI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gILCWhmRX40:7CUSd_R4mdI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gILCWhmRX40:7CUSd_R4mdI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gILCWhmRX40:7CUSd_R4mdI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gILCWhmRX40:7CUSd_R4mdI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gILCWhmRX40:7CUSd_R4mdI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gILCWhmRX40:7CUSd_R4mdI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gILCWhmRX40:7CUSd_R4mdI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-892141413498106551
title: Cross-Regional Disaster Recovery with Elasticsearch
uri: Cross-Regional-Disaster-Recovery-with-Elasticsearch
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/892141413498106551
content:
Unsurprisingly, here at Rewind, we've got a lot of data to protect (over 2 petabytes worth). One of the databases we use is called Elasticsearch (ES or Opensearch, as it is currently known in AWS). To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is essential when customers are looking for a particular file or item that they need to restore using <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WoVnZkKBUo:4arkJmSEKFg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WoVnZkKBUo:4arkJmSEKFg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WoVnZkKBUo:4arkJmSEKFg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8WoVnZkKBUo:4arkJmSEKFg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WoVnZkKBUo:4arkJmSEKFg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8WoVnZkKBUo:4arkJmSEKFg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WoVnZkKBUo:4arkJmSEKFg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8WoVnZkKBUo:4arkJmSEKFg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2949927032610119603
title: FBI, Europol Seize RaidForums Hacker Forum and Arrest Admin
uri: FBI-Europol-Seize-RaidForums-Hacker-Forum-and-Arrest-Admin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2949927032610119603
content:
An international law enforcement operation raided and took down RaidForums, one of the world's largest hacking forums notorious for selling access to hacked personal information belonging to users.
Dubbed Tourniquet, the seizure of the cybercrime website involved authorities from the U.S., U.K., Sweden, Portugal, and Romania, with the criminal investigation resulting in the arrest of the forum's<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iii72QiERmM:ro7ywawH9Uc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iii72QiERmM:ro7ywawH9Uc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iii72QiERmM:ro7ywawH9Uc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iii72QiERmM:ro7ywawH9Uc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iii72QiERmM:ro7ywawH9Uc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iii72QiERmM:ro7ywawH9Uc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iii72QiERmM:ro7ywawH9Uc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iii72QiERmM:ro7ywawH9Uc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1387856452092005596
title: Webinar: How The Right XDR Can Be a Game-Changer for Lean Security Teams
uri: Webinar-How-The-Right-XDR-Can-Be-a-Game-Changer-for-Lean-Security-Tea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1387856452092005596
content:
Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do cybersecurity. And while many organizations are scrambling to integrate XDR into their cybersecurity strategies – even more are still trying to figure out what XDR really is and if it’s even the right solution for their organization. 
But <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WyHxZgf5_mo:pNx_zoSEnz4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WyHxZgf5_mo:pNx_zoSEnz4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WyHxZgf5_mo:pNx_zoSEnz4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WyHxZgf5_mo:pNx_zoSEnz4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WyHxZgf5_mo:pNx_zoSEnz4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WyHxZgf5_mo:pNx_zoSEnz4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WyHxZgf5_mo:pNx_zoSEnz4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WyHxZgf5_mo:pNx_zoSEnz4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-585531602040470096
title: Microsoft Exposes Evasive Chinese Tarrask Malware Attacking Windows Computers
uri: Microsoft-Exposes-Evasive-Chinese-Tarrask-Malware-Attacking-Windows-Co
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/585531602040470096
content:
The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that's used to maintain persistence on compromised Windows environments.
The threat actor is said to have targeted entities in the telecommunication, internet service provider and data services sectors from August 2021 to February 2022, expanding from the initial victimology patterns observed during its attacks <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IvdC4qRlx_c:xzprGkYp44M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IvdC4qRlx_c:xzprGkYp44M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IvdC4qRlx_c:xzprGkYp44M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IvdC4qRlx_c:xzprGkYp44M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IvdC4qRlx_c:xzprGkYp44M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IvdC4qRlx_c:xzprGkYp44M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IvdC4qRlx_c:xzprGkYp44M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IvdC4qRlx_c:xzprGkYp44M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6011961660519779885
title: Russian Hackers Tried Attacking Ukraine's Power Grid with Industroyer2 Malware
uri: Russian-Hackers-Tried-Attacking-Ukraine-s-Power-Grid-with-Industroyer2
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6011961660519779885
content:
The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed that it thwarted a cyberattack by Sandworm, a hacking group affiliated with Russia's military intelligence, to sabotage the operations of an unnamed energy provider in the country.
"The attackers attempted to take down several infrastructure components of their target, namely: Electrical substations, Windows-operated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ShjUEwQAQGM:a545dhpCE3E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ShjUEwQAQGM:a545dhpCE3E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ShjUEwQAQGM:a545dhpCE3E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ShjUEwQAQGM:a545dhpCE3E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ShjUEwQAQGM:a545dhpCE3E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ShjUEwQAQGM:a545dhpCE3E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ShjUEwQAQGM:a545dhpCE3E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ShjUEwQAQGM:a545dhpCE3E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5981155375644341942
title: U.S. Warns of APT Hackers Targeting ICS/SCADA Systems with Specialized Malware
uri: U-S-Warns-of-APT-Hackers-Targeting-ICS-SCADA-Systems-with-Specialized
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5981155375644341942
content:
The U.S. government on Wednesday warned of nation-state actors deploying specialized malware to maintain access to industrial control systems (ICS) and supervisory control and data acquisition (SCADA) devices.
"The APT actors have developed custom-made tools for targeting ICS/SCADA devices," multiple U.S. agencies said in an alert. "The tools enable them to scan for, compromise, and control <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2920-Kq3SeI:7oiJBvuCJ64:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2920-Kq3SeI:7oiJBvuCJ64:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2920-Kq3SeI:7oiJBvuCJ64:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2920-Kq3SeI:7oiJBvuCJ64:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2920-Kq3SeI:7oiJBvuCJ64:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2920-Kq3SeI:7oiJBvuCJ64:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2920-Kq3SeI:7oiJBvuCJ64:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2920-Kq3SeI:7oiJBvuCJ64:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1576975630387575667
title: Critical VMware Workspace ONE Access Flaw Under Active Exploitation in the Wild
uri: Critical-VMware-Workspace-ONE-Access-Flaw-Under-Active-Exploitation-in
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1576975630387575667
content:
A week after VMware released patches to remediate eight security vulnerabilities in VMware Workspace ONE Access, threat actors have begun to actively exploit one of the critical flaws in the wild.
Tracked as CVE-2022-22954, the critical issue relates to a remote code execution vulnerability that stems from server-side template injection in VMware Workspace ONE Access and Identity Manager. The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NuyD_jURMMo:VvfT78vWr-A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NuyD_jURMMo:VvfT78vWr-A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NuyD_jURMMo:VvfT78vWr-A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NuyD_jURMMo:VvfT78vWr-A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NuyD_jURMMo:VvfT78vWr-A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NuyD_jURMMo:VvfT78vWr-A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NuyD_jURMMo:VvfT78vWr-A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NuyD_jURMMo:VvfT78vWr-A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7486537177848440620
title: Microsoft Disrupts ZLoader Cybercrime Botnet in Global Operation
uri: Microsoft-Disrupts-ZLoader-Cybercrime-Botnet-in-Global-Operation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7486537177848440620
content:
Microsoft and a consortium of cybersecurity companies took legal and technical steps to disrupt the ZLoader botnet, seizing control of 65 domains that were used to control and communicate with the infected hosts.
"ZLoader is made up of computing devices in businesses, hospitals, schools, and homes around the world and is run by a global internet-based organized crime gang operating malware as a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TfXLpf-Dzfs:bku_UoUM2DY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TfXLpf-Dzfs:bku_UoUM2DY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TfXLpf-Dzfs:bku_UoUM2DY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TfXLpf-Dzfs:bku_UoUM2DY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TfXLpf-Dzfs:bku_UoUM2DY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TfXLpf-Dzfs:bku_UoUM2DY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TfXLpf-Dzfs:bku_UoUM2DY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TfXLpf-Dzfs:bku_UoUM2DY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1641620195910870899
title: Rarible NFT Marketplace Flaw Could've Let Attackers Hijack Crypto Wallets
uri: Rarible-NFT-Marketplace-Flaw-Could-ve-Let-Attackers-Hijack-Crypto-Wall
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1641620195910870899
content:
Cybersecurity researchers have disclosed a now-fixed security flaw in the Rarible non-fungible token (NFT) marketplace that, if successfully exploited, could have led to account takeover and theft of cryptocurrency assets.

"By luring victims to click on a malicious NFT, an attacker can take full control of the victim's crypto wallet to steal funds," Check Point researchers Roman Zaikin, Dikla <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=klkTHXP8tnU:b2OFBhznRi4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=klkTHXP8tnU:b2OFBhznRi4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=klkTHXP8tnU:b2OFBhznRi4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=klkTHXP8tnU:b2OFBhznRi4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=klkTHXP8tnU:b2OFBhznRi4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=klkTHXP8tnU:b2OFBhznRi4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=klkTHXP8tnU:b2OFBhznRi4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=klkTHXP8tnU:b2OFBhznRi4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-192840083793169378
title: New EnemyBot DDoS Botnet Borrows Exploit Code from Mirai and Gafgyt
uri: New-EnemyBot-DDoS-Botnet-Borrows-Exploit-Code-from-Mirai-and-Gafgyt
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/192840083793169378
content:
A threat group that pursues crypto mining and distributed denial-of-service (DDoS) attacks has been linked to a new botnet called Enemybot, which has been discovered enslaving routers and Internet of Things (IoT) devices since last month.
"This botnet is mainly derived from Gafgyt's source code but has been observed to borrow several modules from Mirai's original source code," Fortinet <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SN00BZGdl2s:L5QRL4q3-gc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SN00BZGdl2s:L5QRL4q3-gc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SN00BZGdl2s:L5QRL4q3-gc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SN00BZGdl2s:L5QRL4q3-gc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SN00BZGdl2s:L5QRL4q3-gc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SN00BZGdl2s:L5QRL4q3-gc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SN00BZGdl2s:L5QRL4q3-gc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SN00BZGdl2s:L5QRL4q3-gc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4978044311603237196
title: Ethereum Developer Jailed 63 Months for Helping North Korea Evade Sanctions
uri: Ethereum-Developer-Jailed-63-Months-for-Helping-North-Korea-Evade-Sanc
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4978044311603237196
content:
A U.S. court has sentenced former Ethereum developer Virgil Griffith to five years and three months in prison and pay a $100,000 fine for conspiring with North Korea to help use cryptocurrencies to circumvent sanctions imposed on the country.
"There is no question North Korea poses a national security threat to our nation, and the regime has shown time and again it will stop at nothing to ignore<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7YAExjL9PE:vBmp4AIDWe0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7YAExjL9PE:vBmp4AIDWe0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7YAExjL9PE:vBmp4AIDWe0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N7YAExjL9PE:vBmp4AIDWe0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7YAExjL9PE:vBmp4AIDWe0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N7YAExjL9PE:vBmp4AIDWe0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7YAExjL9PE:vBmp4AIDWe0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N7YAExjL9PE:vBmp4AIDWe0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6085523476448786805
title: Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software
uri: Critical-Auth-Bypass-Bug-Reported-in-Cisco-Wireless-LAN-Controller-Sof
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6085523476448786805
content:
Cisco has released patches to contain a critical security vulnerability affecting the Wireless LAN Controller (WLC) that could be abused by an unauthenticated, remote attacker to take control of an affected system.
Tracked as CVE-2022-20695, the issue has been rated 10 out of 10 for severity and enables an adversary to bypass authentication controls and log in to the device through the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ec-p4Xb9k2M:u5eJq5LqvYU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ec-p4Xb9k2M:u5eJq5LqvYU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ec-p4Xb9k2M:u5eJq5LqvYU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ec-p4Xb9k2M:u5eJq5LqvYU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ec-p4Xb9k2M:u5eJq5LqvYU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ec-p4Xb9k2M:u5eJq5LqvYU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ec-p4Xb9k2M:u5eJq5LqvYU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ec-p4Xb9k2M:u5eJq5LqvYU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8229231714502445245
title: Critical VMware Cloud Director Bug Could Let Hackers Takeover Entire Cloud Infrastructure
uri: Critical-VMware-Cloud-Director-Bug-Could-Let-Hackers-Takeover-Entire-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8229231714502445245
content:
Cloud computing and virtualization technology firm VMWare on Thursday rolled out an update to resolve a critical security flaw in its Cloud Director product that could be weaponized to launch remote code execution attacks.
The issue, assigned the identifier CVE-2022-22966, has a CVSS score of 9.1 out of a maximum of 10. VMware credited security researcher Jari Jääskelä with reporting the flaw.
&lt;<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9i5aRRnI8hU:y6Xn_luC2F0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9i5aRRnI8hU:y6Xn_luC2F0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9i5aRRnI8hU:y6Xn_luC2F0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9i5aRRnI8hU:y6Xn_luC2F0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9i5aRRnI8hU:y6Xn_luC2F0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9i5aRRnI8hU:y6Xn_luC2F0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9i5aRRnI8hU:y6Xn_luC2F0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9i5aRRnI8hU:y6Xn_luC2F0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5166275201881944966
title: Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw
uri: Google-Releases-Urgent-Chrome-Update-to-Patch-Actively-Exploited-Zero
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5166275201881944966
content:
Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild.
Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case of type confusion in the V8 JavaScript engine. Clément Lecigne of Google's Threat Analysis Group has been credited with reporting the flaw on April 13<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MTBh4gM4KDg:zIqLN1rbZng:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MTBh4gM4KDg:zIqLN1rbZng:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MTBh4gM4KDg:zIqLN1rbZng:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MTBh4gM4KDg:zIqLN1rbZng:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MTBh4gM4KDg:zIqLN1rbZng:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MTBh4gM4KDg:zIqLN1rbZng:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MTBh4gM4KDg:zIqLN1rbZng:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MTBh4gM4KDg:zIqLN1rbZng:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1683333510861466606
title: Haskers Gang Gives Away ZingoStealer Malware to Other Cybercriminals for Free
uri: Haskers-Gang-Gives-Away-ZingoStealer-Malware-to-Other-Cybercriminals-f
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1683333510861466606
content:
A crimeware-related threat actor known as Haskers Gang has released an information-stealing malware called ZingoStealer for free on, allowing other criminal groups to leverage the tool for nefarious purposes.
"It features the ability to steal sensitive information from victims and can download additional malware to infected systems," Cisco Talos researchers Edmund Brumaghin and Vanja Svajcer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ri6ekNfqVrE:IN5KhQT0BSA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ri6ekNfqVrE:IN5KhQT0BSA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ri6ekNfqVrE:IN5KhQT0BSA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ri6ekNfqVrE:IN5KhQT0BSA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ri6ekNfqVrE:IN5KhQT0BSA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ri6ekNfqVrE:IN5KhQT0BSA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ri6ekNfqVrE:IN5KhQT0BSA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ri6ekNfqVrE:IN5KhQT0BSA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-25631125481020569
title: As State-Backed Cyber Threats Grow, Here's How the World Is Reacting
uri: As-State-Backed-Cyber-Threats-Grow-Here-s-How-the-World-Is-Reacting
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/25631125481020569
content:
With the ongoing conflict in Eurasia, cyberwarfare is inevitably making its presence felt. The fight is not only being fought on the fields. There is also a big battle happening in cyberspace. Several cyber-attacks have been reported over the past months.
Notably, cyber attacks backed by state actors are becoming prominent. There have been reports of a rise of ransomware and other malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3hdwBGHWhQ:i6yyadYa4nk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3hdwBGHWhQ:i6yyadYa4nk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3hdwBGHWhQ:i6yyadYa4nk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L3hdwBGHWhQ:i6yyadYa4nk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3hdwBGHWhQ:i6yyadYa4nk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L3hdwBGHWhQ:i6yyadYa4nk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3hdwBGHWhQ:i6yyadYa4nk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L3hdwBGHWhQ:i6yyadYa4nk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-939648909991976830
title: JekyllBot:5 Flaws Let Attackers Take Control of Aethon TUG Hospital Robots
uri: JekyllBot-5-Flaws-Let-Attackers-Take-Control-of-Aethon-TUG-Hospital-Ro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/939648909991976830
content:
As many as five security vulnerabilities have been addressed in Aethon Tug hospital robots that could enable remote attackers to seize control of the devices and interfere with the timely distribution of medication and lab samples.
"Successful exploitation of these vulnerabilities could cause a denial-of-service condition, allow full control of robot functions, or expose sensitive information," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f_bSczs-Vao:NfTtauDBgqc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f_bSczs-Vao:NfTtauDBgqc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f_bSczs-Vao:NfTtauDBgqc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f_bSczs-Vao:NfTtauDBgqc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f_bSczs-Vao:NfTtauDBgqc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f_bSczs-Vao:NfTtauDBgqc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f_bSczs-Vao:NfTtauDBgqc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f_bSczs-Vao:NfTtauDBgqc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2293141896872827363
title: Lazarus Group Behind $540 Million Axie Infinity Crypto Hack and Attacks on Chemical Sector
uri: Lazarus-Group-Behind-540-Million-Axie-Infinity-Crypto-Hack-and-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2293141896872827363
content:
The U.S. Treasury Department has implicated the North Korea-backed Lazarus Group (aka Hidden Cobra) in the theft of $540 million from video game Axie Infinity's Ronin Network last month.
On Thursday, the Treasury tied the Ethereum wallet address that received the stolen funds to the threat actor and sanctioned the funds by adding the address to the Office of Foreign Assets Control's (OFAC) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YCo-1zJgI7Y:ZjV80E4dTsg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YCo-1zJgI7Y:ZjV80E4dTsg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YCo-1zJgI7Y:ZjV80E4dTsg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YCo-1zJgI7Y:ZjV80E4dTsg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YCo-1zJgI7Y:ZjV80E4dTsg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YCo-1zJgI7Y:ZjV80E4dTsg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YCo-1zJgI7Y:ZjV80E4dTsg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YCo-1zJgI7Y:ZjV80E4dTsg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3296248392299822648
title: GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens
uri: GitHub-Says-Hackers-Breached-Dozens-of-Organizations-Using-Stolen-OAut
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3296248392299822648
content:
Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations.
"An attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including NPM<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fJqDBogkw8Q:YnJrSRU4h5o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fJqDBogkw8Q:YnJrSRU4h5o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fJqDBogkw8Q:YnJrSRU4h5o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fJqDBogkw8Q:YnJrSRU4h5o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fJqDBogkw8Q:YnJrSRU4h5o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fJqDBogkw8Q:YnJrSRU4h5o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fJqDBogkw8Q:YnJrSRU4h5o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fJqDBogkw8Q:YnJrSRU4h5o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6990377556185029764
title: Get Lifetime Access to This 60-Hour Java Programming Training Bundle @ 97% Discount
uri: Get-Lifetime-Access-to-This-60-Hour-Java-Programming-Training-Bundle
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6990377556185029764
content:
Java is a very versatile programming language. From Android apps to Oracle databases, it can be used to power a wide range of software and systems. As with most technical skills, the best way to learn Java is through building your own projects. But you can definitely speed things up with high-quality training.
The Complete 2022 Java Coder Bundle provides plenty of that — nine full-length video <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMjHWHk1n94:YcAec-aStC8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMjHWHk1n94:YcAec-aStC8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMjHWHk1n94:YcAec-aStC8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lMjHWHk1n94:YcAec-aStC8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMjHWHk1n94:YcAec-aStC8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lMjHWHk1n94:YcAec-aStC8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMjHWHk1n94:YcAec-aStC8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lMjHWHk1n94:YcAec-aStC8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3241530648665079605
title: New Hacking Campaign Targeting Ukrainian Government with IcedID Malware
uri: New-Hacking-Campaign-Targeting-Ukrainian-Government-with-IcedID-Malwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3241530648665079605
content:
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new wave of social engineering campaigns delivering IcedID malware and leveraging Zimbra exploits with the goal of stealing sensitive information.
Attributing the IcedID phishing attacks to a threat cluster named UAC-0041, the agency said the infection sequence begins with an email containing a Microsoft Excel document (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YReqb5fWrrs:su3lv_Yyd1M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YReqb5fWrrs:su3lv_Yyd1M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YReqb5fWrrs:su3lv_Yyd1M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YReqb5fWrrs:su3lv_Yyd1M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YReqb5fWrrs:su3lv_Yyd1M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YReqb5fWrrs:su3lv_Yyd1M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YReqb5fWrrs:su3lv_Yyd1M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YReqb5fWrrs:su3lv_Yyd1M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-406000838498810336
title: Critical RCE Flaw Reported in WordPress Elementor Website Builder Plugin
uri: Critical-RCE-Flaw-Reported-in-WordPress-Elementor-Website-Builder-Plug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/406000838498810336
content:
Elementor, a WordPress website builder plugin with over five million active installations, has been found to be vulnerable to an authenticated remote code execution flaw that could be abused to take over affected websites.
Plugin Vulnerabilities, which disclosed the flaw last week, said the bug was introduced in version 3.6.0 that was released on March 22, 2022. Roughly 37% of users of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jq-U7SZv7es:N0BFOdNL_N8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jq-U7SZv7es:N0BFOdNL_N8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jq-U7SZv7es:N0BFOdNL_N8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jq-U7SZv7es:N0BFOdNL_N8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jq-U7SZv7es:N0BFOdNL_N8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jq-U7SZv7es:N0BFOdNL_N8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jq-U7SZv7es:N0BFOdNL_N8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jq-U7SZv7es:N0BFOdNL_N8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4791747948852637225
title: Researchers Share In-Depth Analysis of PYSA Ransomware Group
uri: Researchers-Share-In-Depth-Analysis-of-PYSA-Ransomware-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4791747948852637225
content:
An 18-month-long analysis of the PYSA ransomware operation has revealed that the cybercrime cartel followed a five-stage software development cycle from August 2020, with the malware authors prioritizing features to improve the efficiency of its workflows.
This included a user-friendly tool like a full-text search engine to facilitate the extraction of metadata and enable the threat actors to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0s_69Ve6HA:gE5nZe5Ov50:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0s_69Ve6HA:gE5nZe5Ov50:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0s_69Ve6HA:gE5nZe5Ov50:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o0s_69Ve6HA:gE5nZe5Ov50:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0s_69Ve6HA:gE5nZe5Ov50:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o0s_69Ve6HA:gE5nZe5Ov50:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0s_69Ve6HA:gE5nZe5Ov50:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o0s_69Ve6HA:gE5nZe5Ov50:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6267512574887744023
title: Benchmarking Linux Security – Latest Research Findings
uri: Benchmarking-Linux-Security-Latest-Research-Findings
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6267512574887744023
content:
How well do your Linux security practices stack up in today's challenging operating environment? Are you following the correct processes to keep systems up-to-date and protected against the latest threats? Now you can find out thanks to research independently conducted by the Ponemon Institute.
The research sponsored by TuxCare sought to understand better how organizations are currently managing<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCrQwC5e1dE:j8YpuWRTlEQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCrQwC5e1dE:j8YpuWRTlEQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCrQwC5e1dE:j8YpuWRTlEQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UCrQwC5e1dE:j8YpuWRTlEQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCrQwC5e1dE:j8YpuWRTlEQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UCrQwC5e1dE:j8YpuWRTlEQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UCrQwC5e1dE:j8YpuWRTlEQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UCrQwC5e1dE:j8YpuWRTlEQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3336135018459529085
title: New SolarMarker Malware Variant Using Updated Techniques to Stay Under the Radar
uri: New-SolarMarker-Malware-Variant-Using-Updated-Techniques-to-Stay-Under
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3336135018459529085
content:
Cybersecurity researchers have disclosed a new version of the SolarMarker malware that packs in new improvements with the goal of updating its defense evasion abilities and staying under the radar.
"The recent version demonstrated an evolution from Windows Portable Executables (EXE files) to working with Windows installer package files (MSI files)," Palo Alto Networks Unit 42 researchers said in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk6Lw7jfMDI:Eg3pFrLfxdI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk6Lw7jfMDI:Eg3pFrLfxdI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk6Lw7jfMDI:Eg3pFrLfxdI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nk6Lw7jfMDI:Eg3pFrLfxdI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk6Lw7jfMDI:Eg3pFrLfxdI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nk6Lw7jfMDI:Eg3pFrLfxdI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk6Lw7jfMDI:Eg3pFrLfxdI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nk6Lw7jfMDI:Eg3pFrLfxdI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6294283078016871123
title: FBI, U.S. Treasury and CISA Warn of North Korean Hackers Targeting Blockchain Companies
uri: FBI-U-S-Treasury-and-CISA-Warn-of-North-Korean-Hackers-Targeting-Blo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6294283078016871123
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the Federal Bureau of Investigation (FBI) and the Treasury Department, warned of a new set of ongoing cyber attacks carried out by the Lazarus Group targeting blockchain companies.
Calling the activity cluster TraderTraitor, the infiltrations involve the North Korean state-sponsored advanced persistent threat (APT) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_8MrnS9VOb0:TJJJqZZd8Wg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_8MrnS9VOb0:TJJJqZZd8Wg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_8MrnS9VOb0:TJJJqZZd8Wg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_8MrnS9VOb0:TJJJqZZd8Wg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_8MrnS9VOb0:TJJJqZZd8Wg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_8MrnS9VOb0:TJJJqZZd8Wg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_8MrnS9VOb0:TJJJqZZd8Wg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_8MrnS9VOb0:TJJJqZZd8Wg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1710118443687136954
title: Github Notifies Victims Whose Private Data Was Accessed Using OAuth Tokens
uri: Github-Notifies-Victims-Whose-Private-Data-Was-Accessed-Using-OAuth-To
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1710118443687136954
content:
GitHub on Monday noted that it had notified all victims of an attack campaign, which involved an unauthorized party downloading private repository contents by taking advantage of third-party OAuth user tokens maintained by Heroku and Travis CI.
"Customers should also continue to monitor Heroku and Travis CI for updates on their own investigations into the affected OAuth applications," the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POh2E5G4ZQE:k9O3YDjsog0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POh2E5G4ZQE:k9O3YDjsog0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POh2E5G4ZQE:k9O3YDjsog0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=POh2E5G4ZQE:k9O3YDjsog0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POh2E5G4ZQE:k9O3YDjsog0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=POh2E5G4ZQE:k9O3YDjsog0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POh2E5G4ZQE:k9O3YDjsog0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=POh2E5G4ZQE:k9O3YDjsog0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-101975219225965155
title: Experts Uncover Spyware Attacks Against Catalan Politicians and Activists
uri: Experts-Uncover-Spyware-Attacks-Against-Catalan-Politicians-and-Activi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/101975219225965155
content:
A previously unknown zero-click exploit in Apple's iMessage was used to install mercenary spyware from NSO Group and Candiru against at least 65 individuals as part of a "multi-year clandestine operation."
"Victims included Members of the European Parliament, Catalan Presidents, legislators, jurists, and members of civil society organizations," the University of Toronto's Citizen Lab said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rE68_g-zZns:n3WxPnqW-go:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rE68_g-zZns:n3WxPnqW-go:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rE68_g-zZns:n3WxPnqW-go:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rE68_g-zZns:n3WxPnqW-go:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rE68_g-zZns:n3WxPnqW-go:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rE68_g-zZns:n3WxPnqW-go:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rE68_g-zZns:n3WxPnqW-go:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rE68_g-zZns:n3WxPnqW-go:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4071250117717201803
title: New Lenovo UEFI Firmware Vulnerabilities Affect Millions of Laptops
uri: New-Lenovo-UEFI-Firmware-Vulnerabilities-Affect-Millions-of-Laptops
url: https://thehackernews.com/2022/04/new-lenovo-uefi-firmware.html
content:
Three high-impact Unified Extensible Firmware Interface (UEFI) security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute firmware implants on the affected devices.
Tracked as CVE-2021-3970, CVE-2021-3971, and CVE-2021-3972, the latter two "affect firmware drivers originally meant to be used only during the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mjUh8oUdYww:JbE8sduR3JU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mjUh8oUdYww:JbE8sduR3JU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mjUh8oUdYww:JbE8sduR3JU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mjUh8oUdYww:JbE8sduR3JU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mjUh8oUdYww:JbE8sduR3JU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mjUh8oUdYww:JbE8sduR3JU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mjUh8oUdYww:JbE8sduR3JU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mjUh8oUdYww:JbE8sduR3JU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8154478529955697359
title: Hackers Exploiting Recently Reported Windows Print Spooler Vulnerability in the Wild
uri: Hackers-Exploiting-Recently-Reported-Windows-Print-Spooler-Vulnerabili
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8154478529955697359
content:
A security flaw in the Windows Print Spooler component that was patched by Microsoft in February is being actively exploited in the wild, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned.
To that end, the agency has added the shortcoming to its Known Exploited Vulnerabilities Catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to address the issues by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LTHzQu7q4DQ:s9EQGO2OGuU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LTHzQu7q4DQ:s9EQGO2OGuU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LTHzQu7q4DQ:s9EQGO2OGuU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LTHzQu7q4DQ:s9EQGO2OGuU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LTHzQu7q4DQ:s9EQGO2OGuU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LTHzQu7q4DQ:s9EQGO2OGuU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LTHzQu7q4DQ:s9EQGO2OGuU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LTHzQu7q4DQ:s9EQGO2OGuU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6739167991770904447
title: Okta Says Security Breach by Lapsus$ Hackers Impacted Only Two of Its Customers
uri: Okta-Says-Security-Breach-by-Lapsus-Hackers-Impacted-Only-Two-of-Its
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6739167991770904447
content:
Identity and access management provider Okta on Tuesday said it concluded its probe into the breach of a third-party vendor in late January 2022 by the LAPSUS$ extortionist gang.
Stating that the "impact of the incident was significantly less than the maximum potential impact" the company had previously shared last month, Okta said the intrusion impacted only two customer tenants, down from 366 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dZHZuXIynZQ:tWBFjAMgrJY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dZHZuXIynZQ:tWBFjAMgrJY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dZHZuXIynZQ:tWBFjAMgrJY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dZHZuXIynZQ:tWBFjAMgrJY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dZHZuXIynZQ:tWBFjAMgrJY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dZHZuXIynZQ:tWBFjAMgrJY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dZHZuXIynZQ:tWBFjAMgrJY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dZHZuXIynZQ:tWBFjAMgrJY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2230234199762257955
title: Google Project Zero Detects a Record Number of Zero-Day Exploits in 2021
uri: Google-Project-Zero-Detects-a-Record-Number-of-Zero-Day-Exploits-in-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2230234199762257955
content:
Google Project Zero called 2021 a "record year for in-the-wild 0-days," as 58 security vulnerabilities were detected and disclosed during the course of the year.
The development marks more than a two-fold jump from the previous maximum when 28 0-day exploits were tracked in 2015. In contrast, only 25 0-day exploits were detected in 2020.
"The large uptick in in-the-wild 0-days in 2021 is due to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRak9_K_ASg:GivaGbuqq9Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRak9_K_ASg:GivaGbuqq9Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRak9_K_ASg:GivaGbuqq9Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SRak9_K_ASg:GivaGbuqq9Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRak9_K_ASg:GivaGbuqq9Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SRak9_K_ASg:GivaGbuqq9Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRak9_K_ASg:GivaGbuqq9Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SRak9_K_ASg:GivaGbuqq9Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8611662183645192799
title: Researchers Detail Bug That Could Paralyze Snort Intrusion Detection System
uri: Researchers-Detail-Bug-That-Could-Paralyze-Snort-Intrusion-Detection-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8611662183645192799
content:
Details have emerged about a now-patched security vulnerability in the Snort intrusion detection and prevention system that could trigger a denial-of-service (DoS) condition and render it powerless against malicious traffic.
Tracked as CVE-2022-20685, the vulnerability is rated 7.5 for severity and resides in the Modbus preprocessor of the Snort detection engine. It affects all open-source Snort<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RoneDmuVAf4:K1Hrou11ay4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RoneDmuVAf4:K1Hrou11ay4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RoneDmuVAf4:K1Hrou11ay4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RoneDmuVAf4:K1Hrou11ay4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RoneDmuVAf4:K1Hrou11ay4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RoneDmuVAf4:K1Hrou11ay4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RoneDmuVAf4:K1Hrou11ay4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RoneDmuVAf4:K1Hrou11ay4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2209289329774371010
title: [eBook] The Ultimate Security for Management Presentation Template
uri: eBook-The-Ultimate-Security-for-Management-Presentation-Template
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2209289329774371010
content:
Are you a CISO, CIO, or IT Director?
In your role, you're responsible for breach protection – which means you oversee and govern the process of designing, building, maintaining, and continuously enhancing your organization's security program. 
But getting buy-in from leadership can be difficult when they are a non-technical audience.
On top of managing your organization's breach protection <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hktDth7ngWw:9QA2OZEXMrA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hktDth7ngWw:9QA2OZEXMrA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hktDth7ngWw:9QA2OZEXMrA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hktDth7ngWw:9QA2OZEXMrA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hktDth7ngWw:9QA2OZEXMrA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hktDth7ngWw:9QA2OZEXMrA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hktDth7ngWw:9QA2OZEXMrA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hktDth7ngWw:9QA2OZEXMrA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-789618446272863251
title: Five Eyes Nations Warn of Russian Cyber Attacks Against Critical Infrastructure
uri: Five-Eyes-Nations-Warn-of-Russian-Cyber-Attacks-Against-Critical-Infra
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/789618446272863251
content:
The Five Eyes nations have released a joint cybersecurity advisory warning of increased malicious attacks from Russian state-sponsored actors and criminal groups targeting critical infrastructure organizations amidst the ongoing military siege on Ukraine.
"Evolving intelligence indicates that the Russian government is exploring options for potential cyberattacks," authorities from Australia, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9bbSYCCjYI:K-B3b17pwrs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9bbSYCCjYI:K-B3b17pwrs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9bbSYCCjYI:K-B3b17pwrs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h9bbSYCCjYI:K-B3b17pwrs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9bbSYCCjYI:K-B3b17pwrs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h9bbSYCCjYI:K-B3b17pwrs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9bbSYCCjYI:K-B3b17pwrs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h9bbSYCCjYI:K-B3b17pwrs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4781798559710826115
title: Hackers Sneak 'More_Eggs' Malware Into Resumes Sent to Corporate Hiring Managers
uri: Hackers-Sneak-More_Eggs-Malware-Into-Resumes-Sent-to-Corporate-Hirin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4781798559710826115
content:
A new set of phishing attacks delivering the more_eggs malware has been observed striking corporate hiring managers with bogus resumes as an infection vector, a year after potential candidates looking for work on LinkedIn were lured with weaponized job offers.
"This year the more_eggs operation has flipped the social engineering script, targeting hiring managers with fake resumes instead of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=spGOqyyBTQc:nnd9CH-lg00:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=spGOqyyBTQc:nnd9CH-lg00:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=spGOqyyBTQc:nnd9CH-lg00:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=spGOqyyBTQc:nnd9CH-lg00:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=spGOqyyBTQc:nnd9CH-lg00:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=spGOqyyBTQc:nnd9CH-lg00:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=spGOqyyBTQc:nnd9CH-lg00:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=spGOqyyBTQc:nnd9CH-lg00:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-604588777309962099
title: Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug
uri: Amazon-s-Hotpatch-for-Log4j-Flaw-Found-Vulnerable-to-Privilege-Escalat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/604588777309962099
content:
The "hotpatch" released by Amazon Web Services (AWS) in response to the Log4Shell vulnerabilities could be leveraged for container escape and privilege escalation, allowing an attacker to seize control of the underlying host.
"Aside from containers, unprivileged processes can also exploit the patch to escalate privileges and gain root code execution," Palo Alto Networks Unit 42 researcher Yuval <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IAHoo1htzAk:8dmc5LbKUH8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IAHoo1htzAk:8dmc5LbKUH8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IAHoo1htzAk:8dmc5LbKUH8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IAHoo1htzAk:8dmc5LbKUH8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IAHoo1htzAk:8dmc5LbKUH8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IAHoo1htzAk:8dmc5LbKUH8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IAHoo1htzAk:8dmc5LbKUH8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IAHoo1htzAk:8dmc5LbKUH8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3576767048476730361
title: Unpatched Bug in RainLoop Webmail Could Give Hackers Access to all Emails
uri: Unpatched-Bug-in-RainLoop-Webmail-Could-Give-Hackers-Access-to-all-Ema
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3576767048476730361
content:
An unpatched high-severity security flaw has been disclosed in the open-source RainLoop web-based email client that could be weaponized to siphon emails from victims' inboxes.
"The code vulnerability [...] can be easily exploited by an attacker by sending a malicious email to a victim that uses RainLoop as a mail client," SonarSource security researcher Simon Scannell said in a report published <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWo6ulUvUhA:O9Klgz5Ph8I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWo6ulUvUhA:O9Klgz5Ph8I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWo6ulUvUhA:O9Klgz5Ph8I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UWo6ulUvUhA:O9Klgz5Ph8I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWo6ulUvUhA:O9Klgz5Ph8I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UWo6ulUvUhA:O9Klgz5Ph8I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWo6ulUvUhA:O9Klgz5Ph8I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UWo6ulUvUhA:O9Klgz5Ph8I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7528294828067527527
title: Critical Chipset Bugs Open Millions of Android Devices to Remote Spying
uri: Critical-Chipset-Bugs-Open-Millions-of-Android-Devices-to-Remote-Spyin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7528294828067527527
content:
Three security vulnerabilities have been disclosed in the audio decoders of Qualcomm and MediaTek chips that, if left unresolved, could allow an adversary to remotely gain access to media and audio conversations from affected mobile devices.
According to Israeli cybersecurity company Check Point, the issues could be used as a launchpad to carry out remote code execution (RCE) attacks simply by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zg597lM5Zac:G3etXuPiOjs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zg597lM5Zac:G3etXuPiOjs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zg597lM5Zac:G3etXuPiOjs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zg597lM5Zac:G3etXuPiOjs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zg597lM5Zac:G3etXuPiOjs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zg597lM5Zac:G3etXuPiOjs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zg597lM5Zac:G3etXuPiOjs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zg597lM5Zac:G3etXuPiOjs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5084832754228457659
title: New Incident Report Reveals How Hive Ransomware Targets Organizations
uri: New-Incident-Report-Reveals-How-Hive-Ransomware-Targets-Organizations
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5084832754228457659
content:
A recent Hive ransomware attack carried out by an affiliate involved the exploitation of "ProxyShell" vulnerabilities in the Microsoft Exchange Server that were disclosed last year to encrypt an unnamed customer's network.
"The actor managed to achieve its malicious goals and encrypt the environment in less than 72 hours from the initial compromise," Varonis security researcher, Nadav Ovadia, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55y5EsSKT-I:DmcszMadqAM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55y5EsSKT-I:DmcszMadqAM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55y5EsSKT-I:DmcszMadqAM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=55y5EsSKT-I:DmcszMadqAM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55y5EsSKT-I:DmcszMadqAM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=55y5EsSKT-I:DmcszMadqAM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55y5EsSKT-I:DmcszMadqAM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=55y5EsSKT-I:DmcszMadqAM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-56553779019520392
title: QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities
uri: QNAP-Advises-Users-to-Update-NAS-Firmware-to-Patch-Apache-HTTP-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/56553779019520392
content:
Network-attached storage (NAS) appliance maker QNAP on Thursday said it's investigating its lineup for potential impact arising from two security vulnerabilities that were addressed in the Apache HTTP server last month.
The critical flaws, tracked as CVE-2022-22721 and CVE-2022-23943, are rated 9.8 for severity on the CVSS scoring system and impact Apache HTTP Server versions 2.4.52 and earlier <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k26fSI3z3vc:yyGIgZgiQAg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k26fSI3z3vc:yyGIgZgiQAg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k26fSI3z3vc:yyGIgZgiQAg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k26fSI3z3vc:yyGIgZgiQAg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k26fSI3z3vc:yyGIgZgiQAg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k26fSI3z3vc:yyGIgZgiQAg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k26fSI3z3vc:yyGIgZgiQAg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k26fSI3z3vc:yyGIgZgiQAg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5582360628041841627
title: Cisco Releases Security Patches for TelePresence, RoomOS and Umbrella VA
uri: Cisco-Releases-Security-Patches-for-TelePresence-RoomOS-and-Umbrella
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5582360628041841627
content:
Networking equipment maker Cisco has released security updates to address three high-severity vulnerabilities in its products that could be exploited to cause a denial-of-service (DoS) condition and take control of affected systems.
The first of the three flaws, CVE-2022-20783 (CVSS score: 7.5), affects Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software, and stems <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AdBs2CM493U:t5jWj7b_23A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AdBs2CM493U:t5jWj7b_23A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AdBs2CM493U:t5jWj7b_23A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AdBs2CM493U:t5jWj7b_23A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AdBs2CM493U:t5jWj7b_23A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AdBs2CM493U:t5jWj7b_23A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AdBs2CM493U:t5jWj7b_23A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AdBs2CM493U:t5jWj7b_23A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2455689133033242560
title: Researcher Releases PoC for Recent Java Cryptographic Vulnerability
uri: Researcher-Releases-PoC-for-Recent-Java-Cryptographic-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2455689133033242560
content:
A proof-of-concept (PoC) code demonstrating a newly disclosed digital signature bypass vulnerability in Java has been shared online. 
The high-severity flaw in question, CVE-2022-21449 (CVSS score: 7.5), impacts the following version of Java SE and Oracle GraalVM Enterprise Edition -

Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18
Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1, 22.0.0.2

<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cc19_ELILng:wOfgZlh5TnI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cc19_ELILng:wOfgZlh5TnI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cc19_ELILng:wOfgZlh5TnI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cc19_ELILng:wOfgZlh5TnI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cc19_ELILng:wOfgZlh5TnI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cc19_ELILng:wOfgZlh5TnI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cc19_ELILng:wOfgZlh5TnI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cc19_ELILng:wOfgZlh5TnI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-954716534779276883
title: Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud
uri: Watch-Out-Cryptocurrency-Miners-Targeting-Dockers-AWS-and-Alibaba-Cl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/954716534779276883
content:
LemonDuck, a cross-platform cryptocurrency mining botnet, is targeting Docker to mine cryptocurrency on Linux systems as part of an active malware campaign.
"It runs an anonymous mining operation by the use of proxy pools, which hide the wallet addresses," CrowdStrike said in a new report. "It evades detection by targeting Alibaba Cloud's monitoring service and disabling it."
Known to strike <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ErcwXXeudZ8:focvLfy2sB0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ErcwXXeudZ8:focvLfy2sB0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ErcwXXeudZ8:focvLfy2sB0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ErcwXXeudZ8:focvLfy2sB0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ErcwXXeudZ8:focvLfy2sB0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ErcwXXeudZ8:focvLfy2sB0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ErcwXXeudZ8:focvLfy2sB0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ErcwXXeudZ8:focvLfy2sB0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7645593055380945054
title: T-Mobile Admits Lapsus$ Hackers Gained Access to its Internal Tools and Source Code
uri: T-Mobile-Admits-Lapsus-Hackers-Gained-Access-to-its-Internal-Tools-an
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7645593055380945054
content:
Telecom company T-Mobile on Friday confirmed that it was the victim of a security breach in March after the LAPSUS$ mercenary gang managed to gain access to its networks.
The acknowledgment came after investigative journalist Brian Krebs shared internal chats belonging to the core members of the group indicating that LAPSUS$ breached the company several times in March prior to the arrest of its <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT1KRusIzB4:rER4HjA80nU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT1KRusIzB4:rER4HjA80nU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT1KRusIzB4:rER4HjA80nU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TT1KRusIzB4:rER4HjA80nU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT1KRusIzB4:rER4HjA80nU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TT1KRusIzB4:rER4HjA80nU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT1KRusIzB4:rER4HjA80nU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TT1KRusIzB4:rER4HjA80nU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2752825416857334255
title: Atlassian Drops Patches for Critical Jira Authentication Bypass Vulnerability
uri: Atlassian-Drops-Patches-for-Critical-Jira-Authentication-Bypass-Vulner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2752825416857334255
content:
Atlassian has published a security advisory warning of a critical vulnerability in its Jira software that could be abused by a remote, unauthenticated attacker to circumvent authentication protections.
Tracked as CVE-2022-0540, the flaw is rated 9.9 out of 10 on the CVSS scoring system and resides in Jira's authentication framework, Jira Seraph. Khoadha of Viettel Cyber Security has been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n48hw9tMi4Q:DpN-EXkGHP4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n48hw9tMi4Q:DpN-EXkGHP4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n48hw9tMi4Q:DpN-EXkGHP4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n48hw9tMi4Q:DpN-EXkGHP4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n48hw9tMi4Q:DpN-EXkGHP4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n48hw9tMi4Q:DpN-EXkGHP4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n48hw9tMi4Q:DpN-EXkGHP4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n48hw9tMi4Q:DpN-EXkGHP4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-799848611943704268
title: FBI Warns of BlackCat Ransomware That Breached Over 60 Organisations Worldwide
uri: FBI-Warns-of-BlackCat-Ransomware-That-Breached-Over-60-Organisations-W
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/799848611943704268
content:
The U.S. Federal Bureau of Investigation (FBI) is sounding the alarm on the BlackCat ransomware-as-a-service (RaaS), which it said victimized at least 60 entities worldwide between as of March 2022 since its emergence last November.
Also called ALPHV and Noberus, the ransomware is notable for being the first-ever malware written in the Rust programming language that's known to be memory safe and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-_iKeCAfSc:2N98S0fQ_BE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-_iKeCAfSc:2N98S0fQ_BE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-_iKeCAfSc:2N98S0fQ_BE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A-_iKeCAfSc:2N98S0fQ_BE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-_iKeCAfSc:2N98S0fQ_BE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A-_iKeCAfSc:2N98S0fQ_BE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-_iKeCAfSc:2N98S0fQ_BE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A-_iKeCAfSc:2N98S0fQ_BE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4835295950202893021
title: New BotenaGo Malware Variant Targeting Lilin Security Camera DVR Devices
uri: New-BotenaGo-Malware-Variant-Targeting-Lilin-Security-Camera-DVR-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4835295950202893021
content:
A new variant of an IoT botnet called BotenaGo has emerged in the wild, specifically singling out Lilin security camera DVR devices to infect them with Mirai malware.
Dubbed "Lilin Scanner" by Nozomi Networks, the latest version is designed to exploit a two-year-old critical command injection vulnerability in the DVR firmware that was patched by the Taiwanese company in February 2020.
&lt;!-<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnJihAdKHW8:SWorURd5n8Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnJihAdKHW8:SWorURd5n8Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnJihAdKHW8:SWorURd5n8Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tnJihAdKHW8:SWorURd5n8Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnJihAdKHW8:SWorURd5n8Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tnJihAdKHW8:SWorURd5n8Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tnJihAdKHW8:SWorURd5n8Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tnJihAdKHW8:SWorURd5n8Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4720478208303046324
title: Critical Bug in Everscale Wallet Could've Let Attackers Steal Cryptocurrencies
uri: Critical-Bug-in-Everscale-Wallet-Could-ve-Let-Attackers-Steal-Cryptocu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4720478208303046324
content:
A security vulnerability has been disclosed in the web version of the Ever Surf wallet that, if successfully weaponized, could allow an attacker to gain full control over a victim's wallet.
"By exploiting the vulnerability, it's possible to decrypt the private keys and seed phrases that are stored in the browser's local storage," Israeli cybersecurity company Check Point said in a report shared <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAHD5BwIfQ8:RTlFK-GVN_M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAHD5BwIfQ8:RTlFK-GVN_M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAHD5BwIfQ8:RTlFK-GVN_M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rAHD5BwIfQ8:RTlFK-GVN_M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAHD5BwIfQ8:RTlFK-GVN_M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rAHD5BwIfQ8:RTlFK-GVN_M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rAHD5BwIfQ8:RTlFK-GVN_M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rAHD5BwIfQ8:RTlFK-GVN_M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4858677654876629416
title: Researchers Report Critical RCE Vulnerability in Google's VirusTotal Platform
uri: Researchers-Report-Critical-RCE-Vulnerability-in-Google-s-VirusTotal-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4858677654876629416
content:
Security researchers have disclosed a security vulnerability in the VirusTotal platform that could have been potentially weaponized to achieve remote code execution (RCE).
The flaw, now patched, made it possible to "execute commands remotely within VirusTotal platform and gain access to its various scans capabilities," Cysource researchers Shai Alfasi and Marlon Fabiano da Silva said in a report<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UMt39QP6l1M:-Hi07XwdN4Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UMt39QP6l1M:-Hi07XwdN4Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UMt39QP6l1M:-Hi07XwdN4Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UMt39QP6l1M:-Hi07XwdN4Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UMt39QP6l1M:-Hi07XwdN4Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UMt39QP6l1M:-Hi07XwdN4Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UMt39QP6l1M:-Hi07XwdN4Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UMt39QP6l1M:-Hi07XwdN4Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2255815963961794322
title: Iranian Hackers Exploiting VMware RCE Bug to Deploy 'Code Impact' Backdoor
uri: Iranian-Hackers-Exploiting-VMware-RCE-Bug-to-Deploy-Code-Impact-Back
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2255815963961794322
content:
An Iranian-linked threat actor known as Rocket Kitten has been observed actively exploiting a recently patched VMware vulnerability to gain initial access and deploy the Core Impact penetration testing tool on vulnerable systems.
Tracked as CVE-2022-22954 (CVSS score: 9.8), the critical issue concerns a case of remote code execution (RCE) vulnerability affecting VMware Workspace ONE Access and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_XSfIdR5rv0:SHFckkw5AUQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_XSfIdR5rv0:SHFckkw5AUQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_XSfIdR5rv0:SHFckkw5AUQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_XSfIdR5rv0:SHFckkw5AUQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_XSfIdR5rv0:SHFckkw5AUQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_XSfIdR5rv0:SHFckkw5AUQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_XSfIdR5rv0:SHFckkw5AUQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_XSfIdR5rv0:SHFckkw5AUQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2513654645445584717
title: North Korean Hackers Target Journalists with GOLDBACKDOOR Malware
uri: North-Korean-Hackers-Target-Journalists-with-GOLDBACKDOOR-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2513654645445584717
content:
A state-backed threat actor with ties to the Democratic People's Republic of Korea (DRPK) has been attributed to a spear-phishing campaign targeting journalists covering the country with the ultimate goal of deploying a backdoor on infected Windows systems.
The intrusions, said to be the work of Ricochet Chollima, resulted in the deployment of a novel malware strain called GOLDBACKDOOR, an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjyyuA6NViA:FApmF71AFbg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjyyuA6NViA:FApmF71AFbg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjyyuA6NViA:FApmF71AFbg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RjyyuA6NViA:FApmF71AFbg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjyyuA6NViA:FApmF71AFbg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RjyyuA6NViA:FApmF71AFbg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjyyuA6NViA:FApmF71AFbg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RjyyuA6NViA:FApmF71AFbg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1130537576123106435
title: Gold Ulrick Hackers Still in Action Despite Massive Conti Ransomware Leak
uri: Gold-Ulrick-Hackers-Still-in-Action-Despite-Massive-Conti-Ransomware-L
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1130537576123106435
content:
The infamous ransomware group known as Conti has continued its onslaught against entities despite suffering a massive data leak of its own earlier this year, according to new research.
Conti, attributed to a Russia-based threat actor known as Gold Ulrick, is one of the most prevalent malware strains in the ransomware landscape, accounting for 19% of all attacks during the three-month-period <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S3S7lZGSyf4:nyLDaSDrvDs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S3S7lZGSyf4:nyLDaSDrvDs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S3S7lZGSyf4:nyLDaSDrvDs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=S3S7lZGSyf4:nyLDaSDrvDs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S3S7lZGSyf4:nyLDaSDrvDs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=S3S7lZGSyf4:nyLDaSDrvDs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=S3S7lZGSyf4:nyLDaSDrvDs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=S3S7lZGSyf4:nyLDaSDrvDs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5522483722153506803
title: Emotet Testing New Delivery Ideas After Microsoft Disables VBA Macros by Default
uri: Emotet-Testing-New-Delivery-Ideas-After-Microsoft-Disables-VBA-Macros
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5522483722153506803
content:
The threat actor behind the prolific Emotet botnet is testing new attack methods on a small scale before co-opting them into their larger volume malspam campaigns, potentially in response to Microsoft's move to disable Visual Basic for Applications (VBA) macros by default across its products.
Calling the new activity a "departure" from the group's typical behavior, ProofPoint alternatively <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eBkobzlg7Hc:n8p33DOnubU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eBkobzlg7Hc:n8p33DOnubU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eBkobzlg7Hc:n8p33DOnubU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eBkobzlg7Hc:n8p33DOnubU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eBkobzlg7Hc:n8p33DOnubU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eBkobzlg7Hc:n8p33DOnubU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eBkobzlg7Hc:n8p33DOnubU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eBkobzlg7Hc:n8p33DOnubU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4779000276512356669
title: Microsoft Discovers New Privilege Escalation Flaws in Linux Operating System
uri: Microsoft-Discovers-New-Privilege-Escalation-Flaws-in-Linux-Operating
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4779000276512356669
content:
Microsoft on Tuesday disclosed a set of two privilege escalation vulnerabilities in the Linux operating system that could potentially allow threat actors to carry out an array of nefarious activities.
Collectively called "Nimbuspwn," the flaws "can be chained together to gain root privileges on Linux systems, allowing attackers to deploy payloads, like a root backdoor, and perform other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=slQPmKYkVFM:plEhJr9OyyE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=slQPmKYkVFM:plEhJr9OyyE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=slQPmKYkVFM:plEhJr9OyyE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=slQPmKYkVFM:plEhJr9OyyE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=slQPmKYkVFM:plEhJr9OyyE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=slQPmKYkVFM:plEhJr9OyyE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=slQPmKYkVFM:plEhJr9OyyE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=slQPmKYkVFM:plEhJr9OyyE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7301796638907419263
title: NPM Bug Allowed Attackers to Distribute Malware as Legitimate Packages
uri: NPM-Bug-Allowed-Attackers-to-Distribute-Malware-as-Legitimate-Packages
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7301796638907419263
content:
A "logical flaw" has been disclosed in NPM, the default package manager for the Node.js JavaScript runtime environment, that enables malicious actors to pass off rogue libraries as legitimate and trick unsuspecting developers into installing them.
The supply chain threat has been dubbed "Package Planting" by researchers from cloud security firm Aqua. Following responsible disclosure on February <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmbdhp_1RE:1REFsxTTRN0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmbdhp_1RE:1REFsxTTRN0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmbdhp_1RE:1REFsxTTRN0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vVmbdhp_1RE:1REFsxTTRN0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmbdhp_1RE:1REFsxTTRN0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vVmbdhp_1RE:1REFsxTTRN0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmbdhp_1RE:1REFsxTTRN0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vVmbdhp_1RE:1REFsxTTRN0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7577820734548804293
title: U.S. Offers $10 Million Bounty for Information on 6 Russian Military Hackers
uri: U-S-Offers-10-Million-Bounty-for-Information-on-6-Russian-Military-H
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7577820734548804293
content:
The U.S. government on Tuesday announced up to $10 million in rewards for information on six hackers associated with the Russian military intelligence service.
"These individuals participated in malicious cyber activities on behalf of the Russian government against U.S. critical infrastructure in violation of the Computer Fraud and Abuse Act," the State Department's Rewards for Justice Program <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdIBRR-__Hk:ufA-33QDvA4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdIBRR-__Hk:ufA-33QDvA4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdIBRR-__Hk:ufA-33QDvA4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZdIBRR-__Hk:ufA-33QDvA4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdIBRR-__Hk:ufA-33QDvA4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZdIBRR-__Hk:ufA-33QDvA4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdIBRR-__Hk:ufA-33QDvA4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZdIBRR-__Hk:ufA-33QDvA4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5993745622716397967
title: Chinese Hackers Targeting Russian Military Personnel with Updated PlugX Malware
uri: Chinese-Hackers-Targeting-Russian-Military-Personnel-with-Updated-Plug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5993745622716397967
content:
A China-linked government-sponsored threat actor has been observed targeting Russian speakers with an updated version of a remote access trojan called PlugX.
Secureworks attributed the attempted intrusions to a threat actor it tracks as Bronze President, and by the wider cybersecurity community under the monikers Mustang Panda, TA416, HoneyMyte, RedDelta, and PKPLUG.
"The war in Ukraine has <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFp1XO-14LE:potXjG4QRQA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFp1XO-14LE:potXjG4QRQA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFp1XO-14LE:potXjG4QRQA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nFp1XO-14LE:potXjG4QRQA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFp1XO-14LE:potXjG4QRQA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nFp1XO-14LE:potXjG4QRQA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFp1XO-14LE:potXjG4QRQA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nFp1XO-14LE:potXjG4QRQA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3411379431478468541
title: Google's New Safety Section Shows What Data Android Apps Collect About Users
uri: Google-s-New-Safety-Section-Shows-What-Data-Android-Apps-Collect-About
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3411379431478468541
content:
Google on Tuesday officially began rolling out a new "Data safety" section for Android apps on the Play Store to highlight the type of data being collected and shared with third-parties.
"Users want to know for what purpose their data is being collected and whether the developer is sharing user data with third parties," Suzanne Frey, Vice President of product for Android security and privacy, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UnCKrJ5wkTs:VHw5u2ALw7I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UnCKrJ5wkTs:VHw5u2ALw7I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UnCKrJ5wkTs:VHw5u2ALw7I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UnCKrJ5wkTs:VHw5u2ALw7I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UnCKrJ5wkTs:VHw5u2ALw7I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UnCKrJ5wkTs:VHw5u2ALw7I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UnCKrJ5wkTs:VHw5u2ALw7I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UnCKrJ5wkTs:VHw5u2ALw7I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3401616353018461595
title: [eBook] Your First 90 Days as MSSP: 10 Steps to Success
uri: eBook-Your-First-90-Days-as-MSSP-10-Steps-to-Success
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3401616353018461595
content:
Bad actors continuously evolve their tactics and are becoming more sophisticated. Within the past couple of years, we’ve seen supply chain attacks that quickly create widespread damage throughout entire industries. But the attackers aren’t just focusing their efforts on supply chains.For example, businesses are becoming increasingly more reliant on SaaS apps and the cloud – creating a new avenue<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEkJAQkA0dE:LMvzkazu3vU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEkJAQkA0dE:LMvzkazu3vU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEkJAQkA0dE:LMvzkazu3vU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEkJAQkA0dE:LMvzkazu3vU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEkJAQkA0dE:LMvzkazu3vU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEkJAQkA0dE:LMvzkazu3vU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEkJAQkA0dE:LMvzkazu3vU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEkJAQkA0dE:LMvzkazu3vU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-362003989255069452
title: U.S Cybersecurity Agency Lists 2021's Top 15 Most Exploited Software Vulnerabilities
uri: U-S-Cybersecurity-Agency-Lists-2021-s-Top-15-Most-Exploited-Software-V
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/362003989255069452
content:
Log4Shell, ProxyShell, ProxyLogon, ZeroLogon, and flaws in Zoho ManageEngine AD SelfService Plus, Atlassian Confluence, and VMware vSphere Client emerged as some of the top exploited security vulnerabilities in 2021.
&lt;!--adsense--&gt;
That's according to a "Top Routinely Exploited Vulnerabilities" report released by cybersecurity authorities from the Five Eyes nations Australia, Canada, New Zealand<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zO3VeEEqaXI:JIyZvmOZ_V0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zO3VeEEqaXI:JIyZvmOZ_V0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zO3VeEEqaXI:JIyZvmOZ_V0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zO3VeEEqaXI:JIyZvmOZ_V0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zO3VeEEqaXI:JIyZvmOZ_V0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zO3VeEEqaXI:JIyZvmOZ_V0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zO3VeEEqaXI:JIyZvmOZ_V0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zO3VeEEqaXI:JIyZvmOZ_V0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8332064526439135575
title: CloudFlare Thwarts Record DDoS Attack Peaking at 15 Million Requests Per Second
uri: CloudFlare-Thwarts-Record-DDoS-Attack-Peaking-at-15-Million-Requests-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8332064526439135575
content:
Cloudflare on Wednesday disclosed that it acted to mitigate a 15.3 million request-per-second (RPS) distributed denial-of-service (DDoS) attack. The web infrastructure and website security company called it one of the "largest HTTPS DDoS attacks on record." 
"HTTPS DDoS attacks are more expensive in terms of required computational resources because of the higher cost of establishing a secure TLS<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynJ0dkwcFQ0:uk8tJwaQj_E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynJ0dkwcFQ0:uk8tJwaQj_E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynJ0dkwcFQ0:uk8tJwaQj_E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ynJ0dkwcFQ0:uk8tJwaQj_E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynJ0dkwcFQ0:uk8tJwaQj_E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ynJ0dkwcFQ0:uk8tJwaQj_E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynJ0dkwcFQ0:uk8tJwaQj_E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ynJ0dkwcFQ0:uk8tJwaQj_E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6686253074763043381
title: QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available
uri: QNAP-Advises-to-Mitigate-Remote-Hacking-Flaws-Until-Patches-are-Availa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6686253074763043381
content:
Network-attached storage (NAS) appliance maker QNAP on Wednesday said it's working on updating its QTS and QuTS operating systems after Netatalk last month released patches to contain seven security flaws in its software.
Netatalk is an open-source implementation of the Apple Filing Protocol (AFP), allowing Unix-like operating systems to serve as file servers for Apple macOS computers.
&lt;!-<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWH0O1Lq4dU:Pe_EBd70cMs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWH0O1Lq4dU:Pe_EBd70cMs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWH0O1Lq4dU:Pe_EBd70cMs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWH0O1Lq4dU:Pe_EBd70cMs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWH0O1Lq4dU:Pe_EBd70cMs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWH0O1Lq4dU:Pe_EBd70cMs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWH0O1Lq4dU:Pe_EBd70cMs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWH0O1Lq4dU:Pe_EBd70cMs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7069565087035941893
title: Experts Detail 3 Hacking Teams Working Under the Umbrella of TA410 Group
uri: Experts-Detail-3-Hacking-Teams-Working-Under-the-Umbrella-of-TA410-Gro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7069565087035941893
content:
A cyberespionage threat actor known for targeting a variety of critical infrastructure sectors in Africa, the Middle East, and the U.S. has been observed using an upgraded version of a remote access trojan with information stealing capabilities.
Calling TA410 an umbrella group comprised of three teams dubbed FlowingFrog, LookingFrog and JollyFrog, Slovak cybersecurity firm ESET assessed that "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8sZe-_2_R1A:DrBL7PASm88:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8sZe-_2_R1A:DrBL7PASm88:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8sZe-_2_R1A:DrBL7PASm88:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8sZe-_2_R1A:DrBL7PASm88:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8sZe-_2_R1A:DrBL7PASm88:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8sZe-_2_R1A:DrBL7PASm88:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8sZe-_2_R1A:DrBL7PASm88:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8sZe-_2_R1A:DrBL7PASm88:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4629228336205833830
title: Everything you need to know to create a Vulnerability Assessment Report
uri: Everything-you-need-to-know-to-create-a-Vulnerability-Assessment-Repor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4629228336205833830
content:
You've been asked for a Vulnerability Assessment Report for your organisation and for some of you reading this article, your first thought is likely to be "What is that?"
Worry not. This article will answer that very question as well as why you need a Vulnerability Assessment Report and where you can get one from. 
As it's likely the request for such a report came from an important source such <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLS8-RVC9d8:1ZgTca66KQY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLS8-RVC9d8:1ZgTca66KQY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLS8-RVC9d8:1ZgTca66KQY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sLS8-RVC9d8:1ZgTca66KQY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLS8-RVC9d8:1ZgTca66KQY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sLS8-RVC9d8:1ZgTca66KQY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLS8-RVC9d8:1ZgTca66KQY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sLS8-RVC9d8:1ZgTca66KQY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5715534652256997209
title: Cybercriminals Using New Malware Loader 'Bumblebee' in the Wild
uri: Cybercriminals-Using-New-Malware-Loader-Bumblebee-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5715534652256997209
content:
Cybercriminal actors previously observed delivering BazaLoader and IcedID as part of their malware campaigns are said to have transitioned to a new loader called Bumblebee that's under active development.
"Based on the timing of its appearance in the threat landscape and use by multiple cybercriminal groups, it is likely Bumblebee is, if not a direct replacement for BazaLoader, then a new, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDlL-Z54vdc:hecTdOfIRVk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDlL-Z54vdc:hecTdOfIRVk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDlL-Z54vdc:hecTdOfIRVk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DDlL-Z54vdc:hecTdOfIRVk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDlL-Z54vdc:hecTdOfIRVk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DDlL-Z54vdc:hecTdOfIRVk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDlL-Z54vdc:hecTdOfIRVk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DDlL-Z54vdc:hecTdOfIRVk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8582805524670746059
title: Twitter's New Owner Elon Musk Wants DMs to be End-to-End Encrypted like Signal
uri: Twitter-s-New-Owner-Elon-Musk-Wants-DMs-to-be-End-to-End-Encrypted-lik
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8582805524670746059
content:
Elon Musk, CEO of SpaceX and Tesla and Twitter's new owner, on Thursday called on adding support for end-to-end encryption (E2EE) to the platform's direct messages (DM) feature.
"Twitter DMs should have end to end encryption like Signal, so no one can spy on or hack your messages," Musk said in a tweet.
The statement comes days after the microblogging service announced it officially entered into<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3y44WkN_LM:JKqtO4xb818:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3y44WkN_LM:JKqtO4xb818:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3y44WkN_LM:JKqtO4xb818:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3y44WkN_LM:JKqtO4xb818:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3y44WkN_LM:JKqtO4xb818:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3y44WkN_LM:JKqtO4xb818:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3y44WkN_LM:JKqtO4xb818:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3y44WkN_LM:JKqtO4xb818:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4826509310498651070
title: New RIG Exploit Kit Campaign Infecting Victims' PCs with RedLine Stealer
uri: New-RIG-Exploit-Kit-Campaign-Infecting-Victims-PCs-with-RedLine-Steal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4826509310498651070
content:
A new campaign leveraging an exploit kit has been observed abusing an Internet Explorer flaw patched by Microsoft last year to deliver the RedLine Stealer trojan.
"When executed, RedLine Stealer performs recon against the target system (including username, hardware, browsers installed, anti-virus software) and then exfiltrates data (including passwords, saved credit cards, crypto wallets, VPN <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pBfqMK56Gfw:73YJeQHz82Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pBfqMK56Gfw:73YJeQHz82Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pBfqMK56Gfw:73YJeQHz82Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pBfqMK56Gfw:73YJeQHz82Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pBfqMK56Gfw:73YJeQHz82Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pBfqMK56Gfw:73YJeQHz82Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pBfqMK56Gfw:73YJeQHz82Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pBfqMK56Gfw:73YJeQHz82Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3163648189648162902
title: Microsoft Azure Vulnerability Exposes PostgreSQL Databases to Other Customers
uri: Microsoft-Azure-Vulnerability-Exposes-PostgreSQL-Databases-to-Other-Cu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3163648189648162902
content:
Microsoft on Thursday disclosed that it addressed a pair of issues with the Azure Database for PostgreSQL Flexible Server that could result in unauthorized cross-account database access in a region.
"By exploiting an elevated permissions bug in the Flexible Server authentication process for a replication user, a malicious user could leverage an improperly anchored regular expression to bypass <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p_0RWnJIPLQ:ueq90osjR0k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p_0RWnJIPLQ:ueq90osjR0k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p_0RWnJIPLQ:ueq90osjR0k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p_0RWnJIPLQ:ueq90osjR0k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p_0RWnJIPLQ:ueq90osjR0k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p_0RWnJIPLQ:ueq90osjR0k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p_0RWnJIPLQ:ueq90osjR0k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p_0RWnJIPLQ:ueq90osjR0k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4050503023473146304
title: Indian Govt Orders Organizations to Report Security Breaches Within 6 Hours to CERT-In
uri: Indian-Govt-Orders-Organizations-to-Report-Security-Breaches-Within-6
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4050503023473146304
content:
India's computer and emergency response team, CERT-In, on Thursday published new guidelines that require service providers, intermediaries, data centers, and government entities to compulsorily report cybersecurity incidents, including data breaches, within six hours.
"Any service provider, intermediary, data center, body corporate and Government organization shall mandatorily report cyber <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LlCbUjZ7IkM:db1uO62ibqA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LlCbUjZ7IkM:db1uO62ibqA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LlCbUjZ7IkM:db1uO62ibqA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LlCbUjZ7IkM:db1uO62ibqA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LlCbUjZ7IkM:db1uO62ibqA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LlCbUjZ7IkM:db1uO62ibqA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LlCbUjZ7IkM:db1uO62ibqA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LlCbUjZ7IkM:db1uO62ibqA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6485772886823931856
title: Microsoft Documents Over 200 Cyberattacks by Russia Against Ukraine
uri: Microsoft-Documents-Over-200-Cyberattacks-by-Russia-Against-Ukraine
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6485772886823931856
content:
At least six different Russia-aligned actors launched no less than 237 cyberattacks against Ukraine from February 23 to April 8, including 38 discrete destructive attacks that irrevocably destroyed files in hundreds of systems across dozens of organizations in the country.
"Collectively, the cyber and kinetic actions work to disrupt or degrade Ukrainian government and military functions and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hh-QhbsJfo0:gECE8K7yM3Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hh-QhbsJfo0:gECE8K7yM3Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hh-QhbsJfo0:gECE8K7yM3Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hh-QhbsJfo0:gECE8K7yM3Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hh-QhbsJfo0:gECE8K7yM3Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hh-QhbsJfo0:gECE8K7yM3Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hh-QhbsJfo0:gECE8K7yM3Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hh-QhbsJfo0:gECE8K7yM3Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5303534551452611631
title: Here's a New Tool That Scans Open-Source Repositories for Malicious Packages
uri: Here-s-a-New-Tool-That-Scans-Open-Source-Repositories-for-Malicious-Pa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5303534551452611631
content:
The Open Source Security Foundation (OpenSSF) has announced the initial prototype release of a new tool that's capable of carrying out dynamic analysis of all packages uploaded to popular open source repositories.
Called the Package Analysis project, the initiative aims to secure open-source packages by detecting and alerting users to any malicious behavior with the goal of bolstering the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8pFsYqefVMM:YoUjFHQQork:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8pFsYqefVMM:YoUjFHQQork:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8pFsYqefVMM:YoUjFHQQork:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8pFsYqefVMM:YoUjFHQQork:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8pFsYqefVMM:YoUjFHQQork:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8pFsYqefVMM:YoUjFHQQork:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8pFsYqefVMM:YoUjFHQQork:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8pFsYqefVMM:YoUjFHQQork:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6522039462071113961
title: Google Releases First Developer Preview of Privacy Sandbox on Android 13
uri: Google-Releases-First-Developer-Preview-of-Privacy-Sandbox-on-Android
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6522039462071113961
content:
Google has officially released the first developer preview for the Privacy Sandbox on Android 13, offering an "early look" at the SDK Runtime and Topics API to boost users' privacy online.
"The Privacy Sandbox on Android Developer Preview program will run over the course of 2022, with a beta release planned by the end of the year," the search giant said in an overview.
A "multi-year effort," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pjssgaOp09E:GWnTR4bWgbY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pjssgaOp09E:GWnTR4bWgbY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pjssgaOp09E:GWnTR4bWgbY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pjssgaOp09E:GWnTR4bWgbY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pjssgaOp09E:GWnTR4bWgbY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pjssgaOp09E:GWnTR4bWgbY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pjssgaOp09E:GWnTR4bWgbY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pjssgaOp09E:GWnTR4bWgbY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6045202138319279555
title: Russian Hackers Targeting Diplomatic Entities in Europe, Americas, and Asia
uri: Russian-Hackers-Targeting-Diplomatic-Entities-in-Europe-Americas-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6045202138319279555
content:
A Russian state-sponsored threat actor has been observed targeting diplomatic and government entities as part of a series of phishing campaigns commencing on January 17, 2022.
Threat intelligence and incident response firm Mandiant attributed the attacks to a hacking group tracked as APT29 (aka Cozy Bear), with some set of the activities associated with the crew assigned the moniker Nobelium (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FXZ5La0g2MQ:j0WzW2hmBCc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FXZ5La0g2MQ:j0WzW2hmBCc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FXZ5La0g2MQ:j0WzW2hmBCc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FXZ5La0g2MQ:j0WzW2hmBCc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FXZ5La0g2MQ:j0WzW2hmBCc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FXZ5La0g2MQ:j0WzW2hmBCc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FXZ5La0g2MQ:j0WzW2hmBCc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FXZ5La0g2MQ:j0WzW2hmBCc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4035133386845128382
title: Chinese "Override Panda" Hackers Resurface With New Espionage Attacks
uri: Chinese-Override-Panda-Hackers-Resurface-With-New-Espionage-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4035133386845128382
content:
A Chinese state-sponsored espionage group known as Override Panda has resurfaced in recent weeks with a new phishing attack with the goal of stealing sensitive information.
"The Chinese APT used a spear-phishing email to deliver a beacon of a Red Team framework known as 'Viper,'" Cluster25 said in a report published last week.
"The target of this attack is currently unknown but with high <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4EKdzQ0iV4:EiGklExeF7w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4EKdzQ0iV4:EiGklExeF7w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4EKdzQ0iV4:EiGklExeF7w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4EKdzQ0iV4:EiGklExeF7w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4EKdzQ0iV4:EiGklExeF7w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4EKdzQ0iV4:EiGklExeF7w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4EKdzQ0iV4:EiGklExeF7w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4EKdzQ0iV4:EiGklExeF7w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8634326254597826604
title: Which Hole to Plug First? Solving Chronic Vulnerability Patching Overload
uri: Which-Hole-to-Plug-First-Solving-Chronic-Vulnerability-Patching-Overl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8634326254597826604
content:
According to folklore, witches were able to sail in a sieve, a strainer with holes in the bottom. Unfortunately, witches don’t work in cybersecurity – where networks generally have so many vulnerabilities that they resemble sieves. 
For most of us, keeping the sieve of our networks afloat requires nightmarishly hard work and frequent compromises on which holes to plug first.
The reason? In 2010,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n_b3MBOb4jQ:phxEePFzbB0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n_b3MBOb4jQ:phxEePFzbB0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n_b3MBOb4jQ:phxEePFzbB0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n_b3MBOb4jQ:phxEePFzbB0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n_b3MBOb4jQ:phxEePFzbB0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n_b3MBOb4jQ:phxEePFzbB0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n_b3MBOb4jQ:phxEePFzbB0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n_b3MBOb4jQ:phxEePFzbB0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1874362164400252540
title: GitHub Says Recent Attack Involving Stolen OAuth Tokens Was "Highly Targeted"
uri: GitHub-Says-Recent-Attack-Involving-Stolen-OAuth-Tokens-Was-Highly-Ta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1874362164400252540
content:
Cloud-based code hosting platform GitHub described the recent attack campaign involving the abuse of OAuth access tokens issued to Heroku and Travis-CI as "highly targeted" in nature.
"This pattern of behavior suggests the attacker was only listing organizations in order to identify accounts to selectively target for listing and downloading private repositories," GitHub's Mike Hanley said in an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVptfT9lu4E:LbpHDFD7EFw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVptfT9lu4E:LbpHDFD7EFw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVptfT9lu4E:LbpHDFD7EFw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eVptfT9lu4E:LbpHDFD7EFw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVptfT9lu4E:LbpHDFD7EFw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eVptfT9lu4E:LbpHDFD7EFw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVptfT9lu4E:LbpHDFD7EFw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eVptfT9lu4E:LbpHDFD7EFw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9153943204571527225
title: AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection
uri: AvosLocker-Ransomware-Variant-Using-New-Trick-to-Disable-Antivirus-Pro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9153943204571527225
content:
Cybersecurity researchers have disclosed a new variant of the AvosLocker ransomware that disables antivirus solutions to evade detection after breaching target networks by taking advantage of unpatched security flaws. 
"This is the first sample we observed from the U.S. with the capability to disable a defense solution using a legitimate Avast Anti-Rootkit Driver file (asWarPot.sys)," Trend <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P3AlGnKkFHA:9VqXDRjso9Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P3AlGnKkFHA:9VqXDRjso9Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P3AlGnKkFHA:9VqXDRjso9Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P3AlGnKkFHA:9VqXDRjso9Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P3AlGnKkFHA:9VqXDRjso9Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P3AlGnKkFHA:9VqXDRjso9Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P3AlGnKkFHA:9VqXDRjso9Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P3AlGnKkFHA:9VqXDRjso9Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8889324237516381942
title: Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector
uri: Chinese-Hackers-Caught-Exploiting-Popular-Antivirus-Products-to-Target
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8889324237516381942
content:
A Chinese-aligned cyberespionage group has been observed striking the telecommunication sector in Central Asia with versions of malware such as ShadowPad and PlugX.
Cybersecurity firm SentinelOne tied the intrusions to an actor it tracks under the name "Moshen Dragon," with tactical overlaps between the collective and another threat group referred to as Nomad Panda (aka RedFoxtrot).
"PlugX and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RN9uq2CuN6I:bMu_TSOmcm4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RN9uq2CuN6I:bMu_TSOmcm4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RN9uq2CuN6I:bMu_TSOmcm4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RN9uq2CuN6I:bMu_TSOmcm4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RN9uq2CuN6I:bMu_TSOmcm4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RN9uq2CuN6I:bMu_TSOmcm4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RN9uq2CuN6I:bMu_TSOmcm4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RN9uq2CuN6I:bMu_TSOmcm4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-264434883740986615
title: Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices
uri: Unpatched-DNS-Related-Vulnerability-Affects-a-Wide-Range-of-IoT-Device
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/264434883740986615
content:
Cybersecurity researchers have disclosed an unpatched security vulnerability that could pose a serious risk to IoT products.
The issue, which was originally reported in September 2021, affects the Domain Name System (DNS) implementation of two popular C libraries called uClibc and uClibc-ng that are used for developing embedded Linux systems.
&lt;!--adsense--&gt;
uClibc is known to be used by major <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-Z5FrbT0cM:0lYhICMwKeQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-Z5FrbT0cM:0lYhICMwKeQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-Z5FrbT0cM:0lYhICMwKeQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-Z5FrbT0cM:0lYhICMwKeQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-Z5FrbT0cM:0lYhICMwKeQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-Z5FrbT0cM:0lYhICMwKeQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-Z5FrbT0cM:0lYhICMwKeQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-Z5FrbT0cM:0lYhICMwKeQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8772275828761964953
title: New Hacker Group Pursuing Corporate Employees Focused on Mergers and Acquisitions
uri: New-Hacker-Group-Pursuing-Corporate-Employees-Focused-on-Mergers-and-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8772275828761964953
content:
A newly discovered suspected espionage threat actor has been targeting employees focusing on mergers and acquisitions as well as large corporate transactions to facilitate bulk email collection from victim environments.
Mandiant is tracking the activity cluster under the uncategorized moniker UNC3524, citing a lack of evidence linking it to an existing group. However, some of the intrusions are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eN5_hb6CuT8:PzZ1WZVBZfc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eN5_hb6CuT8:PzZ1WZVBZfc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eN5_hb6CuT8:PzZ1WZVBZfc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eN5_hb6CuT8:PzZ1WZVBZfc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eN5_hb6CuT8:PzZ1WZVBZfc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eN5_hb6CuT8:PzZ1WZVBZfc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eN5_hb6CuT8:PzZ1WZVBZfc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eN5_hb6CuT8:PzZ1WZVBZfc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3085089055422998140
title: Experts Analyze Conti and Hive Ransomware Gangs Chats With Their Victims
uri: Experts-Analyze-Conti-and-Hive-Ransomware-Gangs-Chats-With-Their-Victi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3085089055422998140
content:
An analysis of four months of chat logs spanning more than 40 conversations between the operators of Conti and Hive ransomware and their victims has offered an insight into the groups' inner workings and their negotiation techniques.
In one exchange, the Conti Team is said to have significantly reduced the ransom demand from a staggering $50 million to $1 million, a 98% drop, suggesting a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RktbtjGCCHk:c7lU0V6oTbc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RktbtjGCCHk:c7lU0V6oTbc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RktbtjGCCHk:c7lU0V6oTbc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RktbtjGCCHk:c7lU0V6oTbc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RktbtjGCCHk:c7lU0V6oTbc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RktbtjGCCHk:c7lU0V6oTbc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RktbtjGCCHk:c7lU0V6oTbc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RktbtjGCCHk:c7lU0V6oTbc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2739271777826028590
title: Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches
uri: Critical-TLStorm-2-0-Bugs-Affect-Widely-Used-Aruba-and-Avaya-Network-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2739271777826028590
content:
Cybersecurity researchers have detailed as many as five severe security flaws in the implementation of TLS protocol in several models of Aruba and Avaya network switches that could be abused to gain remote access to enterprise networks and steal valuable information.
The findings follow the March disclosure of TLStorm, a set of three critical flaws in APC Smart-UPS devices that could permit an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i3Sf9InT9nU:RuvlFAikO1I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i3Sf9InT9nU:RuvlFAikO1I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i3Sf9InT9nU:RuvlFAikO1I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i3Sf9InT9nU:RuvlFAikO1I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i3Sf9InT9nU:RuvlFAikO1I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i3Sf9InT9nU:RuvlFAikO1I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i3Sf9InT9nU:RuvlFAikO1I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i3Sf9InT9nU:RuvlFAikO1I:F7zBnMyn0Lo" border="0"></img></a>
</div>


