# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-631361849882174917
title: [eBook] The Guide to Centralized Log Management for Lean IT Security Teams
uri: eBook-The-Guide-to-Centralized-Log-Management-for-Lean-IT-Security-T
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/631361849882174917
content:
One of the side effects of today’s cyber security landscape is the overwhelming volume of data security teams must aggregate and parse. Lean security teams don’t have it any easier, and the problem is compounded if they must do it manually. Data and log management are essential for organizations to gain real-time transparency and visibility into security events. 
XDR provider Cynet has offered <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HSypHq8jDo0:BDisVS1im0c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HSypHq8jDo0:BDisVS1im0c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HSypHq8jDo0:BDisVS1im0c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HSypHq8jDo0:BDisVS1im0c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HSypHq8jDo0:BDisVS1im0c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HSypHq8jDo0:BDisVS1im0c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HSypHq8jDo0:BDisVS1im0c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HSypHq8jDo0:BDisVS1im0c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1375476959669086316
title: Israeli Researcher Cracked Over 3500 Wi-Fi Networks in Tel Aviv City
uri: Israeli-Researcher-Cracked-Over-3500-Wi-Fi-Networks-in-Tel-Aviv-City
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1375476959669086316
content:
Over 70% of Wi-Fi networks from a sample size of 5,000 were hacked with "relative ease" in the Israeli city of Tel Aviv, highlighting how unsecure Wi-Fi passwords can become a gateway for serious threats to individuals, small businesses, and enterprises alike.
CyberArk security researcher Ido Hoorvitch, who used a Wi-Fi sniffing equipment costing about $50 to collect 5,000 network hashes for the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iz1n7dD2WhI:cH0g6BHMlqQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iz1n7dD2WhI:cH0g6BHMlqQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iz1n7dD2WhI:cH0g6BHMlqQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iz1n7dD2WhI:cH0g6BHMlqQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iz1n7dD2WhI:cH0g6BHMlqQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iz1n7dD2WhI:cH0g6BHMlqQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iz1n7dD2WhI:cH0g6BHMlqQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iz1n7dD2WhI:cH0g6BHMlqQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6472927849924391818
title: A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365
uri: A-Guide-to-Shift-Away-from-Legacy-Authentication-Protocols-in-Microsof
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6472927849924391818
content:
Microsoft 365 (M365), formerly called Office 365 (O365), is Microsoft's cloud strategy flagship product with major changes ahead, such as the deprecation of their legacy authentication protocols.
Often stored on or saved to the device, Basic Authentication protocols rely on sending usernames and passwords with every request, increasing the risk of attackers capturing users' credentials, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZTunxzJmw:kvpwKifiYxs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZTunxzJmw:kvpwKifiYxs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZTunxzJmw:kvpwKifiYxs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6AZTunxzJmw:kvpwKifiYxs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZTunxzJmw:kvpwKifiYxs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6AZTunxzJmw:kvpwKifiYxs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6AZTunxzJmw:kvpwKifiYxs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6AZTunxzJmw:kvpwKifiYxs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6515332051450536284
title: New Wslink Malware Loader Runs as a Server and Executes Modules in Memory
uri: New-Wslink-Malware-Loader-Runs-as-a-Server-and-Executes-Modules-in-Mem
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6515332051450536284
content:
Cybersecurity researchers on Wednesday took the wraps off a "simple yet remarkable" malware loader for malicious Windows binaries targeting Central Europe, North America and the Middle East.
Codenamed "Wslink" by ESET, this previously undocumented malware stands apart from the rest in that it runs as a server and executes received modules in memory. There are no specifics available on the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CSLKsRPB39g:mfwKuFKf04Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CSLKsRPB39g:mfwKuFKf04Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CSLKsRPB39g:mfwKuFKf04Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CSLKsRPB39g:mfwKuFKf04Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CSLKsRPB39g:mfwKuFKf04Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CSLKsRPB39g:mfwKuFKf04Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CSLKsRPB39g:mfwKuFKf04Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CSLKsRPB39g:mfwKuFKf04Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-798802806214715151
title: Malicious NPM Libraries Caught Installing Password Stealer and Ransomware
uri: Malicious-NPM-Libraries-Caught-Installing-Password-Stealer-and-Ransomw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/798802806214715151
content:
Malicious actors have yet again published two more typosquatted libraries to the official NPM repository that mimic a legitimate package from Roblox, the game company, with the goal of distributing stealing credentials, installing remote access trojans, and infecting the compromised systems with ransomware.
The bogus packages — named "noblox.js-proxy" and "noblox.js-proxies" — were found to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q0WhleZjkjo:VYei0-GbkMk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q0WhleZjkjo:VYei0-GbkMk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q0WhleZjkjo:VYei0-GbkMk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q0WhleZjkjo:VYei0-GbkMk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q0WhleZjkjo:VYei0-GbkMk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q0WhleZjkjo:VYei0-GbkMk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q0WhleZjkjo:VYei0-GbkMk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q0WhleZjkjo:VYei0-GbkMk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2505272114078702737
title: Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs
uri: Google-Releases-Urgent-Chrome-Update-to-Patch-2-Actively-Exploited-0-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2505272114078702737
content:
Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild.
Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate to insufficient validation of untrusted input in a feature called Intents as well as a case of inappropriate implementation in V8 JavaScript and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUJIpAR_g4E:3JYyyBSVkSc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUJIpAR_g4E:3JYyyBSVkSc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUJIpAR_g4E:3JYyyBSVkSc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PUJIpAR_g4E:3JYyyBSVkSc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUJIpAR_g4E:3JYyyBSVkSc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PUJIpAR_g4E:3JYyyBSVkSc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUJIpAR_g4E:3JYyyBSVkSc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PUJIpAR_g4E:3JYyyBSVkSc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8290632636471798078
title: Russian TrickBot Gang Hacker Extradited to U.S. Charged with Cybercrime
uri: Russian-TrickBot-Gang-Hacker-Extradited-to-U-S-Charged-with-Cybercrim
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8290632636471798078
content:
A Russian national, who was arrested in South Korea last month and extradited to the U.S. on October 20, appeared in a federal court in the state of Ohio on Thursday to face charges for his alleged role as a member of the infamous TrickBot group.
Court documents showed that Vladimir Dunaev, 28, along with other members of the transnational, cybercriminal organization, stole money and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MPU_pAr6zKQ:s8HG7nMl2Io:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MPU_pAr6zKQ:s8HG7nMl2Io:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MPU_pAr6zKQ:s8HG7nMl2Io:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MPU_pAr6zKQ:s8HG7nMl2Io:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MPU_pAr6zKQ:s8HG7nMl2Io:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MPU_pAr6zKQ:s8HG7nMl2Io:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MPU_pAr6zKQ:s8HG7nMl2Io:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MPU_pAr6zKQ:s8HG7nMl2Io:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3975848593558652306
title: New 'Shrootless' Bug Could Let Attackers Install Rootkit on macOS Systems
uri: New-Shrootless-Bug-Could-Let-Attackers-Install-Rootkit-on-macOS-Syst
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3975848593558652306
content:
Microsoft on Thursday disclosed details of a new vulnerability that could allow an attacker to bypass security restrictions in macOS and take complete control of the device to perform arbitrary operations on the device without getting flagged by traditional security solutions.
Dubbed "Shrootless" and tracked as CVE-2021-30892, the "vulnerability lies in how Apple-signed packages with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cr3XqOeuXxQ:upuU5PRRaR4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cr3XqOeuXxQ:upuU5PRRaR4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cr3XqOeuXxQ:upuU5PRRaR4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cr3XqOeuXxQ:upuU5PRRaR4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cr3XqOeuXxQ:upuU5PRRaR4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cr3XqOeuXxQ:upuU5PRRaR4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cr3XqOeuXxQ:upuU5PRRaR4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cr3XqOeuXxQ:upuU5PRRaR4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6748411462623450851
title: Winter is Coming for CentOS 8
uri: Winter-is-Coming-for-CentOS-8
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6748411462623450851
content:
Winter is Coming for CentOS 8—but here is how you can enjoy your holidays after all.
The server environment is complex and if you're managing thousands of Linux servers, the last thing you want is for an operating system vendor to do something completely unexpected.
That is exactly what Red Hat, the parent company of the CentOS Project, did when it suddenly announced a curtailment of support for<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4pSKM7sd_18:itfNfEr7gpk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4pSKM7sd_18:itfNfEr7gpk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4pSKM7sd_18:itfNfEr7gpk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4pSKM7sd_18:itfNfEr7gpk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4pSKM7sd_18:itfNfEr7gpk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4pSKM7sd_18:itfNfEr7gpk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4pSKM7sd_18:itfNfEr7gpk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4pSKM7sd_18:itfNfEr7gpk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-699360029213313864
title: This New Android Malware Can Gain Root Access to Your Smartphones
uri: This-New-Android-Malware-Can-Gain-Root-Access-to-Your-Smartphones
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/699360029213313864
content:
An unidentified threat actor has been linked to a new Android malware strain that features the ability to root smartphones and take complete control over infected smartphones while simultaneously taking steps to evade detection.
The malware has been named "AbstractEmu" owing to its use of code abstraction and anti-emulation checks to avoid running while under analysis. Notably, the global mobile<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7B8xqw5bxhY:v3JWchhftBY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7B8xqw5bxhY:v3JWchhftBY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7B8xqw5bxhY:v3JWchhftBY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7B8xqw5bxhY:v3JWchhftBY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7B8xqw5bxhY:v3JWchhftBY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7B8xqw5bxhY:v3JWchhftBY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7B8xqw5bxhY:v3JWchhftBY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7B8xqw5bxhY:v3JWchhftBY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5601078712419424758
title: Police Arrest Suspected Ransomware Hackers Behind 1,800 Attacks Worldwide
uri: Police-Arrest-Suspected-Ransomware-Hackers-Behind-1-800-Attacks-Worldw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5601078712419424758
content:
12 people have been detained as part of an international law enforcement operation for orchestrating ransomware attacks on critical infrastructure and large organizations that hit over 1,800 victims across 71 countries since 2019, marking the latest action against cybercrime groups.
The arrests were made earlier this week on October 26 in Ukraine and Switzerland, resulting in the seizure of cash<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RhiyfN1lX6w:uXaaxI9MKp8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RhiyfN1lX6w:uXaaxI9MKp8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RhiyfN1lX6w:uXaaxI9MKp8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RhiyfN1lX6w:uXaaxI9MKp8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RhiyfN1lX6w:uXaaxI9MKp8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RhiyfN1lX6w:uXaaxI9MKp8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RhiyfN1lX6w:uXaaxI9MKp8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RhiyfN1lX6w:uXaaxI9MKp8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8293265913820589079
title: Researchers Uncover 'Pink' Botnet Malware That Infected Over 1.6 Million Devices
uri: Researchers-Uncover-Pink-Botnet-Malware-That-Infected-Over-1-6-Milli
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8293265913820589079
content:
Cybersecurity researchers disclosed details of what they say is the "largest botnet" observed in the wild in the last six years, infecting over 1.6 million devices primarily located in China, with the goal of launching distributed denial-of-service (DDoS) attacks and inserting advertisements into HTTP websites visited by unsuspecting users.
Qihoo 360's Netlab security team dubbed the botnet "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mh12hfQPriU:e3m42dWVSyg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mh12hfQPriU:e3m42dWVSyg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mh12hfQPriU:e3m42dWVSyg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mh12hfQPriU:e3m42dWVSyg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mh12hfQPriU:e3m42dWVSyg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mh12hfQPriU:e3m42dWVSyg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mh12hfQPriU:e3m42dWVSyg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mh12hfQPriU:e3m42dWVSyg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1496790421846784363
title: Securing SaaS Apps — CASB vs. SSPM
uri: Securing-SaaS-Apps-CASB-vs-SSPM
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1496790421846784363
content:
There is often confusion between Cloud Access Security Brokers (CASB) and SaaS Security Posture Management (SSPM) solutions, as both are designed to address security issues within SaaS applications. CASBs protect sensitive data by implementing multiple security policy enforcements to safeguard critical data. For identifying and classifying sensitive information, like Personally Identifiable <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lmneaYMFPaM:eV27tFd_4uQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lmneaYMFPaM:eV27tFd_4uQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lmneaYMFPaM:eV27tFd_4uQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lmneaYMFPaM:eV27tFd_4uQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lmneaYMFPaM:eV27tFd_4uQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lmneaYMFPaM:eV27tFd_4uQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lmneaYMFPaM:eV27tFd_4uQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lmneaYMFPaM:eV27tFd_4uQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5427942151499470024
title: New 'Trojan Source' Technique Lets Hackers Hide Vulnerabilities in Source Code
uri: New-Trojan-Source-Technique-Lets-Hackers-Hide-Vulnerabilities-in-Sou
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5427942151499470024
content:
A novel class of vulnerabilities could be leveraged by threat actors to inject visually deceptive malware in a way that's semantically permissible but alters the logic defined by the source code, effectively opening the door to more first-party and supply chain risks.
Dubbed "Trojan Source attacks," the technique "exploits subtleties in text-encoding standards such as Unicode to produce source <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_WKugqXMP7s:EsDPad7WvY4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_WKugqXMP7s:EsDPad7WvY4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_WKugqXMP7s:EsDPad7WvY4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_WKugqXMP7s:EsDPad7WvY4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_WKugqXMP7s:EsDPad7WvY4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_WKugqXMP7s:EsDPad7WvY4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_WKugqXMP7s:EsDPad7WvY4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_WKugqXMP7s:EsDPad7WvY4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6997670887397639030
title: Critical Flaws Uncovered in Pentaho Business Analytics Software
uri: Critical-Flaws-Uncovered-in-Pentaho-Business-Analytics-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6997670887397639030
content:
Multiple vulnerabilities have been disclosed in Hitachi Vantara's Pentaho Business Analytics software that could be abused by malicious actors to upload arbitrary data files and even execute arbitrary code on the underlying host system of the application.
The security weaknesses were reported by researchers Alberto Favero from German cybersecurity firm Hawsec and Altion Malka from Census Labs <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c4O4wZ2y13A:H3W9E05s05I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c4O4wZ2y13A:H3W9E05s05I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c4O4wZ2y13A:H3W9E05s05I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c4O4wZ2y13A:H3W9E05s05I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c4O4wZ2y13A:H3W9E05s05I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c4O4wZ2y13A:H3W9E05s05I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c4O4wZ2y13A:H3W9E05s05I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c4O4wZ2y13A:H3W9E05s05I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9189653795894341573
title: Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild
uri: Alert-Hackers-Exploiting-GitLab-Unauthenticated-RCE-Flaw-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9189653795894341573
content:
A now-patched critical remote code execution (RCE) vulnerability in GitLab's web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to attacks.
Tracked as CVE-2021-22205, the issue relates to an improper validation of user-provided images that results in arbitrary code execution. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YfdGQJ54bZw:yiXULCYGh8k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YfdGQJ54bZw:yiXULCYGh8k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YfdGQJ54bZw:yiXULCYGh8k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YfdGQJ54bZw:yiXULCYGh8k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YfdGQJ54bZw:yiXULCYGh8k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YfdGQJ54bZw:yiXULCYGh8k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YfdGQJ54bZw:yiXULCYGh8k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YfdGQJ54bZw:yiXULCYGh8k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4794694105773120507
title: Google to Pay Hackers $31,337 for Exploiting Patched Linux Kernel Flaws
uri: Google-to-Pay-Hackers-31-337-for-Exploiting-Patched-Linux-Kernel-Flaw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4794694105773120507
content:
Google on Monday announced that it will pay security researchers to find exploits using vulnerabilities, previously remediated or otherwise, over the next three months as part of a new bug bounty program to improve the security of the Linux kernel.
To that end, the company is expected to issue rewards worth $31,337 for exploiting privilege escalation in a lab environment for each patched <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxRslrC_hSQ:TibpRA2UkdA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxRslrC_hSQ:TibpRA2UkdA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxRslrC_hSQ:TibpRA2UkdA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NxRslrC_hSQ:TibpRA2UkdA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxRslrC_hSQ:TibpRA2UkdA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NxRslrC_hSQ:TibpRA2UkdA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxRslrC_hSQ:TibpRA2UkdA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NxRslrC_hSQ:TibpRA2UkdA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1371633946997205289
title: Facebook to Shut Down Facial Recognition System and Delete Billions of Records
uri: Facebook-to-Shut-Down-Facial-Recognition-System-and-Delete-Billions-of
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1371633946997205289
content:
Facebook's newly-rebranded parent company Meta on Tuesday announced plans to discontinue its decade-old "Face Recognition" system and delete a massive trove of more than a billion users' facial recognition templates as part of a wider initiative to limit the use of the technology across its products.
The Menlo Park tech giant described the about-face as "one of the largest shifts in facial <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uIwlGh64JAk:vBfv9ihfIC0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uIwlGh64JAk:vBfv9ihfIC0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uIwlGh64JAk:vBfv9ihfIC0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uIwlGh64JAk:vBfv9ihfIC0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uIwlGh64JAk:vBfv9ihfIC0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uIwlGh64JAk:vBfv9ihfIC0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uIwlGh64JAk:vBfv9ihfIC0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uIwlGh64JAk:vBfv9ihfIC0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6009789942223599246
title: Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks
uri: Google-Warns-of-New-Android-0-Day-Vulnerability-Under-Active-Targeted
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6009789942223599246
content:
Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively exploited in the wild in limited, targeted attacks.
Tracked as CVE-2021-1048, the zero-day bug is described as a use-after-free vulnerability in the kernel that can be exploited for local privilege escalation. Use-after-free issues are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=It85kq0fvT8:9Ps_kBKhDZU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=It85kq0fvT8:9Ps_kBKhDZU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=It85kq0fvT8:9Ps_kBKhDZU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=It85kq0fvT8:9Ps_kBKhDZU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=It85kq0fvT8:9Ps_kBKhDZU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=It85kq0fvT8:9Ps_kBKhDZU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=It85kq0fvT8:9Ps_kBKhDZU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=It85kq0fvT8:9Ps_kBKhDZU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4512716729904157003
title: BlackMatter Ransomware Reportedly Shutting Down; Latest Analysis Released
uri: BlackMatter-Ransomware-Reportedly-Shutting-Down-Latest-Analysis-Relea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4512716729904157003
content:
An analysis of new samples of BlackMatter ransomware for Windows and Linux has revealed the extent to which the operators have continually added new features and encryption capabilities in successive iterations over a three-month period.
No fewer than 10 Windows and two Linux versions of the ransomware have been observed in the wild to date, Group-IB threat researcher Andrei Zhdanov said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5UvtykUeXgE:Mfrk9z1BY5A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5UvtykUeXgE:Mfrk9z1BY5A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5UvtykUeXgE:Mfrk9z1BY5A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5UvtykUeXgE:Mfrk9z1BY5A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5UvtykUeXgE:Mfrk9z1BY5A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5UvtykUeXgE:Mfrk9z1BY5A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5UvtykUeXgE:Mfrk9z1BY5A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5UvtykUeXgE:Mfrk9z1BY5A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1662472778652944098
title: Product Overview - Cynet Centralized Log Management
uri: Product-Overview-Cynet-Centralized-Log-Management
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1662472778652944098
content:
For most organizations today, the logs produced by their security tools and environments provide a mixed bag. On the one hand, they can be a trove of valuable data on security breaches, vulnerabilities, attack patterns, and general security insights.
On the other, organizations don’t have the right means to manage the massive scale of logs and data produced to derive any value from it. 
Log <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dlePv6kq1-8:eTdJe-Axxro:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dlePv6kq1-8:eTdJe-Axxro:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dlePv6kq1-8:eTdJe-Axxro:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dlePv6kq1-8:eTdJe-Axxro:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dlePv6kq1-8:eTdJe-Axxro:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dlePv6kq1-8:eTdJe-Axxro:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dlePv6kq1-8:eTdJe-Axxro:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dlePv6kq1-8:eTdJe-Axxro:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4815535182154708216
title: Mekotio Banking Trojan Resurfaces with New Attacking and Stealth Techniques
uri: Mekotio-Banking-Trojan-Resurfaces-with-New-Attacking-and-Stealth-Techn
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4815535182154708216
content:
The operators behind the Mekotio banking trojan have resurfaced with a shift in its infection flow so as to stay under the radar and evade security software, while staging nearly 100 attacks over the last three months.
"One of the main characteristics […] is the modular attack which gives the attackers the ability to change only a small part of the whole in order to avoid detection," researchers<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aPSQl58pHQs:LeZopPuuaQo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aPSQl58pHQs:LeZopPuuaQo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aPSQl58pHQs:LeZopPuuaQo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aPSQl58pHQs:LeZopPuuaQo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aPSQl58pHQs:LeZopPuuaQo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aPSQl58pHQs:LeZopPuuaQo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aPSQl58pHQs:LeZopPuuaQo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aPSQl58pHQs:LeZopPuuaQo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8531792629570766620
title: US Sanctions Pegasus-maker NSO Group and 3 Others For Selling Spyware
uri: US-Sanctions-Pegasus-maker-NSO-Group-and-3-Others-For-Selling-Spyware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8531792629570766620
content:
The U.S. Commerce Department on Wednesday added four companies, including Israel-based spyware companies NSO Group and Candiru, to a list of entities engaging in "malicious cyber activities."
The agency said the two companies were added to the list based on evidence that "these entities developed and supplied spyware to foreign governments that used these tools to maliciously target government <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qXuytnB6xZk:9DJ61PpmiuI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qXuytnB6xZk:9DJ61PpmiuI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qXuytnB6xZk:9DJ61PpmiuI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qXuytnB6xZk:9DJ61PpmiuI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qXuytnB6xZk:9DJ61PpmiuI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qXuytnB6xZk:9DJ61PpmiuI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qXuytnB6xZk:9DJ61PpmiuI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qXuytnB6xZk:9DJ61PpmiuI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8062126085232948761
title: Critical RCE Vulnerability Reported in Linux Kernel's TIPC Module
uri: Critical-RCE-Vulnerability-Reported-in-Linux-Kernel-s-TIPC-Module
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8062126085232948761
content:
Cybersecurity researchers have disclosed a security flaw in the Linux Kernel's Transparent Inter Process Communication (TIPC) module that could potentially be leveraged both locally as well as remotely to execute arbitrary code within the kernel and take control of vulnerable machines.
The heap overflow vulnerability "can be exploited locally or remotely within a network to gain kernel <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xaheEC-hk_k:wyhTHsZkuHI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xaheEC-hk_k:wyhTHsZkuHI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xaheEC-hk_k:wyhTHsZkuHI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xaheEC-hk_k:wyhTHsZkuHI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xaheEC-hk_k:wyhTHsZkuHI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xaheEC-hk_k:wyhTHsZkuHI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xaheEC-hk_k:wyhTHsZkuHI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xaheEC-hk_k:wyhTHsZkuHI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6084704341234719059
title: Our journey to API security at Raiffeisen Bank International
uri: Our-journey-to-API-security-at-Raiffeisen-Bank-International
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6084704341234719059
content:
This article was written by Peter Gerdenitsch, Group CISO at Raiffeisen Bank International, and is based on a presentation given during Imvision's Executive Education Program, a series of events focused on how enterprises are taking charge of the API security lifecycle.
Launching the "Security in Agile" program
Headquartered in Vienna, Raiffeisen Bank International (RBI) operates across 14 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FVy6fgW6bO8:_2gsSO-9Dxs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FVy6fgW6bO8:_2gsSO-9Dxs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FVy6fgW6bO8:_2gsSO-9Dxs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FVy6fgW6bO8:_2gsSO-9Dxs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FVy6fgW6bO8:_2gsSO-9Dxs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FVy6fgW6bO8:_2gsSO-9Dxs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FVy6fgW6bO8:_2gsSO-9Dxs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FVy6fgW6bO8:_2gsSO-9Dxs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7126180973075843816
title: Hardcoded SSH Key in Cisco Policy Suite Lets Remote Hackers Gain Root Access
uri: Hardcoded-SSH-Key-in-Cisco-Policy-Suite-Lets-Remote-Hackers-Gain-Root
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7126180973075843816
content:
Cisco Systems has released security updates to address vulnerabilities in multiple Cisco products that could be exploited by an attacker to log in as a root user and take control of vulnerable systems.
Tracked as CVE-2021-40119, the vulnerability has been rated 9.8 in severity out of a maximum of 10 on the CVSS scoring system and stems from a weakness in the SSH authentication mechanism of Cisco<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gt1ZmsjQVeQ:tgzUb9IqT9E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gt1ZmsjQVeQ:tgzUb9IqT9E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gt1ZmsjQVeQ:tgzUb9IqT9E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gt1ZmsjQVeQ:tgzUb9IqT9E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gt1ZmsjQVeQ:tgzUb9IqT9E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gt1ZmsjQVeQ:tgzUb9IqT9E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gt1ZmsjQVeQ:tgzUb9IqT9E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gt1ZmsjQVeQ:tgzUb9IqT9E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5069232090207208729
title: U.S. Federal Agencies Ordered to Patch Hundreds of Actively Exploited Flaws
uri: U-S-Federal-Agencies-Ordered-to-Patch-Hundreds-of-Actively-Exploited
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5069232090207208729
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published a catalog of vulnerabilities, including from Apple, Cisco, Microsoft, and Google, that have known exploits and are being actively exploited by malicious cyber actors, in addition to requiring federal agencies to prioritize applying patches for those security flaws within "aggressive" timeframes.
&lt;!--adsense--&gt;
"These <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HC1NIHDqocg:gFEVTTU-_h8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HC1NIHDqocg:gFEVTTU-_h8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HC1NIHDqocg:gFEVTTU-_h8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HC1NIHDqocg:gFEVTTU-_h8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HC1NIHDqocg:gFEVTTU-_h8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HC1NIHDqocg:gFEVTTU-_h8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HC1NIHDqocg:gFEVTTU-_h8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HC1NIHDqocg:gFEVTTU-_h8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6191020658210430536
title: U.S. Offers $10 Million Reward for Information on DarkSide Ransomware Group
uri: U-S-Offers-10-Million-Reward-for-Information-on-DarkSide-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6191020658210430536
content:
The U.S. government on Thursday announced a $10 million reward for information that may lead to the identification or location of key individuals who hold leadership positions in the DarkSide ransomware group or any of its rebrands.
On top of that, the State Department is offering bounties of up to $5 million for intel and tip-offs that could result in the arrest and/or conviction in any country<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9h4TBkmoCOc:Arxw05tHwZc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9h4TBkmoCOc:Arxw05tHwZc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9h4TBkmoCOc:Arxw05tHwZc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9h4TBkmoCOc:Arxw05tHwZc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9h4TBkmoCOc:Arxw05tHwZc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9h4TBkmoCOc:Arxw05tHwZc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9h4TBkmoCOc:Arxw05tHwZc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9h4TBkmoCOc:Arxw05tHwZc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4875510089107830283
title: Ukraine Identifies Russian FSB Officers Hacking As Gamaredon Group
uri: Ukraine-Identifies-Russian-FSB-Officers-Hacking-As-Gamaredon-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4875510089107830283
content:
Ukraine's premier law enforcement and counterintelligence agency on Thursday disclosed the real identities of five individuals allegedly involved in cyberattacks attributed to a cyber-espionage group named Gamaredon, linking the members to Russia's Federal Security Service (FSB).
Calling the hacker group "an FSB special project, which specifically targeted Ukraine," the Security Service of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XkpOsQBKGWM:jMuYMFzwnpA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XkpOsQBKGWM:jMuYMFzwnpA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XkpOsQBKGWM:jMuYMFzwnpA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XkpOsQBKGWM:jMuYMFzwnpA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XkpOsQBKGWM:jMuYMFzwnpA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XkpOsQBKGWM:jMuYMFzwnpA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XkpOsQBKGWM:jMuYMFzwnpA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XkpOsQBKGWM:jMuYMFzwnpA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8711655166041928171
title: Two NPM Packages With 22 Million Weekly Downloads Found Backdoored
uri: Two-NPM-Packages-With-22-Million-Weekly-Downloads-Found-Backdoored
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8711655166041928171
content:
In what's yet another instance of supply chain attack targeting open-source software repositories, two popular NPM packages with cumulative weekly downloads of nearly 22 million were found to be compromised with malicious code by gaining unauthorized access to the respective developer's accounts.
The two libraries in question are "coa," a parser for command-line options, and "rc," a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7LD7Mw15KQM:dasCaos5zP4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7LD7Mw15KQM:dasCaos5zP4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7LD7Mw15KQM:dasCaos5zP4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7LD7Mw15KQM:dasCaos5zP4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7LD7Mw15KQM:dasCaos5zP4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7LD7Mw15KQM:dasCaos5zP4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7LD7Mw15KQM:dasCaos5zP4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7LD7Mw15KQM:dasCaos5zP4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5161366789209613319
title: Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit
uri: Experts-Detail-Malicious-Code-Dropped-Using-ManageEngine-ADSelfService
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5161366789209613319
content:
At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on (SSO) solution.
The spying campaign, which was observed starting September 22, 2021, involved the threat actor taking advantage of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=06uL_WvRjj0:97Tw18yAAJc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=06uL_WvRjj0:97Tw18yAAJc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=06uL_WvRjj0:97Tw18yAAJc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=06uL_WvRjj0:97Tw18yAAJc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=06uL_WvRjj0:97Tw18yAAJc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=06uL_WvRjj0:97Tw18yAAJc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=06uL_WvRjj0:97Tw18yAAJc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=06uL_WvRjj0:97Tw18yAAJc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1478443695412976305
title: BlackBerry Uncovers Initial Access Broker Linked to 3 Distinct Hacker Groups
uri: BlackBerry-Uncovers-Initial-Access-Broker-Linked-to-3-Distinct-Hacker
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1478443695412976305
content:
A previously undocumented initial access broker has been unmasked as providing entry points to three different threat actors for mounting intrusions that range from financially motivated ransomware attacks to phishing campaigns.
BlackBerry's research and intelligence team dubbed the entity "Zebra2104," with the group responsible for offering a means of a digital approach to ransomware syndicates<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZwCF24m6OzA:_LBF602K48w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZwCF24m6OzA:_LBF602K48w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZwCF24m6OzA:_LBF602K48w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZwCF24m6OzA:_LBF602K48w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZwCF24m6OzA:_LBF602K48w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZwCF24m6OzA:_LBF602K48w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZwCF24m6OzA:_LBF602K48w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZwCF24m6OzA:_LBF602K48w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3687058562328685228
title: Types of Penetration Testing
uri: Types-of-Penetration-Testing
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3687058562328685228
content:
If you are thinking about performing a penetration test on your organization, you might be interested in learning about the different types of tests available. With that knowledge, you'll be better equipped to define the scope for your project, hire the right expert and, ultimately, achieve your security objectives.
What is penetration testing?
Penetration testing, commonly referred to as "pen <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVDGj88iYls:Qhu42wZTnkU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVDGj88iYls:Qhu42wZTnkU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVDGj88iYls:Qhu42wZTnkU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fVDGj88iYls:Qhu42wZTnkU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVDGj88iYls:Qhu42wZTnkU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fVDGj88iYls:Qhu42wZTnkU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVDGj88iYls:Qhu42wZTnkU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fVDGj88iYls:Qhu42wZTnkU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8087563271369052492
title: Critical Flaws in Philips TASY EMR Could Expose Patient Data
uri: Critical-Flaws-in-Philips-TASY-EMR-Could-Expose-Patient-Data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8087563271369052492
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of critical vulnerabilities affecting Philips Tasy electronic medical records (EMR) system that could be exploited by remote threat actors to extract sensitive patient data from patient databases.
"Successful exploitation of these vulnerabilities could result in patients' confidential data being exposed or extracted from<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HCq5CP-R_zU:Zhe-qofZVgE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HCq5CP-R_zU:Zhe-qofZVgE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HCq5CP-R_zU:Zhe-qofZVgE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HCq5CP-R_zU:Zhe-qofZVgE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HCq5CP-R_zU:Zhe-qofZVgE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HCq5CP-R_zU:Zhe-qofZVgE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HCq5CP-R_zU:Zhe-qofZVgE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HCq5CP-R_zU:Zhe-qofZVgE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3743547391183476987
title: Suspected REvil Ransomware Affiliates Arrested in Global Takedown
uri: Suspected-REvil-Ransomware-Affiliates-Arrested-in-Global-Takedown
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3743547391183476987
content:
Romanian law enforcement authorities have announced the arrest of two individuals for their roles as affiliates of the REvil ransomware family, dealing a severe blow to one of the most prolific cybercrime gangs in history.
The suspects are believed to have orchestrated more than 5,000 ransomware attacks and extorted close to $600,000 from victims, according to Europol. The arrests, which <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WT39bdBxIbY:jpGpj2ldrMo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WT39bdBxIbY:jpGpj2ldrMo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WT39bdBxIbY:jpGpj2ldrMo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WT39bdBxIbY:jpGpj2ldrMo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WT39bdBxIbY:jpGpj2ldrMo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WT39bdBxIbY:jpGpj2ldrMo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WT39bdBxIbY:jpGpj2ldrMo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WT39bdBxIbY:jpGpj2ldrMo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2920268969322608303
title: U.S. Charges Ukrainian Hacker for Kaseya Attack; Seizes $6 Million from REvil Gang
uri: U-S-Charges-Ukrainian-Hacker-for-Kaseya-Attack-Seizes-6-Million-fro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2920268969322608303
content:
The U.S. government on Monday charged a Ukrainian suspect, arrested in Poland last month, with deploying REvil ransomware to target multiple businesses and government entities in the country, including perpetrating the attack against software company Kaseya, marking the latest action to crack down on the cybercrime group and curb further attacks.
According to unsealed court documents, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=utnVQoewqYk:Kgc3lzukEJI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=utnVQoewqYk:Kgc3lzukEJI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=utnVQoewqYk:Kgc3lzukEJI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=utnVQoewqYk:Kgc3lzukEJI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=utnVQoewqYk:Kgc3lzukEJI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=utnVQoewqYk:Kgc3lzukEJI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=utnVQoewqYk:Kgc3lzukEJI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=utnVQoewqYk:Kgc3lzukEJI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6973523397388154455
title: Robinhood Trading App Suffers Data Breach Exposing 7 Million Users' Information
uri: Robinhood-Trading-App-Suffers-Data-Breach-Exposing-7-Million-Users-In
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6973523397388154455
content:
Robinhood on Monday disclosed a security breach affecting approximately 7 million customers, roughly a third of its user base, that resulted in unauthorized access of personal information by an unidentified threat actor.
The commission-free stock trading and investing platform said the incident happened "late in the evening of November 3," adding it's in the process of notifying affected users.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7HmPoF09t-A:k58iQaGYbyU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7HmPoF09t-A:k58iQaGYbyU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7HmPoF09t-A:k58iQaGYbyU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7HmPoF09t-A:k58iQaGYbyU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7HmPoF09t-A:k58iQaGYbyU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7HmPoF09t-A:k58iQaGYbyU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7HmPoF09t-A:k58iQaGYbyU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7HmPoF09t-A:k58iQaGYbyU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5011123650514366456
title: Unique Challenges to Cyber-Security in Healthcare and How to Address Them
uri: Unique-Challenges-to-Cyber-Security-in-Healthcare-and-How-to-Address-T
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5011123650514366456
content:
No business is out of danger of cyberattacks today. However, specific industries are particularly at risk and a favorite of attackers. For years, the healthcare industry has taken the brunt of ransomware attacks, data breaches, and other cyberattacks.
Why is the healthcare industry particularly at risk for a cyberattack? What are the unique challenges to cybersecurity in healthcare, and how can <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ozGwdyeLcD0:-ianBOPSoGE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ozGwdyeLcD0:-ianBOPSoGE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ozGwdyeLcD0:-ianBOPSoGE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ozGwdyeLcD0:-ianBOPSoGE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ozGwdyeLcD0:-ianBOPSoGE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ozGwdyeLcD0:-ianBOPSoGE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ozGwdyeLcD0:-ianBOPSoGE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ozGwdyeLcD0:-ianBOPSoGE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3701116736669956846
title: 14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices
uri: 14-New-Security-Flaws-Found-in-BusyBox-Linux-Utility-for-Embedded-Devi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3701116736669956846
content:
Cybersecurity researchers on Tuesday disclosed 14 critical vulnerabilities in the BusyBox Linux utility that could be exploited to result in a denial-of-service (DoS) condition and, in select cases, even lead to information leaks and remote code execution.
The security weaknesses, tracked from CVE-2021-42373 through CVE-2021-42386, affect multiple versions of the tool ranging from 1.16-1.33.1, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiKHXIGSOpg:Pb6RZZ1rRjI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiKHXIGSOpg:Pb6RZZ1rRjI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiKHXIGSOpg:Pb6RZZ1rRjI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OiKHXIGSOpg:Pb6RZZ1rRjI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiKHXIGSOpg:Pb6RZZ1rRjI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OiKHXIGSOpg:Pb6RZZ1rRjI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OiKHXIGSOpg:Pb6RZZ1rRjI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OiKHXIGSOpg:Pb6RZZ1rRjI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6130661921049957902
title: Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs
uri: Microsoft-Issues-Patches-for-Actively-Exploited-Excel-Exchange-Server
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6130661921049957902
content:
Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively exploited zero-day flaws in Excel and Exchange Server that could be abused to take control of an affected system.
Of the 55 glitches, six are rated Critical and 49 are rated as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ut2n-r-ZCAg:0XGbBOgD5lw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ut2n-r-ZCAg:0XGbBOgD5lw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ut2n-r-ZCAg:0XGbBOgD5lw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ut2n-r-ZCAg:0XGbBOgD5lw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ut2n-r-ZCAg:0XGbBOgD5lw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ut2n-r-ZCAg:0XGbBOgD5lw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ut2n-r-ZCAg:0XGbBOgD5lw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ut2n-r-ZCAg:0XGbBOgD5lw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2456435522980346008
title: 13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment
uri: 13-New-Flaws-in-Siemens-Nucleus-TCP-IP-Stack-Impact-Safety-Critical-Eq
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2456435522980346008
content:
As many as 13 security vulnerabilities have been discovered in the Nucleus TCP/IP stack, a software library now maintained by Siemens and used in three billion operational technology and IoT devices that could allow for remote code execution, denial-of-service (DoS), and information leak.
Collectively called "NUCLEUS:13," successful attacks abusing the flaws can "result in devices going offline <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qoh1OmjkkEU:GKbnGce8QVc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qoh1OmjkkEU:GKbnGce8QVc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qoh1OmjkkEU:GKbnGce8QVc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Qoh1OmjkkEU:GKbnGce8QVc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qoh1OmjkkEU:GKbnGce8QVc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Qoh1OmjkkEU:GKbnGce8QVc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qoh1OmjkkEU:GKbnGce8QVc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Qoh1OmjkkEU:GKbnGce8QVc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8062643300231655301
title: Researchers Discover PhoneSpy Malware Spying on South Korean Citizens
uri: Researchers-Discover-PhoneSpy-Malware-Spying-on-South-Korean-Citizens
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8062643300231655301
content:
An ongoing mobile spyware campaign has been uncovered snooping on South Korean residents using a family of 23 malicious Android apps to siphon sensitive information and gain remote control of the devices.
"With more than a thousand South Korean victims, the malicious group behind this invasive campaign has had access to all the data, communications, and services on their devices," Zimperium <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a1ks9rpwlqM:XTLIjfNRiAg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a1ks9rpwlqM:XTLIjfNRiAg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a1ks9rpwlqM:XTLIjfNRiAg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a1ks9rpwlqM:XTLIjfNRiAg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a1ks9rpwlqM:XTLIjfNRiAg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a1ks9rpwlqM:XTLIjfNRiAg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a1ks9rpwlqM:XTLIjfNRiAg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a1ks9rpwlqM:XTLIjfNRiAg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3754684911952395165
title: Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN
uri: Palo-Alto-Warns-of-Zero-Day-Bug-in-Firewalls-Using-GlobalProtect-Porta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3754684911952395165
content:
A new zero-day vulnerability has been disclosed in Palo Alto Networks GlobalProtect VPN that could be abused by an unauthenticated network-based attacker to execute arbitrary code on affected devices with root user privileges.
Tracked as CVE-2021-3064 (CVSS score: 9.8), the security weakness impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.17. Massachusetts-based cybersecurity firm Randori <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kk4w3WYgkQQ:-2fZhWXQRXA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kk4w3WYgkQQ:-2fZhWXQRXA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kk4w3WYgkQQ:-2fZhWXQRXA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kk4w3WYgkQQ:-2fZhWXQRXA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kk4w3WYgkQQ:-2fZhWXQRXA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kk4w3WYgkQQ:-2fZhWXQRXA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kk4w3WYgkQQ:-2fZhWXQRXA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kk4w3WYgkQQ:-2fZhWXQRXA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3654505172158711016
title: Iran's Lyceum Hackers Target Telecoms, ISPs in Israel, Saudi Arabia, and Africa
uri: Iran-s-Lyceum-Hackers-Target-Telecoms-ISPs-in-Israel-Saudi-Arabia-a
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3654505172158711016
content:
A state-sponsored threat actor allegedly affiliated with Iran has been linked to a series of targeted attacks aimed at internet service providers (ISPs) and telecommunication operators in Israel, Morocco, Tunisia, and Saudi Arabia, as well as a ministry of foreign affairs (MFA) in Africa, new findings reveal.
The intrusions, staged by a group tracked as Lyceum, are believed to have occurred <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iZTlAGKka64:uNg6xfXs8TE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iZTlAGKka64:uNg6xfXs8TE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iZTlAGKka64:uNg6xfXs8TE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iZTlAGKka64:uNg6xfXs8TE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iZTlAGKka64:uNg6xfXs8TE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iZTlAGKka64:uNg6xfXs8TE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iZTlAGKka64:uNg6xfXs8TE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iZTlAGKka64:uNg6xfXs8TE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4214927204923629672
title: Navigating The Threat Landscape 2021 – From Ransomware to Botnets
uri: Navigating-The-Threat-Landscape-2021-From-Ransomware-to-Botnets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4214927204923629672
content:
Though we are recovering from the worst pandemic, cyber threats have shown no sign of downshifting, and cybercriminals are still not short of malicious and advanced ways to achieve their goals. 
The Global Threat Landscape Report indicates a drastic rise in sophisticated cyberattacks targeting digital infrastructures, organizations, and individuals in 2021. Threats can take different forms with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=75hkxzXUhCs:_1Bt_KmS4qs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=75hkxzXUhCs:_1Bt_KmS4qs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=75hkxzXUhCs:_1Bt_KmS4qs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=75hkxzXUhCs:_1Bt_KmS4qs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=75hkxzXUhCs:_1Bt_KmS4qs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=75hkxzXUhCs:_1Bt_KmS4qs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=75hkxzXUhCs:_1Bt_KmS4qs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=75hkxzXUhCs:_1Bt_KmS4qs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5027386928191654475
title: TrickBot Operators Partner with Shatak Attackers for Conti Ransomware
uri: TrickBot-Operators-Partner-with-Shatak-Attackers-for-Conti-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5027386928191654475
content:
The operators of TrickBot trojan are collaborating with the Shathak threat group to distribute their wares, ultimately leading to the deployment of Conti ransomware on infected machines.
"The implementation of TrickBot has evolved over the years, with recent versions of TrickBot implementing malware-loading capabilities," Cybereason security analysts Aleksandar Milenkoski and Eli Salem said in a<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IcxZMI0y-6k:FYCLZk5XWPo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IcxZMI0y-6k:FYCLZk5XWPo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IcxZMI0y-6k:FYCLZk5XWPo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IcxZMI0y-6k:FYCLZk5XWPo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IcxZMI0y-6k:FYCLZk5XWPo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IcxZMI0y-6k:FYCLZk5XWPo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IcxZMI0y-6k:FYCLZk5XWPo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IcxZMI0y-6k:FYCLZk5XWPo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5400164511439014154
title: Researchers Uncover Hacker-for-Hire Group That's Active Since 2015
uri: Researchers-Uncover-Hacker-for-Hire-Group-That-s-Active-Since-2015
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5400164511439014154
content:
A new cyber mercenary hacker-for-hire group dubbed "Void Balaur" has been linked to a string of cyberespionage and data theft activities targeting thousands of entities as well as human rights activists, politicians, and government officials around the world at least since 2015 for financial gain while lurking in the shadows.
Named after a many-headed dragon from Romanian folklore, the adversary<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vT5YqJv8jnY:i8fMXSmQo3Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vT5YqJv8jnY:i8fMXSmQo3Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vT5YqJv8jnY:i8fMXSmQo3Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vT5YqJv8jnY:i8fMXSmQo3Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vT5YqJv8jnY:i8fMXSmQo3Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vT5YqJv8jnY:i8fMXSmQo3Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vT5YqJv8jnY:i8fMXSmQo3Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vT5YqJv8jnY:i8fMXSmQo3Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5452772205790866802
title: Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant
uri: Hackers-Exploit-macOS-Zero-Day-to-Hack-Hong-Kong-Users-with-new-Implan
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5452772205790866802
content:
Google researchers on Thursday disclosed that it found a watering hole attack in late August exploiting a now-parched zero-day in macOS operating system and targeting Hong Kong websites related to a media outlet and a prominent pro-democracy labor and political group to deliver a never-before-seen backdoor on compromised machines.
"Based on our findings, we believe this threat actor to be a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBQ1ZB9NXcM:NqpqCNeIBXk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBQ1ZB9NXcM:NqpqCNeIBXk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBQ1ZB9NXcM:NqpqCNeIBXk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zBQ1ZB9NXcM:NqpqCNeIBXk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBQ1ZB9NXcM:NqpqCNeIBXk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zBQ1ZB9NXcM:NqpqCNeIBXk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBQ1ZB9NXcM:NqpqCNeIBXk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zBQ1ZB9NXcM:NqpqCNeIBXk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9104585405974597011
title: Abcbot — A New Evolving Wormable Botnet Malware Targeting Linux
uri: Abcbot-A-New-Evolving-Wormable-Botnet-Malware-Targeting-Linux
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9104585405974597011
content:
Researchers from Qihoo 360's Netlab security team have released details of a new evolving botnet called "Abcbot" that has been observed in the wild with worm-like propagation features to infect Linux systems and launch distributed denial-of-service (DDoS) attacks against targets.
While the earliest version of the botnet dates back to July 2021, new variants observed as recently as October 30 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lICTu4erVB4:PpdtBTBxzPU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lICTu4erVB4:PpdtBTBxzPU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lICTu4erVB4:PpdtBTBxzPU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lICTu4erVB4:PpdtBTBxzPU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lICTu4erVB4:PpdtBTBxzPU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lICTu4erVB4:PpdtBTBxzPU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lICTu4erVB4:PpdtBTBxzPU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lICTu4erVB4:PpdtBTBxzPU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6641561818508276451
title: Hackers Increasingly Using HTML Smuggling in Malware and Phishing Attacks
uri: Hackers-Increasingly-Using-HTML-Smuggling-in-Malware-and-Phishing-Atta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6641561818508276451
content:
Threat actors are increasingly banking on the technique of HTML smuggling in phishing campaigns as a means to gain initial access and deploy an array of threats, including banking malware, remote administration trojans (RATs), and ransomware payloads.
Microsoft 365 Defender Threat Intelligence Team, in a new report published Thursday, disclosed that it identified infiltrations distributing the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v7O6-q_pmm4:5x_9HD-uyLA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v7O6-q_pmm4:5x_9HD-uyLA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v7O6-q_pmm4:5x_9HD-uyLA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v7O6-q_pmm4:5x_9HD-uyLA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v7O6-q_pmm4:5x_9HD-uyLA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v7O6-q_pmm4:5x_9HD-uyLA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v7O6-q_pmm4:5x_9HD-uyLA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v7O6-q_pmm4:5x_9HD-uyLA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4815621473575405453
title: FBI's Email System Hacked to Send Out Fake Cyber Security Alert to Thousands
uri: FBI-s-Email-System-Hacked-to-Send-Out-Fake-Cyber-Security-Alert-to-Tho
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4815621473575405453
content:
The U.S. Federal Bureau of Investigation (FBI) on Saturday confirmed unidentified threat actors have breached one of its email servers to blast hoax messages about a fake "sophisticated chain attack."
The incident, which was first publicly disclosed by threat intelligence non-profit SpamHaus, involved sending rogue warning emails with the subject line "Urgent: Threat actor in systems" <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LVQ0A8fXJ9g:76GglLp_WoE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LVQ0A8fXJ9g:76GglLp_WoE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LVQ0A8fXJ9g:76GglLp_WoE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LVQ0A8fXJ9g:76GglLp_WoE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LVQ0A8fXJ9g:76GglLp_WoE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LVQ0A8fXJ9g:76GglLp_WoE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LVQ0A8fXJ9g:76GglLp_WoE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LVQ0A8fXJ9g:76GglLp_WoE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8025274786678983006
title: North Korean Hackers Target Cybersecurity Researchers with Trojanized IDA Pro
uri: North-Korean-Hackers-Target-Cybersecurity-Researchers-with-Trojanized
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8025274786678983006
content:
Lazarus, the North Korea-affiliated state-sponsored group, is attempting to once again target security researchers with backdoors and remote access trojans using a trojanized pirated version of the popular IDA Pro reverse engineering software.
The findings were reported by ESET security researcher Anton Cherepanov last week in a series of tweets.
IDA Pro is an Interactive Disassembler that's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Cg2y9dOHBo:LI879Thd-pI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Cg2y9dOHBo:LI879Thd-pI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Cg2y9dOHBo:LI879Thd-pI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Cg2y9dOHBo:LI879Thd-pI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Cg2y9dOHBo:LI879Thd-pI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Cg2y9dOHBo:LI879Thd-pI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Cg2y9dOHBo:LI879Thd-pI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Cg2y9dOHBo:LI879Thd-pI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2883962221516695664
title: How to Tackle SaaS Security Misconfigurations
uri: How-to-Tackle-SaaS-Security-Misconfigurations
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2883962221516695664
content:
Whether it's Office 365, Salesforce, Slack, GitHub or Zoom, all SaaS apps include a host of security features designed to protect the business and its data. The job of ensuring these apps' security settings are properly configured falls on the security team.
The challenge lies within how burdensome this responsibility is — each app has tens or hundreds of security settings to configure, in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OMwrMmJi1qA:AvKqKzZ2h_g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OMwrMmJi1qA:AvKqKzZ2h_g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OMwrMmJi1qA:AvKqKzZ2h_g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OMwrMmJi1qA:AvKqKzZ2h_g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OMwrMmJi1qA:AvKqKzZ2h_g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OMwrMmJi1qA:AvKqKzZ2h_g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OMwrMmJi1qA:AvKqKzZ2h_g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OMwrMmJi1qA:AvKqKzZ2h_g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3780758568441114476
title: Researchers Demonstrate New Fingerprinting Attack on Tor Encrypted Traffic
uri: Researchers-Demonstrate-New-Fingerprinting-Attack-on-Tor-Encrypted-Tra
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3780758568441114476
content:
A new analysis of website fingerprinting (WF) attacks aimed at the Tor web browser has revealed that it's possible for an adversary to glean a website frequented by a victim, but only in scenarios where the threat actor is interested in a specific subset of the websites visited by users.
"While attacks can exceed 95% accuracy when monitoring a small set of five popular websites, indiscriminate (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtaCtrhvXvE:7RwUvGeJ-N4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtaCtrhvXvE:7RwUvGeJ-N4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtaCtrhvXvE:7RwUvGeJ-N4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QtaCtrhvXvE:7RwUvGeJ-N4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtaCtrhvXvE:7RwUvGeJ-N4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QtaCtrhvXvE:7RwUvGeJ-N4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtaCtrhvXvE:7RwUvGeJ-N4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QtaCtrhvXvE:7RwUvGeJ-N4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6694284634435810615
title: SharkBot — A New Android Trojan Stealing Banking and Cryptocurrency Accounts
uri: SharkBot-A-New-Android-Trojan-Stealing-Banking-and-Cryptocurrency
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6694284634435810615
content:
Cybersecurity researchers on Monday took the wraps off a new Android trojan that takes advantage of accessibility features on the devices to siphon credentials from banking and cryptocurrency services in Italy, the U.K., and the U.S.
Dubbed "SharkBot" by Cleafy, the malware is designed to strike a total of 27 targets — counting 22 unnamed international banks in Italy and the U.K. as well as five<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_tvZqtksdM:R_NHjBAD5xY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_tvZqtksdM:R_NHjBAD5xY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_tvZqtksdM:R_NHjBAD5xY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z_tvZqtksdM:R_NHjBAD5xY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_tvZqtksdM:R_NHjBAD5xY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z_tvZqtksdM:R_NHjBAD5xY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z_tvZqtksdM:R_NHjBAD5xY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z_tvZqtksdM:R_NHjBAD5xY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-980676404763341246
title: New 'Moses Staff' Hacker Group Targets Israeli Companies With Destructive Attacks
uri: New-Moses-Staff-Hacker-Group-Targets-Israeli-Companies-With-Destruct
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/980676404763341246
content:
A new politically-motivated hacker group named "Moses Staff" has been linked to a wave of targeted attacks targeting Israeli organizations since September 2021 with the goal of plundering and leaking sensitive information prior to encrypting their networks, with no option to regain access or negotiate a ransom.
"The group openly states that their motivation in attacking Israeli companies is to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=35ES3-V7qmw:qNbvCZ1D4Nc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=35ES3-V7qmw:qNbvCZ1D4Nc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=35ES3-V7qmw:qNbvCZ1D4Nc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=35ES3-V7qmw:qNbvCZ1D4Nc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=35ES3-V7qmw:qNbvCZ1D4Nc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=35ES3-V7qmw:qNbvCZ1D4Nc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=35ES3-V7qmw:qNbvCZ1D4Nc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=35ES3-V7qmw:qNbvCZ1D4Nc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2136464098598877631
title: Notorious Emotet Botnet Makes a Comeback with the Help of TrickBot Malware
uri: Notorious-Emotet-Botnet-Makes-a-Comeback-with-the-Help-of-TrickBot-Mal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2136464098598877631
content:
The notorious Emotet malware is staging a comeback of sorts nearly 10 months after a coordinated law enforcement operation dismantled its command-and-control infrastructure in late January 2021.
According to a new report from security researcher Luca Ebach, the infamous TrickBot malware is being used as an entry point to distribute what appears to be a new version of Emotet on systems previously<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JN67jvdt-2U:PIadyTKc5iE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JN67jvdt-2U:PIadyTKc5iE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JN67jvdt-2U:PIadyTKc5iE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JN67jvdt-2U:PIadyTKc5iE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JN67jvdt-2U:PIadyTKc5iE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JN67jvdt-2U:PIadyTKc5iE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JN67jvdt-2U:PIadyTKc5iE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JN67jvdt-2U:PIadyTKc5iE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8281969993571410241
title: Researchers Demonstrate New Way to Detect MITM Phishing Kits in the Wild
uri: Researchers-Demonstrate-New-Way-to-Detect-MITM-Phishing-Kits-in-the-Wi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8281969993571410241
content:
No fewer than 1,220 Man-in-the-Middle (MitM) phishing websites have been discovered as targeting popular online services like Instagram, Google, PayPal, Apple, Twitter, and LinkedIn with the goal of hijacking users' credentials and carrying out further follow-on attacks.
The findings come from a new study undertaken by a group of researchers from Stony Brook University and Palo Alto Networks, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gUkCGyOJXkY:k6hKgfpstWs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gUkCGyOJXkY:k6hKgfpstWs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gUkCGyOJXkY:k6hKgfpstWs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gUkCGyOJXkY:k6hKgfpstWs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gUkCGyOJXkY:k6hKgfpstWs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gUkCGyOJXkY:k6hKgfpstWs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gUkCGyOJXkY:k6hKgfpstWs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gUkCGyOJXkY:k6hKgfpstWs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9014395899755012049
title: New Blacksmith Exploit Bypasses Current Rowhammer Attack Defenses
uri: New-Blacksmith-Exploit-Bypasses-Current-Rowhammer-Attack-Defenses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9014395899755012049
content:
Cybersecurity researchers have demonstrated yet another variation of the Rowhammer attack affecting all DRAM (dynamic random-access memory) chips that bypasses currently deployed mitigations, thereby effectively compromising the security of the devices.
The new technique — dubbed "Blacksmith" (CVE-2021-42114, CVSS score: 9.0) — is designed to trigger bit flips on target refresh rate-enabled DRAM<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2vZ2pBzEmE:g67_VGOu72g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2vZ2pBzEmE:g67_VGOu72g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2vZ2pBzEmE:g67_VGOu72g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n2vZ2pBzEmE:g67_VGOu72g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2vZ2pBzEmE:g67_VGOu72g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n2vZ2pBzEmE:g67_VGOu72g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2vZ2pBzEmE:g67_VGOu72g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n2vZ2pBzEmE:g67_VGOu72g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8222620518363711000
title: Facebook Bans Pakistani and Syrian Hacker Groups for Abusing its Platform
uri: Facebook-Bans-Pakistani-and-Syrian-Hacker-Groups-for-Abusing-its-Platf
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8222620518363711000
content:
Meta, the company formerly known as Facebook, announced Tuesday that it took action against four separate malicious cyber groups from Pakistan and Syria who were found targeting people in Afghanistan, as well as journalists, humanitarian organizations, and anti-regime military forces in the West Asian country.
The Pakistani threat actor, dubbed SideCopy, is said to have used the platform to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIJUdOwbEzg:ZRnGNLNNUkM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIJUdOwbEzg:ZRnGNLNNUkM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIJUdOwbEzg:ZRnGNLNNUkM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EIJUdOwbEzg:ZRnGNLNNUkM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIJUdOwbEzg:ZRnGNLNNUkM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EIJUdOwbEzg:ZRnGNLNNUkM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIJUdOwbEzg:ZRnGNLNNUkM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EIJUdOwbEzg:ZRnGNLNNUkM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4396032373591369699
title: Israel's Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East
uri: Israel-s-Candiru-Spyware-Found-Linked-to-Watering-Hole-Attacks-in-U-K
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4396032373591369699
content:
Israeli spyware vendor Candiru, which was added to an economic blocklist by the U.S. government this month, is said to have reportedly waged "watering hole" attacks against high-profile entities in the U.K. and the Middle East, new findings reveal.
"The victimized websites belong to media outlets in the U.K., Yemen, and Saudi Arabia, as well as to Hezbollah; to government institutions in Iran (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTjxlKeQNU:m_i3CkeG6CM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTjxlKeQNU:m_i3CkeG6CM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTjxlKeQNU:m_i3CkeG6CM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cBTjxlKeQNU:m_i3CkeG6CM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTjxlKeQNU:m_i3CkeG6CM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cBTjxlKeQNU:m_i3CkeG6CM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cBTjxlKeQNU:m_i3CkeG6CM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cBTjxlKeQNU:m_i3CkeG6CM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1541580322648764930
title: On-Demand Webinar: Into the Cryptoverse
uri: On-Demand-Webinar-Into-the-Cryptoverse
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1541580322648764930
content:
In the span of a few years, cryptocurrencies have gone from laughingstock and novelty to a serious financial instrument, and a major sector in high-tech. The price of Bitcoin and Ethereum has gone from single dollars to thousands, and they’re increasingly in the mainstream. 
This is undoubtedly a positive development, as it opens new avenues for finance, transactions, tech developments, and more<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3zoO1U8yBZ8:DNICrF1C0WY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3zoO1U8yBZ8:DNICrF1C0WY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3zoO1U8yBZ8:DNICrF1C0WY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3zoO1U8yBZ8:DNICrF1C0WY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3zoO1U8yBZ8:DNICrF1C0WY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3zoO1U8yBZ8:DNICrF1C0WY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3zoO1U8yBZ8:DNICrF1C0WY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3zoO1U8yBZ8:DNICrF1C0WY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-329349550508179952
title: U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws
uri: U-S-U-K-and-Australia-Warn-of-Iranian-Hackers-Exploiting-Microsoft
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/329349550508179952
content:
Cybersecurity agencies from Australia, the U.K., and the U.S. on Wednesday released a joint advisory warning of active exploitation of Fortinet and Microsoft Exchange ProxyShell vulnerabilities by Iranian state-sponsored actors to gain initial access to vulnerable systems for follow-on activities, including data exfiltration and ransomware.
The threat actor is believed to have leveraged multiple<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jZ6-CGFtAOc:z7cEdZzL_eY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jZ6-CGFtAOc:z7cEdZzL_eY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jZ6-CGFtAOc:z7cEdZzL_eY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jZ6-CGFtAOc:z7cEdZzL_eY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jZ6-CGFtAOc:z7cEdZzL_eY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jZ6-CGFtAOc:z7cEdZzL_eY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jZ6-CGFtAOc:z7cEdZzL_eY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jZ6-CGFtAOc:z7cEdZzL_eY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6796765532957859159
title: Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities
uri: Hackers-Targeting-Myanmar-Use-Domain-Fronting-to-Hide-Malicious-Activi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6796765532957859159
content:
A malicious campaign has been found leveraging a technique called domain fronting to hide command-and-control traffic by leveraging a legitimate domain owned by the Myanmar government to route communications to an attacker-controlled server with the goal of evading detection.
The threat, which was observed in September 2021, deployed Cobalt Strike payloads as a stepping stone for launching <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ajj-ba6mzsA:rezavCN0BbY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ajj-ba6mzsA:rezavCN0BbY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ajj-ba6mzsA:rezavCN0BbY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ajj-ba6mzsA:rezavCN0BbY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ajj-ba6mzsA:rezavCN0BbY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ajj-ba6mzsA:rezavCN0BbY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ajj-ba6mzsA:rezavCN0BbY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ajj-ba6mzsA:rezavCN0BbY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-372991788991783152
title: Microsoft Warns about 6 Iranian Hacking Groups Turning to Ransomware
uri: Microsoft-Warns-about-6-Iranian-Hacking-Groups-Turning-to-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/372991788991783152
content:
Nation-state operators with nexus to Iran are increasingly turning to ransomware as a means of generating revenue and intentionally sabotaging their targets, while also engaging in patient and persistent social engineering campaigns and aggressive brute force attacks.
No less than six threat actors affiliated with the West Asian country have been discovered deploying ransomware to achieve their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3VcV4mqQFg:x_yuff2b1gE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3VcV4mqQFg:x_yuff2b1gE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3VcV4mqQFg:x_yuff2b1gE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c3VcV4mqQFg:x_yuff2b1gE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3VcV4mqQFg:x_yuff2b1gE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c3VcV4mqQFg:x_yuff2b1gE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3VcV4mqQFg:x_yuff2b1gE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c3VcV4mqQFg:x_yuff2b1gE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8105888432199915269
title: Critical Root RCE Bug Affects Multiple Netgear SOHO Router Models
uri: Critical-Root-RCE-Bug-Affects-Multiple-Netgear-SOHO-Router-Models
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8105888432199915269
content:
Networking equipment company Netgear has released yet another round of patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system.
Tracked as CVE-2021-34991 (CVSS score: 8.8), the pre-authentication buffer overflow flaw in small office and home office (SOHO) routers can lead<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CD1u9hi3yOo:oq1PTeELNPs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CD1u9hi3yOo:oq1PTeELNPs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CD1u9hi3yOo:oq1PTeELNPs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CD1u9hi3yOo:oq1PTeELNPs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CD1u9hi3yOo:oq1PTeELNPs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CD1u9hi3yOo:oq1PTeELNPs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CD1u9hi3yOo:oq1PTeELNPs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CD1u9hi3yOo:oq1PTeELNPs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6412237558980667390
title: How to Build a Security Awareness Training Program that Yields Measurable Results
uri: How-to-Build-a-Security-Awareness-Training-Program-that-Yields-Measura
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6412237558980667390
content:
Organizations have been worrying about cyber security since the advent of the technological age. Today, digital transformation coupled with the rise of remote work has made the need for security awareness all the more critical.
Cyber security professionals are continuously thinking about how to prevent cyber security breaches from happening, with employees and contractors often proving to be the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CNQwlApZB9g:IKh1_g1-nio:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CNQwlApZB9g:IKh1_g1-nio:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CNQwlApZB9g:IKh1_g1-nio:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CNQwlApZB9g:IKh1_g1-nio:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CNQwlApZB9g:IKh1_g1-nio:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CNQwlApZB9g:IKh1_g1-nio:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CNQwlApZB9g:IKh1_g1-nio:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CNQwlApZB9g:IKh1_g1-nio:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-402073255860738763
title: Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims
uri: Experts-Expose-Secrets-of-Conti-Ransomware-Group-That-Made-25-Million
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/402073255860738763
content:
The clearnet and dark web payment portals operated by the Conti ransomware group have gone down in what appears to be an attempt to shift to new infrastructure after details about the gang's inner workings and its members were made public.
According to MalwareHunterTeam, "while both the clearweb and Tor domains of the leak site of the Conti ransomware gang is online and working, both their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=08qGsywq2uo:IuHmdA11cv0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=08qGsywq2uo:IuHmdA11cv0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=08qGsywq2uo:IuHmdA11cv0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=08qGsywq2uo:IuHmdA11cv0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=08qGsywq2uo:IuHmdA11cv0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=08qGsywq2uo:IuHmdA11cv0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=08qGsywq2uo:IuHmdA11cv0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=08qGsywq2uo:IuHmdA11cv0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7036573648127701215
title: New Side Channel Attacks Re-Enable Serious DNS Cache Poisoning Attacks
uri: New-Side-Channel-Attacks-Re-Enable-Serious-DNS-Cache-Poisoning-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7036573648127701215
content:
Researchers have demonstrated yet another variant of the SAD DNS cache poisoning attack that leaves about 38% of the domain name resolvers vulnerable, enabling attackers to redirect traffic originally destined to legitimate websites to a server under their control.
"The attack allows an off-path attacker to inject a malicious DNS record into a DNS cache," University of California researchers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rrNUE02OsyE:TvghNtuDbG4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rrNUE02OsyE:TvghNtuDbG4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rrNUE02OsyE:TvghNtuDbG4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rrNUE02OsyE:TvghNtuDbG4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rrNUE02OsyE:TvghNtuDbG4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rrNUE02OsyE:TvghNtuDbG4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rrNUE02OsyE:TvghNtuDbG4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rrNUE02OsyE:TvghNtuDbG4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3965165753266968111
title: FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug
uri: FBI-Issues-Flash-Alert-on-Actively-Exploited-FatPipe-VPN-Zero-Day-Bug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3965165753266968111
content:
The U.S. Federal Bureau of Investigation (FBI) has disclosed that an unidentified threat actor has been exploiting a previously unknown weakness in the FatPipe MPVPN networking devices at least since May 2021 to obtain an initial foothold and maintain persistent access into vulnerable networks, making it the latest company to join the likes of Cisco, Fortinet, Citrix, Pulse Secure that have had <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ZZM-ouHhxQ:eIGS9GEDs8o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ZZM-ouHhxQ:eIGS9GEDs8o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ZZM-ouHhxQ:eIGS9GEDs8o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6ZZM-ouHhxQ:eIGS9GEDs8o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ZZM-ouHhxQ:eIGS9GEDs8o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6ZZM-ouHhxQ:eIGS9GEDs8o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ZZM-ouHhxQ:eIGS9GEDs8o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6ZZM-ouHhxQ:eIGS9GEDs8o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8574058339288692498
title: A Simple 5-Step Framework to Minimize the Risk of a Data Breach
uri: A-Simple-5-Step-Framework-to-Minimize-the-Risk-of-a-Data-Breach
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8574058339288692498
content:
Today's businesses run on data. They collect it from customers at every interaction, and they use it to improve efficiency, increase their agility, and provide higher levels of service. But it's becoming painfully obvious that all of that data businesses collect has also made them an enticing target for cybercriminals.
With each passing day, the evidence of that grows. In the last few months, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ysgF2FsSAKE:4x_5ni41UYQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ysgF2FsSAKE:4x_5ni41UYQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ysgF2FsSAKE:4x_5ni41UYQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ysgF2FsSAKE:4x_5ni41UYQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ysgF2FsSAKE:4x_5ni41UYQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ysgF2FsSAKE:4x_5ni41UYQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ysgF2FsSAKE:4x_5ni41UYQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ysgF2FsSAKE:4x_5ni41UYQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2174484193215684801
title: 11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells
uri: 11-Malicious-PyPI-Python-Libraries-Caught-Stealing-Discord-Tokens-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2174484193215684801
content:
Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access tokens, passwords, and even stage dependency confusion attacks.
The Python packages have since been removed from the repository following responsible <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DMqcaKoYfNQ:2_BiPR7KRbA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DMqcaKoYfNQ:2_BiPR7KRbA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DMqcaKoYfNQ:2_BiPR7KRbA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DMqcaKoYfNQ:2_BiPR7KRbA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DMqcaKoYfNQ:2_BiPR7KRbA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DMqcaKoYfNQ:2_BiPR7KRbA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DMqcaKoYfNQ:2_BiPR7KRbA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DMqcaKoYfNQ:2_BiPR7KRbA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4483683524039093476
title: U.S. Charged 2 Iranian Hackers for Threatening Voters During 2020 Presidential Election
uri: U-S-Charged-2-Iranian-Hackers-for-Threatening-Voters-During-2020-Pres
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4483683524039093476
content:
The U.S. government on Thursday unsealed an indictment that accused two Iranian nationals of their involvement in cyber-enabled disinformation and threat campaign orchestrated to interfere in the 2020 presidential elections by gaining access to confidential voter information from at least one state election website.
The two defendants in question — Seyyed Mohammad Hosein Musa Kazemi, 24, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N83ucGSq9Po:Rfd-3kwJwkI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N83ucGSq9Po:Rfd-3kwJwkI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N83ucGSq9Po:Rfd-3kwJwkI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N83ucGSq9Po:Rfd-3kwJwkI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N83ucGSq9Po:Rfd-3kwJwkI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N83ucGSq9Po:Rfd-3kwJwkI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N83ucGSq9Po:Rfd-3kwJwkI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N83ucGSq9Po:Rfd-3kwJwkI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8065120673388994471
title: RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools
uri: RedCurl-Corporate-Espionage-Hackers-Return-With-Updated-Hacking-Tools
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8065120673388994471
content:
A corporate cyber-espionage hacker group has resurfaced after a seven-month hiatus with new intrusions targeting four companies this year, including one of the largest wholesale stores in Russia, while simultaneously making tactical improvements to its toolset in an attempt to thwart analysis.
"In every attack, the threat actor demonstrates extensive red teaming skills and the ability to bypass <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mOaZ3Spd08:ZKF-3SVrwpE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mOaZ3Spd08:ZKF-3SVrwpE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mOaZ3Spd08:ZKF-3SVrwpE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mOaZ3Spd08:ZKF-3SVrwpE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mOaZ3Spd08:ZKF-3SVrwpE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mOaZ3Spd08:ZKF-3SVrwpE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mOaZ3Spd08:ZKF-3SVrwpE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mOaZ3Spd08:ZKF-3SVrwpE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8585979518244371606
title: North Korean Hackers Found Behind a Range of Credential Theft Campaigns
uri: North-Korean-Hackers-Found-Behind-a-Range-of-Credential-Theft-Campaign
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8585979518244371606
content:
A threat actor with ties to North Korea has been linked to a prolific wave of credential theft campaigns targeting research, education, government, media and other organizations, with two of the attacks also attempting to distribute malware that could be used for intelligence gathering.
Enterprise security firm Proofpoint attributed the infiltrations to a group it tracks as TA406, and by the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZYtT0Qyt9Ic:0Z-rdAvUUXU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZYtT0Qyt9Ic:0Z-rdAvUUXU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZYtT0Qyt9Ic:0Z-rdAvUUXU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZYtT0Qyt9Ic:0Z-rdAvUUXU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZYtT0Qyt9Ic:0Z-rdAvUUXU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZYtT0Qyt9Ic:0Z-rdAvUUXU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZYtT0Qyt9Ic:0Z-rdAvUUXU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZYtT0Qyt9Ic:0Z-rdAvUUXU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7543442937161754680
title: Facebook Postpones Plans for E2E Encryption in Messenger, Instagram Until 2023
uri: Facebook-Postpones-Plans-for-E2E-Encryption-in-Messenger-Instagram-Un
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7543442937161754680
content:
Meta, the parent company of Facebook, Instagram, and WhatsApp, disclosed that it doesn't intend to roll out default end-to-end encryption (E2EE) across all its messaging services until 2023, pushing its original plans by at least a year.
"We're taking our time to get this right and we don't plan to finish the global rollout of end-to-end encryption by default across all our messaging services <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t_3L-fZm5RY:wMk4k0VIKvs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t_3L-fZm5RY:wMk4k0VIKvs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t_3L-fZm5RY:wMk4k0VIKvs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t_3L-fZm5RY:wMk4k0VIKvs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t_3L-fZm5RY:wMk4k0VIKvs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t_3L-fZm5RY:wMk4k0VIKvs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t_3L-fZm5RY:wMk4k0VIKvs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t_3L-fZm5RY:wMk4k0VIKvs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5802049822848199667
title: New Golang-based Linux Malware Targeting eCommerce Websites
uri: New-Golang-based-Linux-Malware-Targeting-eCommerce-Websites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5802049822848199667
content:
Weaknesses in e-commerce portals are being exploited to deploy a Linux backdoor as well as a credit card skimmer that's capable of stealing payment information from compromised websites.
"The attacker started with automated e-commerce attack probes, testing for dozens of weaknesses in common online store platforms," researchers from Sansec Threat Research said in an analysis. "After a day and a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gz8RQFX811g:TskjHQMIyoE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gz8RQFX811g:TskjHQMIyoE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gz8RQFX811g:TskjHQMIyoE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gz8RQFX811g:TskjHQMIyoE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gz8RQFX811g:TskjHQMIyoE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gz8RQFX811g:TskjHQMIyoE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gz8RQFX811g:TskjHQMIyoE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gz8RQFX811g:TskjHQMIyoE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-288835401986039891
title: Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns
uri: Hackers-Exploiting-ProxyLogon-and-ProxyShell-Flaws-in-Spam-Campaigns
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/288835401986039891
content:
Threat actors are exploiting ProxyLogon and ProxyShell exploits in unpatched Microsoft Exchange Servers as part of an ongoing spam campaign that leverages stolen email chains to bypass security software and deploy malware on vulnerable systems.
The findings come from Trend Micro following an investigation into a number of intrusions in the Middle East that culminated in the distribution of a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yned34_ZYE:gJwiB3OR58U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yned34_ZYE:gJwiB3OR58U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yned34_ZYE:gJwiB3OR58U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_yned34_ZYE:gJwiB3OR58U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yned34_ZYE:gJwiB3OR58U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_yned34_ZYE:gJwiB3OR58U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yned34_ZYE:gJwiB3OR58U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_yned34_ZYE:gJwiB3OR58U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3800083780706277447
title: GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data
uri: GoDaddy-Data-Breach-Exposes-Over-1-Million-WordPress-Customers-Data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3800083780706277447
content:
Web hosting giant GoDaddy on Monday disclosed a data breach that resulted in the unauthorized access of data belonging to a total of 1.2 million active and inactive customers, making it the third security incident to come to light since 2018.
In a filing with the U.S. Securities and Exchange Commission (SEC), the world's largest domain registrar said that a malicious third-party managed to gain <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IaGNVpFbb4g:LcBfq6MXQ-E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IaGNVpFbb4g:LcBfq6MXQ-E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IaGNVpFbb4g:LcBfq6MXQ-E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IaGNVpFbb4g:LcBfq6MXQ-E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IaGNVpFbb4g:LcBfq6MXQ-E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IaGNVpFbb4g:LcBfq6MXQ-E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IaGNVpFbb4g:LcBfq6MXQ-E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IaGNVpFbb4g:LcBfq6MXQ-E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3748064409571963292
title: Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox
uri: Researchers-Detail-Privilege-Escalation-Bugs-Reported-in-Oracle-Virtua
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3748064409571963292
content:
A now-patched vulnerability affecting Oracle VM VirtualBox could be potentially exploited by an adversary to compromise the hypervisor and cause a denial-of-service (DoS) condition.
"Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox," the advisory reads. "Successful attacks of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lf5Z5FCi68Q:6TlljqO8mF4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lf5Z5FCi68Q:6TlljqO8mF4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lf5Z5FCi68Q:6TlljqO8mF4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lf5Z5FCi68Q:6TlljqO8mF4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lf5Z5FCi68Q:6TlljqO8mF4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lf5Z5FCi68Q:6TlljqO8mF4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lf5Z5FCi68Q:6TlljqO8mF4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lf5Z5FCi68Q:6TlljqO8mF4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1624597074566630806
title: More Stealthier Version of BrazKing Android Malware Spotted in the Wild
uri: More-Stealthier-Version-of-BrazKing-Android-Malware-Spotted-in-the-Wil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1624597074566630806
content:
Banking apps from Brazil are being targeted by a more elusive and stealthier version of an Android remote access trojan (RAT) that's capable of carrying out financial fraud attacks by stealing two-factor authentication (2FA) codes and initiating rogue transactions from infected devices to transfer money from victims' accounts to an account operated by the threat actor.
IBM X-Force dubbed the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QjuR-weEPjA:7NKRjwP8Qxo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QjuR-weEPjA:7NKRjwP8Qxo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QjuR-weEPjA:7NKRjwP8Qxo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QjuR-weEPjA:7NKRjwP8Qxo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QjuR-weEPjA:7NKRjwP8Qxo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QjuR-weEPjA:7NKRjwP8Qxo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QjuR-weEPjA:7NKRjwP8Qxo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QjuR-weEPjA:7NKRjwP8Qxo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1239118377860331280
title: The Importance of IT Security in Your Merger Acquisition
uri: The-Importance-of-IT-Security-in-Your-Merger-Acquisition
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1239118377860331280
content:
In the business world, mergers and acquisitions are commonplace as businesses combine, acquire, and enter various partnerships. Mergers and Acquisitions (M&amp;A) are filled with often very complicated and complex processes to merge business processes, management, and a whole slew of other aspects of combining two businesses into a single logical entity.
In the modern business world before and after<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55DqEDEVWbs:Q2u3vZAzTfY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55DqEDEVWbs:Q2u3vZAzTfY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55DqEDEVWbs:Q2u3vZAzTfY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=55DqEDEVWbs:Q2u3vZAzTfY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55DqEDEVWbs:Q2u3vZAzTfY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=55DqEDEVWbs:Q2u3vZAzTfY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=55DqEDEVWbs:Q2u3vZAzTfY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=55DqEDEVWbs:Q2u3vZAzTfY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5110912601661649751
title: What Avengers Movies Can Teach Us About Cybersecurity
uri: What-Avengers-Movies-Can-Teach-Us-About-Cybersecurity
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5110912601661649751
content:
Marvel has been entertaining us for the last 20 years. We have seen gods, super-soldiers, magicians, and other irradiated heroes fight baddies at galactic scales. The eternal fight of good versus evil. A little bit like in cybersecurity, goods guys fighting cybercriminals.If we choose to go with this fun analogy, is there anything useful we can learn from those movies?
World-ending baddies <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gn7V5IB_Zng:2d9Oxkl48cY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gn7V5IB_Zng:2d9Oxkl48cY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gn7V5IB_Zng:2d9Oxkl48cY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gn7V5IB_Zng:2d9Oxkl48cY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gn7V5IB_Zng:2d9Oxkl48cY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gn7V5IB_Zng:2d9Oxkl48cY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gn7V5IB_Zng:2d9Oxkl48cY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gn7V5IB_Zng:2d9Oxkl48cY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8269890029206270707
title: Apple Sues Israel's NSO Group for Spying on iPhone Users With Pegasus Spyware
uri: Apple-Sues-Israel-s-NSO-Group-for-Spying-on-iPhone-Users-With-Pegasus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8269890029206270707
content:
Apple has sued NSO Group and its parent company Q Cyber Technologies in a U.S. federal court holding it accountable for illegally targeting users with its Pegasus surveillance tool, marking yet another setback for the Israeli spyware vendor.
The Cupertino-based tech giant painted NSO Group as "notorious hackers — amoral 21st century mercenaries who have created highly sophisticated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emH916vI75w:wJysNNqW2Yo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emH916vI75w:wJysNNqW2Yo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emH916vI75w:wJysNNqW2Yo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=emH916vI75w:wJysNNqW2Yo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emH916vI75w:wJysNNqW2Yo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=emH916vI75w:wJysNNqW2Yo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=emH916vI75w:wJysNNqW2Yo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=emH916vI75w:wJysNNqW2Yo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4285107091892362686
title: APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users
uri: APT-C-23-Hackers-Using-New-Android-Spyware-Variant-to-Target-Middle-Ea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4285107091892362686
content:
A threat actor known for striking targets in the Middle East has evolved its Android spyware yet again with enhanced capabilities that allow it to be stealthier and more persistent while passing off as seemingly innocuous app updates to stay under the radar.
The new variants have "incorporated new features into their malicious apps that make them more resilient to actions by users, who might try<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ay_2N9SUW4U:WUtHJxYqmrg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ay_2N9SUW4U:WUtHJxYqmrg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ay_2N9SUW4U:WUtHJxYqmrg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ay_2N9SUW4U:WUtHJxYqmrg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ay_2N9SUW4U:WUtHJxYqmrg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ay_2N9SUW4U:WUtHJxYqmrg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ay_2N9SUW4U:WUtHJxYqmrg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ay_2N9SUW4U:WUtHJxYqmrg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7040642206619374221
title: Over 9 Million Android Phones Running Malware Apps from Huawei's AppGallery
uri: Over-9-Million-Android-Phones-Running-Malware-Apps-from-Huawei-s-AppGa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7040642206619374221
content:
At least 9.3 million Android devices have been infected by a new class of malware that disguises itself as dozens of arcade, shooter, and strategy games on Huawei's AppGallery marketplace to steal device information and victims' mobile phone numbers.
The mobile campaign was disclosed by researchers from Doctor Web, who classified the trojan as "Android.Cynos.7.origin," owing to the fact that the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GnpjQR77amI:8mLRAzjOlXA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GnpjQR77amI:8mLRAzjOlXA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GnpjQR77amI:8mLRAzjOlXA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GnpjQR77amI:8mLRAzjOlXA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GnpjQR77amI:8mLRAzjOlXA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GnpjQR77amI:8mLRAzjOlXA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GnpjQR77amI:8mLRAzjOlXA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GnpjQR77amI:8mLRAzjOlXA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3191149468521544962
title: Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally
uri: Eavesdropping-Bugs-in-MediaTek-Chips-Affect-37-of-All-Smartphones-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3191149468521544962
content:
Multiple security weaknesses have been disclosed in MediaTek system-on-chips (SoCs) that could have enabled a threat actor to elevate privileges and execute arbitrary code in the firmware of the audio processor, effectively allowing the attackers to carry out a "massive eavesdrop campaign" without the users' knowledge.
The discovery of the flaws is the result of reverse-engineering the Taiwanese<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-enMNTXXMdA:QIA6ptsJixI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-enMNTXXMdA:QIA6ptsJixI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-enMNTXXMdA:QIA6ptsJixI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-enMNTXXMdA:QIA6ptsJixI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-enMNTXXMdA:QIA6ptsJixI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-enMNTXXMdA:QIA6ptsJixI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-enMNTXXMdA:QIA6ptsJixI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-enMNTXXMdA:QIA6ptsJixI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1264843220137908970
title: VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client
uri: VMware-Warns-of-Newly-Discovered-Vulnerabilities-in-vSphere-Web-Client
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1264843220137908970
content:
VMware has shipped updates to address two security vulnerabilities in vCenter Server and Cloud Foundation that could be abused by a remote attacker to gain access to sensitive information.
The more severe of the issues concerns an arbitrary file read vulnerability in the vSphere Web Client. Tracked as CVE-2021-21980, the bug has been rated 7.5 out of a maximum of 10 on the CVSS scoring system, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Cyw9qgp48Ho:MUPOM12pwy8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Cyw9qgp48Ho:MUPOM12pwy8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Cyw9qgp48Ho:MUPOM12pwy8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Cyw9qgp48Ho:MUPOM12pwy8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Cyw9qgp48Ho:MUPOM12pwy8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Cyw9qgp48Ho:MUPOM12pwy8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Cyw9qgp48Ho:MUPOM12pwy8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Cyw9qgp48Ho:MUPOM12pwy8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4266248618561548747
title: Warning — Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild
uri: Warning-Hackers-Exploiting-New-Windows-Installer-Zero-Day-Exploit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4266248618561548747
content:
Attackers are actively making efforts to exploit a new variant of a recently disclosed privilege escalation vulnerability to potentially execute arbitrary code on fully-patched systems, once again demonstrating how adversaries move quickly to weaponize a publicly available exploit.
Cisco Talos disclosed that it "detected malware samples in the wild that are attempting to take advantage of this <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=32UbkpKWqnk:ffhqrnZtWvA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=32UbkpKWqnk:ffhqrnZtWvA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=32UbkpKWqnk:ffhqrnZtWvA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=32UbkpKWqnk:ffhqrnZtWvA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=32UbkpKWqnk:ffhqrnZtWvA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=32UbkpKWqnk:ffhqrnZtWvA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=32UbkpKWqnk:ffhqrnZtWvA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=32UbkpKWqnk:ffhqrnZtWvA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5204625585814067877
title: If You're Not Using Antivirus Software, You're Not Paying Attention
uri: If-You-re-Not-Using-Antivirus-Software-You-re-Not-Paying-Attention
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5204625585814067877
content:
Stop tempting fate and take a look at our picks for the best antivirus programs on the market today.
Every year there are billions of malware attacks worldwide. And these threats are constantly evolving. So if you are not currently using antivirus software, or you still rely on some free software you downloaded back in 2017, you are putting your cybersecurity in serious jeopardy. 
Need help <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56QrJ4kxjB0:4sZLz3WC0KY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56QrJ4kxjB0:4sZLz3WC0KY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56QrJ4kxjB0:4sZLz3WC0KY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=56QrJ4kxjB0:4sZLz3WC0KY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56QrJ4kxjB0:4sZLz3WC0KY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=56QrJ4kxjB0:4sZLz3WC0KY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=56QrJ4kxjB0:4sZLz3WC0KY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=56QrJ4kxjB0:4sZLz3WC0KY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-443340965142546022
title: This New Stealthy JavaScript Loader Infecting Computers with Malware
uri: This-New-Stealthy-JavaScript-Loader-Infecting-Computers-with-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/443340965142546022
content:
Threat actors have been found using a previously undocumented JavaScript malware strain that functions as a loader to distribute an array of remote access Trojans (RATs) and information stealers.
HP Threat Research dubbed the new, evasive loader "RATDispenser," with the malware responsible for deploying at least eight different malware families in 2021. Around 155 samples of this new malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1e2FHUk890:xDM-3ZgJobc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1e2FHUk890:xDM-3ZgJobc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1e2FHUk890:xDM-3ZgJobc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A1e2FHUk890:xDM-3ZgJobc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1e2FHUk890:xDM-3ZgJobc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A1e2FHUk890:xDM-3ZgJobc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1e2FHUk890:xDM-3ZgJobc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A1e2FHUk890:xDM-3ZgJobc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3919708428555767402
title: Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware
uri: Hackers-Using-Microsoft-MSHTML-Flaw-to-Spy-on-Targeted-PCs-with-Malwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3919708428555767402
content:
A new Iranian threat actor has been discovered exploiting a now-addressed critical flaw in the Microsoft Windows MSHTML platform to target Farsi-speaking victims with a new PowerShell-based information stealer designed to harvest extensive details from infected machines.
"[T]he stealer is a PowerShell script, short with powerful collection capabilities — in only ~150 lines, it provides the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wlf8IEZXE08:Ta0uLcsl12I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wlf8IEZXE08:Ta0uLcsl12I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wlf8IEZXE08:Ta0uLcsl12I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wlf8IEZXE08:Ta0uLcsl12I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wlf8IEZXE08:Ta0uLcsl12I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wlf8IEZXE08:Ta0uLcsl12I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wlf8IEZXE08:Ta0uLcsl12I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wlf8IEZXE08:Ta0uLcsl12I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3918836751270303549
title: Product Releases Should Not Be Scary
uri: Product-Releases-Should-Not-Be-Scary
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3918836751270303549
content:
Every Product Manager and Software Developer should know that pushing feature updates to production via traditional channels is as archaic as painting on cave walls. The smart are always quick to adapt to new, innovative technologies, and this mindset is exactly what makes normal companies great.
The landscape is changing fast, especially in IT. Change isn't just necessary, but more often than <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o5NSsztD5cE:OHefFHUZbfI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o5NSsztD5cE:OHefFHUZbfI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o5NSsztD5cE:OHefFHUZbfI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o5NSsztD5cE:OHefFHUZbfI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o5NSsztD5cE:OHefFHUZbfI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o5NSsztD5cE:OHefFHUZbfI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o5NSsztD5cE:OHefFHUZbfI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o5NSsztD5cE:OHefFHUZbfI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3091191260066926296
title: Israel Bans Sales of Hacking and Surveillance Tools to 65 Countries
uri: Israel-Bans-Sales-of-Hacking-and-Surveillance-Tools-to-65-Countries
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3091191260066926296
content:
Israel's Ministry of Defense has dramatically restricted the number of countries to which cybersecurity firms in the country are allowed to sell offensive hacking and surveillance tools to, cutting off 65 nations from the export list.
The revised list, details of which were first reported by the Israeli business newspaper Calcalist, now only includes 37 countries, down from the previous 102:<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17K4yA8VCP8:zdcl1YQuwkc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17K4yA8VCP8:zdcl1YQuwkc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17K4yA8VCP8:zdcl1YQuwkc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17K4yA8VCP8:zdcl1YQuwkc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17K4yA8VCP8:zdcl1YQuwkc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17K4yA8VCP8:zdcl1YQuwkc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17K4yA8VCP8:zdcl1YQuwkc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17K4yA8VCP8:zdcl1YQuwkc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-329590279427478682
title: CronRAT: A New Linux Malware That’s Scheduled to Run on February 31st
uri: CronRAT-A-New-Linux-Malware-That-s-Scheduled-to-Run-on-February-31s
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/329590279427478682
content:
Researchers have unearthed a new remote access trojan (RAT) for Linux that employs a never-before-seen stealth technique that involves masking its malicious actions by scheduling them for execution on February 31st, a non-existent calendar day.
Dubbed CronRAT, the sneaky malware "enables server-side Magecart data theft which bypasses browser-based security solutions," Sansec Threat Research said<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lGhbfMPALHA:NypM4-YCs1s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lGhbfMPALHA:NypM4-YCs1s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lGhbfMPALHA:NypM4-YCs1s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lGhbfMPALHA:NypM4-YCs1s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lGhbfMPALHA:NypM4-YCs1s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lGhbfMPALHA:NypM4-YCs1s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lGhbfMPALHA:NypM4-YCs1s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lGhbfMPALHA:NypM4-YCs1s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2209280730747096779
title: Crypto Hackers Using Babadeda Crypter to Make Their Malware Undetectable
uri: Crypto-Hackers-Using-Babadeda-Crypter-to-Make-Their-Malware-Undetectab
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2209280730747096779
content:
A new malware campaign has been discovered targeting cryptocurrency, non-fungible token (NFT), and DeFi aficionados through Discord channels to deploy a crypter named "Babadeda" that's capable of bypassing antivirus solutions and stage a variety of attacks.
"[T]his malware installer has been used in a variety of recent campaigns to deliver information stealers, RATs, and even LockBit ransomware,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MowgIB4pNxI:Glnda_vApzI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MowgIB4pNxI:Glnda_vApzI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MowgIB4pNxI:Glnda_vApzI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MowgIB4pNxI:Glnda_vApzI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MowgIB4pNxI:Glnda_vApzI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MowgIB4pNxI:Glnda_vApzI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MowgIB4pNxI:Glnda_vApzI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MowgIB4pNxI:Glnda_vApzI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6673576678834727530
title: Hackers Targeting Biomanufacturing Facilities With Tardigrade Malware
uri: Hackers-Targeting-Biomanufacturing-Facilities-With-Tardigrade-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6673576678834727530
content:
An advanced persistent threat (APT) has been linked to cyberattacks on two biomanufacturing companies that occurred this year with the help of a custom malware loader called "Tardigrade."
That's according to an advisory published by Bioeconomy Information Sharing and Analysis Center (BIO-ISAC) this week, which noted that the malware is actively spreading across the sector with the likely goal of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6jHCBD2Bks:Xt5cjoHGxB8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6jHCBD2Bks:Xt5cjoHGxB8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6jHCBD2Bks:Xt5cjoHGxB8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x6jHCBD2Bks:Xt5cjoHGxB8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6jHCBD2Bks:Xt5cjoHGxB8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x6jHCBD2Bks:Xt5cjoHGxB8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6jHCBD2Bks:Xt5cjoHGxB8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x6jHCBD2Bks:Xt5cjoHGxB8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-273636466660990826
title: Italy's Antitrust Regulator Fines Google and Apple for "Aggressive" Data Practices
uri: Italy-s-Antitrust-Regulator-Fines-Google-and-Apple-for-Aggressive-Da
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/273636466660990826
content:
Italy's antitrust regulator has fined both Apple and Google €10 million each for what it calls are "aggressive" data practices and for not providing consumers with clear information on commercial uses of their personal data during the account creation phase.
The Autorità Garante della Concorrenza e del Mercato (AGCM) said "Google and Apple did not provide clear and immediate information on the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I-rXN85c6Yc:33VmmpkKmUI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I-rXN85c6Yc:33VmmpkKmUI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I-rXN85c6Yc:33VmmpkKmUI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I-rXN85c6Yc:33VmmpkKmUI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I-rXN85c6Yc:33VmmpkKmUI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I-rXN85c6Yc:33VmmpkKmUI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I-rXN85c6Yc:33VmmpkKmUI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I-rXN85c6Yc:33VmmpkKmUI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8255964884753017086
title: Interpol Arrests Over 1,000 Cyber Criminals From 20 Countries; Seizes $27 Million
uri: Interpol-Arrests-Over-1-000-Cyber-Criminals-From-20-Countries-Seizes
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8255964884753017086
content:
A joint four-month operation coordinated by Interpol, the international criminal police organization, has culminated in the arrests of more than 1,000 cybercriminals and the recovery of $27 million in illicit proceeds.
Codenamed "HAECHI-II," the crackdown enabled law enforcement units from across 20 countries, as well as Hong Kong and Macao, close 1,660 cases alongside blocking 2,350 bank <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4dZNWj7b0ZM:pjhRsN_lZOU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4dZNWj7b0ZM:pjhRsN_lZOU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4dZNWj7b0ZM:pjhRsN_lZOU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4dZNWj7b0ZM:pjhRsN_lZOU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4dZNWj7b0ZM:pjhRsN_lZOU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4dZNWj7b0ZM:pjhRsN_lZOU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4dZNWj7b0ZM:pjhRsN_lZOU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4dZNWj7b0ZM:pjhRsN_lZOU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6958749873837122142
title: Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency
uri: Hackers-Using-Compromised-Google-Cloud-Accounts-to-Mine-Cryptocurrency
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6958749873837122142
content:
Threat actors are exploiting improperly-secured Google Cloud Platform (GCP) instances to download cryptocurrency mining software to the compromised systems as well as abusing its infrastructure to install ransomware, stage phishing campaigns, and even generate traffic to YouTube videos for view count manipulation.
"While cloud customers continue to face a variety of threats across applications <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ez5A9Ey1s1E:vhe5TJeU6Vo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ez5A9Ey1s1E:vhe5TJeU6Vo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ez5A9Ey1s1E:vhe5TJeU6Vo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ez5A9Ey1s1E:vhe5TJeU6Vo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ez5A9Ey1s1E:vhe5TJeU6Vo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ez5A9Ey1s1E:vhe5TJeU6Vo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ez5A9Ey1s1E:vhe5TJeU6Vo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ez5A9Ey1s1E:vhe5TJeU6Vo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4726764530800721928
title: New Chinotto Spyware Targets North Korean Defectors, Human Rights Activists
uri: New-Chinotto-Spyware-Targets-North-Korean-Defectors-Human-Rights-Acti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4726764530800721928
content:
North Korean defectors, journalists who cover North Korea-related news, and entities in South Korea are being zeroed in on by a nation-state-sponsored advanced persistent threat (APT) as part of a new wave of highly-targeted surveillance attacks.
Russian cybersecurity firm Kaspersky attributed the infiltrations to a North Korean hacker group tracked as ScarCruft, also known as APT37, Reaper <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZLu07Cp3TU:OYH5Ylwt93I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZLu07Cp3TU:OYH5Ylwt93I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZLu07Cp3TU:OYH5Ylwt93I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nZLu07Cp3TU:OYH5Ylwt93I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZLu07Cp3TU:OYH5Ylwt93I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nZLu07Cp3TU:OYH5Ylwt93I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZLu07Cp3TU:OYH5Ylwt93I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nZLu07Cp3TU:OYH5Ylwt93I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4596977373743491708
title: CleanMyMac X: Performance and Security Software for Macbook
uri: CleanMyMac-X-Performance-and-Security-Software-for-Macbook
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4596977373743491708
content:
We use Internet-enabled devices in every aspect of our lives today—to find information, shop, bank, do homework, play games, and keep in touch with friends and family. As a result, our devices contain much personal information about us.
Also, any great device will get a little clunky and slow over time and the Mac is no exception, and the whole "Macs don't get viruses" claim is a myth. Malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K-18fsv2FD0:DUZkCeUZtaY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K-18fsv2FD0:DUZkCeUZtaY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K-18fsv2FD0:DUZkCeUZtaY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K-18fsv2FD0:DUZkCeUZtaY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K-18fsv2FD0:DUZkCeUZtaY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K-18fsv2FD0:DUZkCeUZtaY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K-18fsv2FD0:DUZkCeUZtaY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K-18fsv2FD0:DUZkCeUZtaY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2872962277458863699
title: 4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021
uri: 4-Android-Banking-Trojan-Campaigns-Targeted-Over-300-000-Devices-in-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2872962277458863699
content:
Four different Android banking trojans were spread via the official Google Play Store between August and November 2021, resulting in more than 300,000 infections through various dropper apps that posed as seemingly harmless utility apps to take full control of the infected devices.
Designed to deliver Anatsa (aka TeaBot), Alien, ERMAC, and Hydra, cybersecurity firm ThreatFabric said the malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_O8W6aDCfnI:knYoFqcdaOo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_O8W6aDCfnI:knYoFqcdaOo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_O8W6aDCfnI:knYoFqcdaOo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_O8W6aDCfnI:knYoFqcdaOo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_O8W6aDCfnI:knYoFqcdaOo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_O8W6aDCfnI:knYoFqcdaOo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_O8W6aDCfnI:knYoFqcdaOo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_O8W6aDCfnI:knYoFqcdaOo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8248042483133349297
title: Panasonic Suffers Data Breach After Hackers Hack Into Its Network
uri: Panasonic-Suffers-Data-Breach-After-Hackers-Hack-Into-Its-Network
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8248042483133349297
content:
Japanese consumer electronics giant Panasonic has disclosed a security breach wherein an unauthorized third-party broke into its network and potentially accessed data from one of its file servers.
"As the result of an internal investigation, it was determined that some data on a file server had been accessed during the intrusion," the company said in a short statement published on November 26. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UoucvbCc_nI:HuOwFQdN5DU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UoucvbCc_nI:HuOwFQdN5DU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UoucvbCc_nI:HuOwFQdN5DU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UoucvbCc_nI:HuOwFQdN5DU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UoucvbCc_nI:HuOwFQdN5DU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UoucvbCc_nI:HuOwFQdN5DU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UoucvbCc_nI:HuOwFQdN5DU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UoucvbCc_nI:HuOwFQdN5DU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4145178631475145667
title: Unpatched Unauthorized File Read Vulnerability Affects Microsoft Windows OS
uri: Unpatched-Unauthorized-File-Read-Vulnerability-Affects-Microsoft-Windo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4145178631475145667
content:
Unofficial patches have been issued to remediate an improperly patched Windows security vulnerability that could allow information disclosure and local privilege escalation (LPE) on vulnerable systems.
Tracked as CVE-2021-24084 (CVSS score: 5.5), the flaw concerns an information disclosure vulnerability in the Windows Mobile Device Management component that could enable an attacker to gain <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohlfIQjUHSo:mTlKQV74zvI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohlfIQjUHSo:mTlKQV74zvI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohlfIQjUHSo:mTlKQV74zvI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ohlfIQjUHSo:mTlKQV74zvI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohlfIQjUHSo:mTlKQV74zvI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ohlfIQjUHSo:mTlKQV74zvI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohlfIQjUHSo:mTlKQV74zvI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ohlfIQjUHSo:mTlKQV74zvI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-77050250655787205
title: WIRTE Hacker Group Targets Government, Law, Financial Entities in Middle East
uri: WIRTE-Hacker-Group-Targets-Government-Law-Financial-Entities-in-Midd
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/77050250655787205
content:
Government, diplomatic entities, military organizations, law firms, and financial institutions primarily located in the Middle East have been targeted as part of a stealthy malware campaign as early as 2019 by making use of malicious Microsoft Excel and Word documents.
Russian cybersecurity company Kaspersky attributed the attacks with high confidence to a threat actor named WIRTE, adding the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gr6wCigahT8:QCJWX90GtVM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gr6wCigahT8:QCJWX90GtVM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gr6wCigahT8:QCJWX90GtVM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gr6wCigahT8:QCJWX90GtVM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gr6wCigahT8:QCJWX90GtVM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gr6wCigahT8:QCJWX90GtVM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gr6wCigahT8:QCJWX90GtVM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gr6wCigahT8:QCJWX90GtVM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6353114784114918887
title: Critical Wormable Security Flaw Found in Several HP Printer Models
uri: Critical-Wormable-Security-Flaw-Found-in-Several-HP-Printer-Models
url: https://thehackernews.com/2021/11/critical-wormable-security-flaw-found.html
content:
Cybersecurity researchers on Tuesday disclosed multiple security flaws affecting 150 different multifunction printers (MFPs) from HP Inc that could be potentially abused by an adversary to take control of vulnerable devices, pilfer sensitive information, and infiltrate enterprise networks to mount other attacks.
The two weaknesses — collectively called Printing Shellz — were discovered and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IFjFK1JaKIM:6MrNl4HazMQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IFjFK1JaKIM:6MrNl4HazMQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IFjFK1JaKIM:6MrNl4HazMQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IFjFK1JaKIM:6MrNl4HazMQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IFjFK1JaKIM:6MrNl4HazMQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IFjFK1JaKIM:6MrNl4HazMQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IFjFK1JaKIM:6MrNl4HazMQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IFjFK1JaKIM:6MrNl4HazMQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-150754575051280887
title: New Hub for Lean IT Security Teams
uri: New-Hub-for-Lean-IT-Security-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/150754575051280887
content:
One of the harsh realities of cybersecurity today is that malicious actors and attackers don’t distinguish between organizations that have seemingly endless resources and those operating with lean IT security teams. For these lean teams, meeting the challenges in the current security landscape requires constant attention, and sometimes a little support.
XDR provider Cynet has built a new <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvNDs1knN54:WRv4_j9Ta8c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvNDs1knN54:WRv4_j9Ta8c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvNDs1knN54:WRv4_j9Ta8c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UvNDs1knN54:WRv4_j9Ta8c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvNDs1knN54:WRv4_j9Ta8c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UvNDs1knN54:WRv4_j9Ta8c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvNDs1knN54:WRv4_j9Ta8c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UvNDs1knN54:WRv4_j9Ta8c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3410562915451536356
title: Twitter Bans Users From Posting ‘Private Media’ Without a Person's Consent
uri: Twitter-Bans-Users-From-Posting-Private-Media-Without-a-Person-s
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3410562915451536356
content:
Twitter on Tuesday announced an expansion to its private information policy to include private media, effectively prohibiting the sharing of photos and videos without express permission from the individuals depicted in them with an aim to curb doxxing and harassment.
"Beginning today, we will not allow the sharing of private media, such as images or videos of private individuals without their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VBNEYssx19c:40b4eqBDaaA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VBNEYssx19c:40b4eqBDaaA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VBNEYssx19c:40b4eqBDaaA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VBNEYssx19c:40b4eqBDaaA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VBNEYssx19c:40b4eqBDaaA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VBNEYssx19c:40b4eqBDaaA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VBNEYssx19c:40b4eqBDaaA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VBNEYssx19c:40b4eqBDaaA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7050903256856812859
title: Hacker Jailed for Stealing Millions of Dollars in Cryptocurrencies by SIM Hijacking
uri: Hacker-Jailed-for-Stealing-Millions-of-Dollars-in-Cryptocurrencies-by
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7050903256856812859
content:
A sixth member associated with an international hacking group known as The Community has been sentenced in connection with a multimillion-dollar SIM swapping conspiracy, the U.S. Department of Justice (DoJ) said.
Garrett Endicott, 22, from the U.S. state of Missouri, who pleaded guilty to charges of wire fraud and aggravated identity theft following an indictment in 2019, was sentenced to 10 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYOp941OYoU:RkcUGOWx8wY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYOp941OYoU:RkcUGOWx8wY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYOp941OYoU:RkcUGOWx8wY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYOp941OYoU:RkcUGOWx8wY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYOp941OYoU:RkcUGOWx8wY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYOp941OYoU:RkcUGOWx8wY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYOp941OYoU:RkcUGOWx8wY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYOp941OYoU:RkcUGOWx8wY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1292683963213127762
title: Hackers Increasingly Using RTF Template Injection Technique in Phishing Attacks
uri: Hackers-Increasingly-Using-RTF-Template-Injection-Technique-in-Phishin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1292683963213127762
content:
Three different state-sponsored threat actors aligned with China, India, and Russia have been observed adopting a new method called RTF (aka Rich Text Format) template injection as part of their phishing campaigns to deliver malware to targeted systems.
"RTF template injection is a novel technique that is ideal for malicious phishing attachments because it is simple and allows threat actors to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8A65Dh4hlLw:30cRB2t4coI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8A65Dh4hlLw:30cRB2t4coI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8A65Dh4hlLw:30cRB2t4coI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8A65Dh4hlLw:30cRB2t4coI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8A65Dh4hlLw:30cRB2t4coI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8A65Dh4hlLw:30cRB2t4coI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8A65Dh4hlLw:30cRB2t4coI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8A65Dh4hlLw:30cRB2t4coI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5005417325740112698
title: New EwDoor Botnet Targeting Unpatched AT&T Network Edge Devices
uri: New-EwDoor-Botnet-Targeting-Unpatched-AT-T-Network-Edge-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5005417325740112698
content:
A newly discovered botnet capable of staging distributed denial-of-service (DDoS) attacks targeted unpatched Ribbon Communications (formerly Edgewater Networks) EdgeMarc appliances belonging to telecom service provider AT&amp;T by exploiting a four-year-old flaw in the network appliances.
Chinese tech giant Qihoo 360's Netlab network security division, which detected the botnet first on October 27, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWFDMlPDJ-k:3tx4559Bz_E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWFDMlPDJ-k:3tx4559Bz_E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWFDMlPDJ-k:3tx4559Bz_E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWFDMlPDJ-k:3tx4559Bz_E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWFDMlPDJ-k:3tx4559Bz_E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWFDMlPDJ-k:3tx4559Bz_E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWFDMlPDJ-k:3tx4559Bz_E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWFDMlPDJ-k:3tx4559Bz_E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1403789979860479612
title: Critical Bug in Mozilla’s NSS Crypto Library Potentially Affects Several Other Software
uri: Critical-Bug-in-Mozilla-s-NSS-Crypto-Library-Potentially-Affects-Sev
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1403789979860479612
content:
Mozilla has rolled out fixes to address a critical security weakness in its cross-platform Network Security Services (NSS) cryptographic library that could be potentially exploited by an adversary to crash a vulnerable application and even execute arbitrary code.
Tracked as CVE-2021-43527, the flaw affects NSS versions prior to 3.73 or 3.68.1 ESR, and concerns a heap overflow vulnerability when <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TxEDi6JTQ7w:Ooc-_aa5D9M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TxEDi6JTQ7w:Ooc-_aa5D9M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TxEDi6JTQ7w:Ooc-_aa5D9M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TxEDi6JTQ7w:Ooc-_aa5D9M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TxEDi6JTQ7w:Ooc-_aa5D9M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TxEDi6JTQ7w:Ooc-_aa5D9M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TxEDi6JTQ7w:Ooc-_aa5D9M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TxEDi6JTQ7w:Ooc-_aa5D9M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2342993600688524459
title: Russian Man Gets 60 Months Jail for Providing Bulletproof Hosting to Cyber Criminals
uri: Russian-Man-Gets-60-Months-Jail-for-Providing-Bulletproof-Hosting-to-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2342993600688524459
content:
A Russian national charged with providing bulletproof hosting services for cybercriminals, who used the platform to spread malware and attack U.S. organizations and financial institutions between 2009 to 2015, has received a 60-month prison sentence.
34-year-old Aleksandr Grichishkin, along with Andrei Skvortsov, founded the bulletproof hosting service and rented its infrastructure to other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jjRRQGIO6O0:EHqXzHYM4fI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jjRRQGIO6O0:EHqXzHYM4fI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jjRRQGIO6O0:EHqXzHYM4fI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jjRRQGIO6O0:EHqXzHYM4fI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jjRRQGIO6O0:EHqXzHYM4fI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jjRRQGIO6O0:EHqXzHYM4fI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jjRRQGIO6O0:EHqXzHYM4fI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jjRRQGIO6O0:EHqXzHYM4fI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2655312207767431722
title: Researchers Warn Iranian Users of Widespread SMS Phishing Campaigns
uri: Researchers-Warn-Iranian-Users-of-Widespread-SMS-Phishing-Campaigns
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2655312207767431722
content:
Socially engineered SMS messages are being used to install malware on Android devices as part of a widespread phishing campaign that impersonates the Iranian government and social security services to make away with credit card details and steal funds from victims' bank accounts.
Unlike other variants of banking malware that bank of overlay attacks to capture sensitive data without the knowledge<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dibv1D_kPRE:l9YQtyvvBVM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dibv1D_kPRE:l9YQtyvvBVM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dibv1D_kPRE:l9YQtyvvBVM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dibv1D_kPRE:l9YQtyvvBVM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dibv1D_kPRE:l9YQtyvvBVM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dibv1D_kPRE:l9YQtyvvBVM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dibv1D_kPRE:l9YQtyvvBVM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dibv1D_kPRE:l9YQtyvvBVM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4725156515153219217
title: Researches Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks
uri: Researches-Detail-17-Malicious-Frameworks-Used-to-Attack-Air-Gapped-Ne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4725156515153219217
content:
Four different malicious frameworks designed to attack air-gapped networks were detected in the first half of 2020 alone, bringing the total number of such toolkits to 17 and offering adversaries a pathway to cyber espionage and exfiltrate classified information.
"All frameworks are designed to perform some form of espionage, [and] all the frameworks used USB drives as the physical transmission <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ruIG3ePSivM:B03e9wLp75U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ruIG3ePSivM:B03e9wLp75U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ruIG3ePSivM:B03e9wLp75U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ruIG3ePSivM:B03e9wLp75U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ruIG3ePSivM:B03e9wLp75U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ruIG3ePSivM:B03e9wLp75U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ruIG3ePSivM:B03e9wLp75U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ruIG3ePSivM:B03e9wLp75U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7414961115236724325
title: Let there be light: Ensuring visibility across the entire API lifecycle
uri: Let-there-be-light-Ensuring-visibility-across-the-entire-API-lifecycl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7414961115236724325
content:
The following article is based on a webinar series on enterprise API security by Imvision, featuring expert speakers from IBM, Deloitte, Maersk, and Imvision discussing the importance of centralizing an organization's visibility of its APIs as a way to accelerate remediation efforts and improve the overall security posture.
Centralizing security is challenging in today's open ecosystem
When <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dITZjdGNgPg:dx7ZYaXp7qg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dITZjdGNgPg:dx7ZYaXp7qg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dITZjdGNgPg:dx7ZYaXp7qg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dITZjdGNgPg:dx7ZYaXp7qg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dITZjdGNgPg:dx7ZYaXp7qg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dITZjdGNgPg:dx7ZYaXp7qg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dITZjdGNgPg:dx7ZYaXp7qg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dITZjdGNgPg:dx7ZYaXp7qg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1673669086467869251
title: Meta Expands Facebook Protect Program to Activists, Journalists, Government Officials
uri: Meta-Expands-Facebook-Protect-Program-to-Activists-Journalists-Gover
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1673669086467869251
content:
Meta, the company formerly known as Facebook, on Thursday announced an expansion of its Facebook Protect security program to include human rights defenders, activists, journalists, and government officials who are more likely to be targeted by bad actors across its social media platforms.
"These people are at the center of critical communities for public debate," said Nathaniel Gleicher, head of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hF9B6NedXqA:xYiCNQvqOzQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hF9B6NedXqA:xYiCNQvqOzQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hF9B6NedXqA:xYiCNQvqOzQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hF9B6NedXqA:xYiCNQvqOzQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hF9B6NedXqA:xYiCNQvqOzQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hF9B6NedXqA:xYiCNQvqOzQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hF9B6NedXqA:xYiCNQvqOzQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hF9B6NedXqA:xYiCNQvqOzQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4074952632096501113
title: CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability
uri: CISA-Warns-of-Actively-Exploited-Critical-Zoho-ManageEngine-ServiceDes
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4074952632096501113
content:
The U.S. Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are warning of active exploitation of a newly patched flaw in Zoho's ManageEngine ServiceDesk Plus product to deploy web shells and carry out an array of malicious activities.
Tracked as CVE-2021-44077 (CVSS score: 9.8), the issue relates to an unauthenticated, remote code execution <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mvxP7aI_wt0:KxpkGhSkdVA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mvxP7aI_wt0:KxpkGhSkdVA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mvxP7aI_wt0:KxpkGhSkdVA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mvxP7aI_wt0:KxpkGhSkdVA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mvxP7aI_wt0:KxpkGhSkdVA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mvxP7aI_wt0:KxpkGhSkdVA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mvxP7aI_wt0:KxpkGhSkdVA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mvxP7aI_wt0:KxpkGhSkdVA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1734417972020991194
title: New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers
uri: New-Payment-Data-Sealing-Malware-Hides-in-Nginx-Process-on-Linux-Serve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1734417972020991194
content:
E-commerce platforms in the U.S., Germany, and France have come under attack from a new form of malware that targets Nginx servers in an attempt to masquerade its presence and slip past detection by security solutions.
"This novel code injects itself into a host Nginx application and is nearly invisible," Sansec Threat Research team said in a new report. "The parasite is used to steal data from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w1_sPXHITsY:5wJ8bVxf4h8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w1_sPXHITsY:5wJ8bVxf4h8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w1_sPXHITsY:5wJ8bVxf4h8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w1_sPXHITsY:5wJ8bVxf4h8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w1_sPXHITsY:5wJ8bVxf4h8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w1_sPXHITsY:5wJ8bVxf4h8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w1_sPXHITsY:5wJ8bVxf4h8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w1_sPXHITsY:5wJ8bVxf4h8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8933104515174652322
title: New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions
uri: New-Malvertising-Campaigns-Spreading-Backdoors-Malicious-Chrome-Exten
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8933104515174652322
content:
A series of malicious campaigns have been leveraging fake installers of popular apps and games such as Viber, WeChat, NoxPlayer, and Battlefield as a lure to trick users into downloading a new backdoor and an undocumented malicious Google Chrome extension with the goal of stealing credentials and data stored in the compromised systems as well as maintaining persistent remote access.
Cisco Talos <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9_KWxSAmK8:16lIoFVWgyQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9_KWxSAmK8:16lIoFVWgyQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9_KWxSAmK8:16lIoFVWgyQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M9_KWxSAmK8:16lIoFVWgyQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9_KWxSAmK8:16lIoFVWgyQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M9_KWxSAmK8:16lIoFVWgyQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9_KWxSAmK8:16lIoFVWgyQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M9_KWxSAmK8:16lIoFVWgyQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7634765402447562000
title: Why Everyone Needs to Take the Latest CISA Directive Seriously
uri: Why-Everyone-Needs-to-Take-the-Latest-CISA-Directive-Seriously
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7634765402447562000
content:
Government agencies publish notices and directives all the time. Usually, these are only relevant to government departments, which means that nobody else really pays attention. It's easy to see why you would assume that a directive from CISA just doesn't relate to your organization.
But, in the instance of the latest CISA directive, that would be making a mistake. In this article, we explain why<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nmcaBYE7w7g:i8J6hzv1_lg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nmcaBYE7w7g:i8J6hzv1_lg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nmcaBYE7w7g:i8J6hzv1_lg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nmcaBYE7w7g:i8J6hzv1_lg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nmcaBYE7w7g:i8J6hzv1_lg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nmcaBYE7w7g:i8J6hzv1_lg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nmcaBYE7w7g:i8J6hzv1_lg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nmcaBYE7w7g:i8J6hzv1_lg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6072120738292956781
title: Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments
uri: Researchers-Detail-How-Pakistani-Hackers-Targeting-Indian-and-Afghan-G
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6072120738292956781
content:
A Pakistani threat actor successfully socially engineered a number of ministries in Afghanistan and a shared government computer in India to steal sensitive Google, Twitter, and Facebook credentials from its targets and stealthily obtain access to government portals.
Malwarebytes' latest findings go into detail about the new tactics and tools adopted by the APT group known as SideCopy, which is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyDsBywhfY:-HYqvB5vFgE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyDsBywhfY:-HYqvB5vFgE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyDsBywhfY:-HYqvB5vFgE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtyDsBywhfY:-HYqvB5vFgE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyDsBywhfY:-HYqvB5vFgE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtyDsBywhfY:-HYqvB5vFgE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyDsBywhfY:-HYqvB5vFgE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtyDsBywhfY:-HYqvB5vFgE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1307232850695306415
title: Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks
uri: Warning-Yet-Another-Zoho-ManageEngine-Product-Found-Under-Active-Atta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1307232850695306415
content:
Enterprise software provider Zoho on Friday warned that a newly patched critical flaw in its Desktop Central and Desktop Central MSP is being actively exploited by malicious actors, marking the third security vulnerability in its products to be abused in the wild in a span of four months.
&lt;!--adsense--&gt;
The issue, assigned the identifier CVE-2021-44515, is an authentication bypass vulnerability <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=opgjWrVyChQ:p9c1QcmTsps:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=opgjWrVyChQ:p9c1QcmTsps:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=opgjWrVyChQ:p9c1QcmTsps:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=opgjWrVyChQ:p9c1QcmTsps:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=opgjWrVyChQ:p9c1QcmTsps:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=opgjWrVyChQ:p9c1QcmTsps:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=opgjWrVyChQ:p9c1QcmTsps:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=opgjWrVyChQ:p9c1QcmTsps:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5538192982071934156
title: Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats
uri: Pegasus-Spyware-Reportedly-Hacked-iPhones-of-U-S-State-Department-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5538192982071934156
content:
Apple reportedly notified several U.S. Embassy and State Department employees that their iPhones may have been targeted by an unknown assailant using state-sponsored spyware created by the controversial Israeli company NSO Group, according to multiple reports from Reuters and The Washington Post.
At least 11 U.S. Embassy officials stationed in Uganda or focusing on issues pertaining to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eq03rljicW4:decZK9d4zos:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eq03rljicW4:decZK9d4zos:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eq03rljicW4:decZK9d4zos:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eq03rljicW4:decZK9d4zos:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eq03rljicW4:decZK9d4zos:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eq03rljicW4:decZK9d4zos:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eq03rljicW4:decZK9d4zos:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eq03rljicW4:decZK9d4zos:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8197637444119073232
title: 14 New XS-Leaks (Cross-Site Leaks) Attacks Affect All Modern Web Browsers
uri: 14-New-XS-Leaks-(Cross-Site-Leaks)-Attacks-Affect-All-Modern-Web-Brows
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8197637444119073232
content:
Researchers have discovered 14 new types of cross-site data leakage attacks against a number of modern web browsers, including Tor Browser, Mozilla Firefox, Google Chrome, Microsoft Edge, Apple Safari, and Opera, among others.
Collectively known as "XS-Leaks," the browser bugs enable a malicious website to harvest personal data from its visitors as they interact with other websites in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o98OKA7VQBk:13nmrqAfTz0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o98OKA7VQBk:13nmrqAfTz0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o98OKA7VQBk:13nmrqAfTz0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o98OKA7VQBk:13nmrqAfTz0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o98OKA7VQBk:13nmrqAfTz0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o98OKA7VQBk:13nmrqAfTz0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o98OKA7VQBk:13nmrqAfTz0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o98OKA7VQBk:13nmrqAfTz0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-860095142917087097
title: Hackers Steal $200 Million Worth of Cryptocurrency Tokens from BitMart Exchange
uri: Hackers-Steal-200-Million-Worth-of-Cryptocurrency-Tokens-from-BitMart
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/860095142917087097
content:
Cryptocurrency trading platform BitMart has disclosed a "large-scale security breach" that it blamed on a stolen private key, resulting in the theft of more than $150 million in various cryptocurrencies.
The breach is said to have impacted two of its hot wallets on the Ethereum (ETH) blockchain and the Binance smart chain (BSC). The company noted that the wallets carried only a "small percentage<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbjEbCQnc70:od8Ei_5Kk6c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbjEbCQnc70:od8Ei_5Kk6c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbjEbCQnc70:od8Ei_5Kk6c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UbjEbCQnc70:od8Ei_5Kk6c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbjEbCQnc70:od8Ei_5Kk6c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UbjEbCQnc70:od8Ei_5Kk6c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbjEbCQnc70:od8Ei_5Kk6c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UbjEbCQnc70:od8Ei_5Kk6c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4362850283639994342
title: Vulnerability Scanning Frequency Best Practices
uri: Vulnerability-Scanning-Frequency-Best-Practices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4362850283639994342
content:
So you've decided to set up a vulnerability scanning programme, great. That's one of the best ways to avoid data breaches. How often you should run your scans, though, isn't such a simple question. The answers aren't the same for every type of organization or every type of system you're scanning.
This guide will help you understand the questions you should be asking and help you come up with the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2v4K0bxiZA:aQDWVoT6o_I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2v4K0bxiZA:aQDWVoT6o_I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2v4K0bxiZA:aQDWVoT6o_I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n2v4K0bxiZA:aQDWVoT6o_I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2v4K0bxiZA:aQDWVoT6o_I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n2v4K0bxiZA:aQDWVoT6o_I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n2v4K0bxiZA:aQDWVoT6o_I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n2v4K0bxiZA:aQDWVoT6o_I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3768785986187085759
title: Malicious KMSPico Windows Activator Stealing Users' Cryptocurrency Wallets
uri: Malicious-KMSPico-Windows-Activator-Stealing-Users-Cryptocurrency-Wal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3768785986187085759
content:
Users looking to activate Windows without using a digital license or a product key are being targeted by tainted installers to deploy malware designed to plunder credentials and other information in cryptocurrency wallets.
The malware, dubbed "CryptBot," is an information stealer capable of obtaining credentials for browsers, cryptocurrency wallets, browser cookies, credit cards, and capturing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3PMNjSt_gYA:HU5ASpELB9w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3PMNjSt_gYA:HU5ASpELB9w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3PMNjSt_gYA:HU5ASpELB9w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3PMNjSt_gYA:HU5ASpELB9w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3PMNjSt_gYA:HU5ASpELB9w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3PMNjSt_gYA:HU5ASpELB9w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3PMNjSt_gYA:HU5ASpELB9w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3PMNjSt_gYA:HU5ASpELB9w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3234569922674132525
title: Latest Firefox 95 Includes RLBox Sandboxing to Protect Browser from Malicious Code
uri: Latest-Firefox-95-Includes-RLBox-Sandboxing-to-Protect-Browser-from-Ma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3234569922674132525
content:
Mozilla is beginning to roll out Firefox 95 with a new sandboxing technology called RLBox that prevents untrusted code and other security vulnerabilities from causing "accidental defects as well as supply-chain attacks."
Dubbed "RLBox" and implemented in collaboration with researchers at the University of California San Diego and the University of Texas, the improved protection mechanism is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XyeN4wgcCo0:dWsoeVa5Apk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XyeN4wgcCo0:dWsoeVa5Apk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XyeN4wgcCo0:dWsoeVa5Apk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XyeN4wgcCo0:dWsoeVa5Apk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XyeN4wgcCo0:dWsoeVa5Apk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XyeN4wgcCo0:dWsoeVa5Apk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XyeN4wgcCo0:dWsoeVa5Apk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XyeN4wgcCo0:dWsoeVa5Apk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-145641460400937022
title: Microsoft Seizes 42 Malicious Web Domains Used By Chinese Hackers
uri: Microsoft-Seizes-42-Malicious-Web-Domains-Used-By-Chinese-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/145641460400937022
content:
Microsoft on Monday announced the seizure of 42 domains used by a China-based cyber espionage group that set its sights on organizations in the U.S. and 28 other countries pursuant to a legal warrant issued by a federal court in the U.S. state of Virginia.
The Redmond company attributed the malicious activities to a group it pursues as Nickel, and by the wider cybersecurity industry under the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9n3pSxUGrXI:NB2lzqW6To0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9n3pSxUGrXI:NB2lzqW6To0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9n3pSxUGrXI:NB2lzqW6To0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9n3pSxUGrXI:NB2lzqW6To0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9n3pSxUGrXI:NB2lzqW6To0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9n3pSxUGrXI:NB2lzqW6To0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9n3pSxUGrXI:NB2lzqW6To0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9n3pSxUGrXI:NB2lzqW6To0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5649388987750910455
title: SolarWinds Hackers Targeting Government and Business Entities Worldwide
uri: SolarWinds-Hackers-Targeting-Government-and-Business-Entities-Worldwid
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5649388987750910455
content:
Nobelium, the threat actor attributed to the massive SolarWinds supply chain compromise, has been once again linked to a series of attacks targeting multiple cloud solution providers, services, and reseller companies, as the hacking group continues to refine and retool its tactics at an alarming pace in response to public disclosures.
The intrusions, which are being tracked by Mandiant under two<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmAQRlQHB1I:5_d8DS1By90:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmAQRlQHB1I:5_d8DS1By90:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmAQRlQHB1I:5_d8DS1By90:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kmAQRlQHB1I:5_d8DS1By90:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmAQRlQHB1I:5_d8DS1By90:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kmAQRlQHB1I:5_d8DS1By90:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmAQRlQHB1I:5_d8DS1By90:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kmAQRlQHB1I:5_d8DS1By90:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8926772660742205793
title: Eltima SDK Contain Multiple Vulnerabilities Affecting Several Cloud Service Provides
uri: Eltima-SDK-Contain-Multiple-Vulnerabilities-Affecting-Several-Cloud-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8926772660742205793
content:
Cybersecurity researchers have disclosed multiple vulnerabilities in a third-party driver software developed by Eltima that have been "unwittingly inherited" by cloud desktop solutions like Amazon Workspaces, Accops, and NoMachine and could provide attackers a path to perform an array of malicious activities.
"These vulnerabilities allow attackers to escalate privileges enabling them to disable <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MFAhazB_PEw:g2sTJRVEMAs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MFAhazB_PEw:g2sTJRVEMAs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MFAhazB_PEw:g2sTJRVEMAs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MFAhazB_PEw:g2sTJRVEMAs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MFAhazB_PEw:g2sTJRVEMAs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MFAhazB_PEw:g2sTJRVEMAs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MFAhazB_PEw:g2sTJRVEMAs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MFAhazB_PEw:g2sTJRVEMAs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3630547319069719009
title: Warning: Yet Another Bitcoin Mining Malware Targeting QNAP NAS Devices
uri: Warning-Yet-Another-Bitcoin-Mining-Malware-Targeting-QNAP-NAS-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3630547319069719009
content:
Network-attached storage (NAS) appliance maker QNAP on Tuesday released a new advisory warning of a cryptocurrency mining malware targeting its devices, urging customers to take preventive steps with immediate effect.
"A bitcoin miner has been reported to target QNAP NAS. Once a NAS is infected, CPU usage becomes unusually high where a process named '[oom_reaper]' could occupy around 50% of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D1TV76YZ-wU:Rpwgfo8RQB4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D1TV76YZ-wU:Rpwgfo8RQB4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D1TV76YZ-wU:Rpwgfo8RQB4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D1TV76YZ-wU:Rpwgfo8RQB4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D1TV76YZ-wU:Rpwgfo8RQB4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D1TV76YZ-wU:Rpwgfo8RQB4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D1TV76YZ-wU:Rpwgfo8RQB4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D1TV76YZ-wU:Rpwgfo8RQB4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5481034969309452174
title: 140,000 Reasons Why Emotet is Piggybacking on TrickBot in its Return from the Dead
uri: 140-000-Reasons-Why-Emotet-is-Piggybacking-on-TrickBot-in-its-Return-f
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5481034969309452174
content:
The operators of TrickBot malware have infected an estimated 140,000 victims across 149 countries a little over a year after attempts were to dismantle its infrastructure, even as the malware is fast becoming an entry point for Emotet, another botnet that was taken down at the start of 2021.
Most of the victims detected since November 1, 2020, are from Portugal (18%), the U.S. (14%), and India (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ee_0I3RqNk:-PX3QuePZiE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ee_0I3RqNk:-PX3QuePZiE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ee_0I3RqNk:-PX3QuePZiE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ee_0I3RqNk:-PX3QuePZiE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ee_0I3RqNk:-PX3QuePZiE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ee_0I3RqNk:-PX3QuePZiE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ee_0I3RqNk:-PX3QuePZiE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ee_0I3RqNk:-PX3QuePZiE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2860028094167482059
title: [eBook] Guide to Achieving 24x7 Threat Monitoring and Response for Lean IT Security Teams
uri: eBook-Guide-to-Achieving-24x7-Threat-Monitoring-and-Response-for-Lea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2860028094167482059
content:
If there is one thing the past few years have taught the world, it’s that cybercrime never sleeps. For organizations of any size and scope, having around-the-clock protection for their endpoints, networks, and servers is no longer optional, but it’s also not entirely feasible for many. Attackers are better than ever at slipping in undetected, and threats are constantly evolving. 
Teams can’t <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7KaC2ZRYvE:lBTEwM6pHfw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7KaC2ZRYvE:lBTEwM6pHfw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7KaC2ZRYvE:lBTEwM6pHfw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N7KaC2ZRYvE:lBTEwM6pHfw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7KaC2ZRYvE:lBTEwM6pHfw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N7KaC2ZRYvE:lBTEwM6pHfw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N7KaC2ZRYvE:lBTEwM6pHfw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N7KaC2ZRYvE:lBTEwM6pHfw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8908829916611889043
title: Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers
uri: Google-Disrupts-Blockchain-based-Glupteba-Botnet-Sues-Russian-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8908829916611889043
content:
Google on Tuesday said it took steps to disrupt the operations of a sophisticated "multi-component" botnet called Glupteba that approximately infected more than one million Windows computers across the globe and stored its command-and-control server addresses on Bitcoin's blockchain as a resilience mechanism.
As part of the efforts, Google's Threat Analysis Group (TAG) said it partnered with the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kuczZi0VHcA:_G1Vcohu4JM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kuczZi0VHcA:_G1Vcohu4JM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kuczZi0VHcA:_G1Vcohu4JM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kuczZi0VHcA:_G1Vcohu4JM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kuczZi0VHcA:_G1Vcohu4JM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kuczZi0VHcA:_G1Vcohu4JM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kuczZi0VHcA:_G1Vcohu4JM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kuczZi0VHcA:_G1Vcohu4JM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3916615364368614522
title: Over a Dozen Malicious NPM Packages Caught Hijacking Discord Servers
uri: Over-a-Dozen-Malicious-NPM-Packages-Caught-Hijacking-Discord-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3916615364368614522
content:
At least 17 malware-laced packages have been discovered on the NPM package Registry, adding to a recent barrage of malicious software hosted and delivered through open-source software repositories such as PyPi and RubyGems.
DevOps firm JFrog said the libraries, now taken down, were designed to grab Discord access tokens and environment variables from users' computers as well as gain full control<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wf-yLy_td5s:rM8SPgo3mHI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wf-yLy_td5s:rM8SPgo3mHI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wf-yLy_td5s:rM8SPgo3mHI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wf-yLy_td5s:rM8SPgo3mHI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wf-yLy_td5s:rM8SPgo3mHI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wf-yLy_td5s:rM8SPgo3mHI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wf-yLy_td5s:rM8SPgo3mHI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wf-yLy_td5s:rM8SPgo3mHI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4076125424448140023
title: SonicWall Urges Customers to Immediately Patch Critical SMA 100 Flaws
uri: SonicWall-Urges-Customers-to-Immediately-Patch-Critical-SMA-100-Flaws
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4076125424448140023
content:
Network security vendor SonicWall is urging customers to update their SMA 100 series appliances to the latest version following the discovery of multiple security vulnerabilities that could be abused by a remote attacker to take complete control of an affected system.
The flaws impact SMA 200, 210, 400, 410, and 500v products running versions 9.0.0.11-31sv and earlier, 10.2.0.8-37sv, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y7XW5BhCs74:0hLmEUvdpeY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y7XW5BhCs74:0hLmEUvdpeY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y7XW5BhCs74:0hLmEUvdpeY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y7XW5BhCs74:0hLmEUvdpeY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y7XW5BhCs74:0hLmEUvdpeY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y7XW5BhCs74:0hLmEUvdpeY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y7XW5BhCs74:0hLmEUvdpeY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y7XW5BhCs74:0hLmEUvdpeY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7017287386739952883
title: Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs
uri: Over-300-000-MikroTik-Devices-Found-Vulnerable-to-Remote-Hacking-Bugs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7017287386739952883
content:
At least 300,000 IP addresses associated with MikroTik devices have been found vulnerable to multiple remotely exploitable security vulnerabilities that have since been patched by the popular supplier of routers and wireless ISP devices.
The most affected devices are located in China, Brazil, Russia, Italy, Indonesia, with the U.S. coming in at number eight, cybersecurity firm Eclypsium said in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ok5BJ88sVzE:BIbYE-G-u5c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ok5BJ88sVzE:BIbYE-G-u5c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ok5BJ88sVzE:BIbYE-G-u5c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ok5BJ88sVzE:BIbYE-G-u5c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ok5BJ88sVzE:BIbYE-G-u5c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ok5BJ88sVzE:BIbYE-G-u5c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ok5BJ88sVzE:BIbYE-G-u5c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ok5BJ88sVzE:BIbYE-G-u5c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1139221137266452446
title: Why Holidays Put Your Company at Risk of Cyber Attack (And How to Take Precautions)
uri: Why-Holidays-Put-Your-Company-at-Risk-of-Cyber-Attack-(And-How-to-Take
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1139221137266452446
content:
It is a time when many are thinking of their families and loved ones, time off work, and gift-giving – the holidays. However, while many have their minds outside the realm of work during the holiday season, often, this is when attackers plan their most sinister attacks. 
So how can you take precautions to protect your organization during these times?
Why holidays put your company at risk of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lftqC2HXbOk:4XmxATrIfEQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lftqC2HXbOk:4XmxATrIfEQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lftqC2HXbOk:4XmxATrIfEQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lftqC2HXbOk:4XmxATrIfEQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lftqC2HXbOk:4XmxATrIfEQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lftqC2HXbOk:4XmxATrIfEQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lftqC2HXbOk:4XmxATrIfEQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lftqC2HXbOk:4XmxATrIfEQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8078026585826737349
title: Russia Blocks Tor Privacy Service in Latest Censorship Move
uri: Russia-Blocks-Tor-Privacy-Service-in-Latest-Censorship-Move
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8078026585826737349
content:
Russia has stepped up its censorship efforts in the country by fully banning access to the Tor web anonymity service, coinciding with the ban of six virtual private network (VPN) operators, as the government continues to control the internet and crackdown on attempts to circumvent locally imposed web restrictions.
The Federal Service for Supervision of Communications, Information Technology and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=we2qM8J4SKA:pfcnnEYH1OU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=we2qM8J4SKA:pfcnnEYH1OU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=we2qM8J4SKA:pfcnnEYH1OU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=we2qM8J4SKA:pfcnnEYH1OU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=we2qM8J4SKA:pfcnnEYH1OU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=we2qM8J4SKA:pfcnnEYH1OU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=we2qM8J4SKA:pfcnnEYH1OU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=we2qM8J4SKA:pfcnnEYH1OU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-500836887557135297
title: BlackCat: A New Rust-based Ransomware Malware Spotted in the Wild
uri: BlackCat-A-New-Rust-based-Ransomware-Malware-Spotted-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/500836887557135297
content:
Details have emerged about what's the first Rust-language-based ransomware strain spotted in the wild that has already amassed "some victims from different countries" since its launch last month.
The ransomware, dubbed BlackCat, was disclosed by MalwareHunterTeam. "Victims can pay with Bitcoin or Monero," the researchers said in a series of tweets detailing the file-encrypting malware. "Also <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjn0LjoJC6Q:juYWOxxfqEs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjn0LjoJC6Q:juYWOxxfqEs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjn0LjoJC6Q:juYWOxxfqEs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xjn0LjoJC6Q:juYWOxxfqEs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjn0LjoJC6Q:juYWOxxfqEs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xjn0LjoJC6Q:juYWOxxfqEs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjn0LjoJC6Q:juYWOxxfqEs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xjn0LjoJC6Q:juYWOxxfqEs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4238304406094363875
title: 1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses
uri: 1-6-Million-WordPress-Sites-Under-Cyberattack-From-Over-16-000-IP-Addr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4238304406094363875
content:
As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins and 15 Epsilon Framework themes.
WordPress security company Wordfence, which disclosed details of the attacks, said Thursday it had detected and blocked more than 13.7 million attacks aimed at the plugins and themes in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hucUDAsN5J0:xGV0-MeYVcA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hucUDAsN5J0:xGV0-MeYVcA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hucUDAsN5J0:xGV0-MeYVcA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hucUDAsN5J0:xGV0-MeYVcA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hucUDAsN5J0:xGV0-MeYVcA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hucUDAsN5J0:xGV0-MeYVcA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hucUDAsN5J0:xGV0-MeYVcA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hucUDAsN5J0:xGV0-MeYVcA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4123065450151139276
title: Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk
uri: Extremely-Critical-Log4J-Vulnerability-Leaves-Much-of-the-Internet-at
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4123065450151139276
content:
The Apache Software Foundation has released fixes to contain an actively exploited zero-day vulnerability affecting the widely-used Apache Log4j Java-based logging library that could be weaponized to execute malicious code and allow a complete takeover of vulnerable systems.
Tracked as CVE-2021-44228 and by the monikers Log4Shell or LogJam, the issue concerns a case of unauthenticated, remote <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iu1bQf3Drw4:ti52ES5lVpo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iu1bQf3Drw4:ti52ES5lVpo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iu1bQf3Drw4:ti52ES5lVpo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iu1bQf3Drw4:ti52ES5lVpo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iu1bQf3Drw4:ti52ES5lVpo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iu1bQf3Drw4:ti52ES5lVpo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iu1bQf3Drw4:ti52ES5lVpo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iu1bQf3Drw4:ti52ES5lVpo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-82987648310906851
title: Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack
uri: Apache-Log4j-Vulnerability-Log4Shell-Widely-Under-Active-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/82987648310906851
content:
Threat actors are actively weaponizing unpatched servers affected by the newly disclosed "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, Cobalt Strike, and recruit the devices into a botnet, even as telemetry signs point to exploitation of the flaw nine days before it even came to light.
Netlab, the networking security division of Chinese tech giant Qihoo 360, disclosed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P80rGDHZCNY:DFiliLVgM9E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P80rGDHZCNY:DFiliLVgM9E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P80rGDHZCNY:DFiliLVgM9E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P80rGDHZCNY:DFiliLVgM9E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P80rGDHZCNY:DFiliLVgM9E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P80rGDHZCNY:DFiliLVgM9E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P80rGDHZCNY:DFiliLVgM9E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P80rGDHZCNY:DFiliLVgM9E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-746630323375867037
title: Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan
uri: Microsoft-Details-Building-Blocks-of-Widely-Active-Qakbot-Banking-Troj
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/746630323375867037
content:
Infection chains associated with the multi-purpose Qakbot malware have been broken down into "distinct building blocks," an effort that Microsoft said will help to detect and block the threat in an effective manner proactively.
The Microsoft 365 Defender Threat Intelligence Team dubbed Qakbot a "customizable chameleon that adapts to suit the needs of the multiple threat actor groups that utilize<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1fpfdmXT5Hs:qIDWSlHilBA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1fpfdmXT5Hs:qIDWSlHilBA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1fpfdmXT5Hs:qIDWSlHilBA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1fpfdmXT5Hs:qIDWSlHilBA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1fpfdmXT5Hs:qIDWSlHilBA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1fpfdmXT5Hs:qIDWSlHilBA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1fpfdmXT5Hs:qIDWSlHilBA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1fpfdmXT5Hs:qIDWSlHilBA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8954791250333749598
title: Top 3 SaaS Security Threats for 2022
uri: Top-3-SaaS-Security-Threats-for-2022
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8954791250333749598
content:
With 2021 drawing to a close and many closing their plans and budgets for 2022, the time has come to do a brief wrap-up of the SaaS Security challenges on the horizon.
Here are the top 3 SaaS security posture challenges as we see them. 
1 — The Mess of Misconfiguration Management
The good news is that more businesses than ever are using SaaS apps such as GitHub, Microsoft 365, Salesforce, Slack,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3vVYupyV_A:hGoE3wjBGxU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3vVYupyV_A:hGoE3wjBGxU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3vVYupyV_A:hGoE3wjBGxU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a3vVYupyV_A:hGoE3wjBGxU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3vVYupyV_A:hGoE3wjBGxU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a3vVYupyV_A:hGoE3wjBGxU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3vVYupyV_A:hGoE3wjBGxU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a3vVYupyV_A:hGoE3wjBGxU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6223119469212780658
title: Karakurt: A New Emerging Data Theft and Cyber Extortion Hacking Group
uri: Karakurt-A-New-Emerging-Data-Theft-and-Cyber-Extortion-Hacking-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6223119469212780658
content:
A previously undocumented, financially motivated threat group has been connected to a string of data theft and extortion attacks on over 40 entities between September and November 2021.
The hacker collective, which goes by the self-proclaimed name Karakurt and was first identified in June 2021, is capable of modifying its tactics and techniques to adapt to the targeted environment, Accenture's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=18XXYvkIYMg:sGjnRoPr-Sc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=18XXYvkIYMg:sGjnRoPr-Sc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=18XXYvkIYMg:sGjnRoPr-Sc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=18XXYvkIYMg:sGjnRoPr-Sc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=18XXYvkIYMg:sGjnRoPr-Sc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=18XXYvkIYMg:sGjnRoPr-Sc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=18XXYvkIYMg:sGjnRoPr-Sc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=18XXYvkIYMg:sGjnRoPr-Sc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7060882504557607688
title: Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones
uri: Latest-Apple-iOS-Update-Patches-Remote-Jailbreak-Exploit-for-iPhones
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7060882504557607688
content:
Apple on Monday released updates to iOS, macOS, tvOS, and watchOS with security patches for multiple vulnerabilities, including a remote jailbreak exploit chain as well as a number of critical issues in the Kernel and Safari web browser that were first demonstrated at the Tianfu Cup held in China two months ago.
Tracked as CVE-2021-30955, the issue could have enabled a malicious application to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=INsp6vG4CcI:4190ENJX_b0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=INsp6vG4CcI:4190ENJX_b0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=INsp6vG4CcI:4190ENJX_b0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=INsp6vG4CcI:4190ENJX_b0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=INsp6vG4CcI:4190ENJX_b0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=INsp6vG4CcI:4190ENJX_b0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=INsp6vG4CcI:4190ENJX_b0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=INsp6vG4CcI:4190ENJX_b0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1262235605087218960
title: Update Google Chrome to Patch New Zero-Day Exploit Detected in the Wild
uri: Update-Google-Chrome-to-Patch-New-Zero-Day-Exploit-Detected-in-the-Wil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1262235605087218960
content:
Google has rolled out fixes for five security vulnerabilities in its Chrome web browser, including one which it says is being exploited in the wild, making it the 17th such weakness to be disclosed since the start of the year.
Tracked as CVE-2021-4102, the flaw relates to a use-after-free bug in the V8 JavaScript and WebAssembly engine, which could have severe consequences ranging from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5rlz60cxreo:4D9MplOIYF8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5rlz60cxreo:4D9MplOIYF8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5rlz60cxreo:4D9MplOIYF8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5rlz60cxreo:4D9MplOIYF8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5rlz60cxreo:4D9MplOIYF8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5rlz60cxreo:4D9MplOIYF8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5rlz60cxreo:4D9MplOIYF8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5rlz60cxreo:4D9MplOIYF8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3716530508736152218
title: Ransomware Affiliate Arrested in Romania; 51 Stolen Data Brokers Arrested in Ukraine
uri: Ransomware-Affiliate-Arrested-in-Romania-51-Stolen-Data-Brokers-Arres
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3716530508736152218
content:
Europol, the European Union's premier law enforcement agency, has announced the arrest of a third Romanian national for his role as a ransomware affiliate suspected of hacking high-profile organizations and companies and stealing large volumes of sensitive data.
The 41-year-old unnamed individual was apprehended Monday morning at his home in Craiova, Romania, by the Romanian Directorate for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FX40XHUEDZY:62ZHUeOariA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FX40XHUEDZY:62ZHUeOariA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FX40XHUEDZY:62ZHUeOariA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FX40XHUEDZY:62ZHUeOariA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FX40XHUEDZY:62ZHUeOariA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FX40XHUEDZY:62ZHUeOariA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FX40XHUEDZY:62ZHUeOariA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FX40XHUEDZY:62ZHUeOariA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6416836701897715657
title: Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware
uri: Hackers-Exploit-Log4j-Vulnerability-to-Infect-Computers-with-Khonsari
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6416836701897715657
content:
Romanian cybersecurity technology company Bitdefender on Monday revealed that attempts are being made to target Windows machines with a novel ransomware family called Khonsari as well as a remote access Trojan named Orcus by exploiting the recently disclosed critical Log4j vulnerability.
The attack leverages the remote code execution flaw to download an additional payload, a .NET binary, from a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GbQDXiIAMVs:oM7VrI5HDOk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GbQDXiIAMVs:oM7VrI5HDOk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GbQDXiIAMVs:oM7VrI5HDOk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GbQDXiIAMVs:oM7VrI5HDOk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GbQDXiIAMVs:oM7VrI5HDOk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GbQDXiIAMVs:oM7VrI5HDOk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GbQDXiIAMVs:oM7VrI5HDOk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GbQDXiIAMVs:oM7VrI5HDOk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-590662651616894912
title: How Extended Security Posture Management Optimizes Your Security Stack
uri: How-Extended-Security-Posture-Management-Optimizes-Your-Security-Stack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/590662651616894912
content:
As a CISO, one of the most challenging questions to answer is "How well are we protected right now?" Between the acceleration of hackers' offensive capabilities and the dynamic nature of information networks, a drift in the security posture is unavoidable and needs to be continuously compensated. Therefore, answering that question implies continuously validating the security posture and being in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KmGf1SjPJKc:Y6p9phYOffw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KmGf1SjPJKc:Y6p9phYOffw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KmGf1SjPJKc:Y6p9phYOffw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KmGf1SjPJKc:Y6p9phYOffw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KmGf1SjPJKc:Y6p9phYOffw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KmGf1SjPJKc:Y6p9phYOffw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KmGf1SjPJKc:Y6p9phYOffw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KmGf1SjPJKc:Y6p9phYOffw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-988241140847945588
title: Microsoft Issues Windows Update to Patch 0-Day Used to Spread Emotet Malware
uri: Microsoft-Issues-Windows-Update-to-Patch-0-Day-Used-to-Spread-Emotet-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/988241140847945588
content:
Microsoft has rolled out Patch Tuesday updates to address multiple security vulnerabilities in Windows and other software, including one actively exploited flaw that's being abused to deliver Emotet, TrickBot, or Bazaloader malware payloads.
The latest monthly release for December fixes a total of 67 flaws, bringing the total number of bugs patched by the company this year to 887, according to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hCU2iBQUkzk:P4VKiNrQdFg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hCU2iBQUkzk:P4VKiNrQdFg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hCU2iBQUkzk:P4VKiNrQdFg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hCU2iBQUkzk:P4VKiNrQdFg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hCU2iBQUkzk:P4VKiNrQdFg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hCU2iBQUkzk:P4VKiNrQdFg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hCU2iBQUkzk:P4VKiNrQdFg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hCU2iBQUkzk:P4VKiNrQdFg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6408330951072560638
title: Second Log4j Vulnerability (CVE-2021-45046) Discovered — New Patch Released
uri: Second-Log4j-Vulnerability-(CVE-2021-45046)-Discovered-New-Patch-R
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6408330951072560638
content:
The Apache Software Foundation (ASF) has pushed out a new fix for the Log4j logging utility after the previous patch for the recently disclosed Log4Shell exploit was deemed as "incomplete in certain non-default configurations."
The second vulnerability — tracked as CVE-2021-45046 — is rated 3.7 out of a maximum of 10 on the CVSS rating system and affects all versions of Log4j from 2.0-beta9 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2YiNkFbnTgE:YuJdkw-ssM8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2YiNkFbnTgE:YuJdkw-ssM8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2YiNkFbnTgE:YuJdkw-ssM8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2YiNkFbnTgE:YuJdkw-ssM8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2YiNkFbnTgE:YuJdkw-ssM8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2YiNkFbnTgE:YuJdkw-ssM8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2YiNkFbnTgE:YuJdkw-ssM8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2YiNkFbnTgE:YuJdkw-ssM8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5409702425291622733
title: Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange Credentials
uri: Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5409702425291622733
content:
Malicious actors are deploying a previously undiscovered binary, an Internet Information Services (IIS) webserver module dubbed "Owowa," on Microsoft Exchange Outlook Web Access servers with the goal of stealing credentials and enabling remote command execution.
"Owowa is a C#-developed .NET v4.0 assembly that is intended to be loaded as a module within an IIS web server that also exposes <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Wq2hWpM3WQ:JNP4yd9UtzU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Wq2hWpM3WQ:JNP4yd9UtzU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Wq2hWpM3WQ:JNP4yd9UtzU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4Wq2hWpM3WQ:JNP4yd9UtzU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Wq2hWpM3WQ:JNP4yd9UtzU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4Wq2hWpM3WQ:JNP4yd9UtzU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Wq2hWpM3WQ:JNP4yd9UtzU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4Wq2hWpM3WQ:JNP4yd9UtzU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-506198890127675193
title: Facebook to Pay Hackers for Reporting Data Scraping Bugs and Scraped Datasets
uri: Facebook-to-Pay-Hackers-for-Reporting-Data-Scraping-Bugs-and-Scraped-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/506198890127675193
content:
Meta Platforms, the company formerly known as Facebook, has announced that it's expanding its bug bounty program to start rewarding valid reports of scraping vulnerabilities across its platforms as well as include reports of scraping data sets that are available online.
"We know that automated activity designed to scrape people's public and private data targets every website or service," said <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyvS5DB2C5w:eDOC6-2Pwn8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyvS5DB2C5w:eDOC6-2Pwn8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyvS5DB2C5w:eDOC6-2Pwn8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SyvS5DB2C5w:eDOC6-2Pwn8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyvS5DB2C5w:eDOC6-2Pwn8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SyvS5DB2C5w:eDOC6-2Pwn8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyvS5DB2C5w:eDOC6-2Pwn8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SyvS5DB2C5w:eDOC6-2Pwn8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5095956446848442243
title: Cynet's MDR Offers Organizations Continuous Security Oversight
uri: Cynet-s-MDR-Offers-Organizations-Continuous-Security-Oversight
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5095956446848442243
content:
Today's cyber attackers are constantly looking for ways to exploit vulnerabilities and infiltrate organizations. To keep up with this evolving threat landscape, security teams must be on the lookout for potential risks around the clock. Since most organizations simply cannot afford to have 24x7 security teams, managed detection and response (MDR) services have become a critical aspect of any <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yt2q8xnuoMg:H2Dyrwhwamc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yt2q8xnuoMg:H2Dyrwhwamc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yt2q8xnuoMg:H2Dyrwhwamc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yt2q8xnuoMg:H2Dyrwhwamc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yt2q8xnuoMg:H2Dyrwhwamc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yt2q8xnuoMg:H2Dyrwhwamc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yt2q8xnuoMg:H2Dyrwhwamc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yt2q8xnuoMg:H2Dyrwhwamc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5973903521787443485
title: Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges
uri: Hackers-Begin-Exploiting-Second-Log4j-Vulnerability-as-a-Third-Flaw-Em
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5973903521787443485
content:
Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit a second bug disclosed in the widely used Log4j logging utility, making it imperative that customers move quickly to install the latest version as a barrage of attacks continues to pummel unpatched systems with a variety of malware.
The new vulnerability, assigned the identifier <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f598NaUzjUA:-iHTVcQIiQA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f598NaUzjUA:-iHTVcQIiQA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f598NaUzjUA:-iHTVcQIiQA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f598NaUzjUA:-iHTVcQIiQA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f598NaUzjUA:-iHTVcQIiQA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f598NaUzjUA:-iHTVcQIiQA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f598NaUzjUA:-iHTVcQIiQA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f598NaUzjUA:-iHTVcQIiQA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1606921182895038612
title: New Fileless Malware Uses Windows Registry as Storage to Evade Detection
uri: New-Fileless-Malware-Uses-Windows-Registry-as-Storage-to-Evade-Detecti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1606921182895038612
content:
A new JavaScript-based remote access Trojan (RAT) propagated via a social engineering campaign has been observed employing sneaky "fileless" techniques as part of its detection-evasion methods to elude discovery and analysis.
Dubbed DarkWatchman by researchers from Prevailion's Adversarial Counterintelligence Team (PACT), the malware uses a resilient domain generation algorithm (DGA) to identify<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eqR-m22mdYo:v3L1DLaLPaY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eqR-m22mdYo:v3L1DLaLPaY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eqR-m22mdYo:v3L1DLaLPaY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eqR-m22mdYo:v3L1DLaLPaY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eqR-m22mdYo:v3L1DLaLPaY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eqR-m22mdYo:v3L1DLaLPaY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eqR-m22mdYo:v3L1DLaLPaY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eqR-m22mdYo:v3L1DLaLPaY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6643366334108899173
title: Researchers Uncover New Coexistence Attacks On Wi-Fi and Bluetooth Chips
uri: Researchers-Uncover-New-Coexistence-Attacks-On-Wi-Fi-and-Bluetooth-Chi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6643366334108899173
content:
Cybersecurity researchers have demonstrated a new attack technique that makes it possible to leverage a device's Bluetooth component to directly extract network passwords and manipulate traffic on a Wi-Fi chip.
The novel attacks work against the so-called "combo chips," which are specialized chips that are equipped to handle different types of radio wave-based wireless communications, such as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NjCVVLgrIMA:CSWRhaWUHAc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NjCVVLgrIMA:CSWRhaWUHAc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NjCVVLgrIMA:CSWRhaWUHAc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NjCVVLgrIMA:CSWRhaWUHAc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NjCVVLgrIMA:CSWRhaWUHAc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NjCVVLgrIMA:CSWRhaWUHAc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NjCVVLgrIMA:CSWRhaWUHAc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NjCVVLgrIMA:CSWRhaWUHAc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7101892836461114102
title: The Guide to Automating Security Training for Lean Security Teams
uri: The-Guide-to-Automating-Security-Training-for-Lean-Security-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7101892836461114102
content:
Cyber threats used to be less threatening. While nobody wants their customers' credit card numbers stolen in a data breach, or to see a deranged manifesto plastered over their company website, such incidents can almost seem quaint compared to ransomware attacks that bring all of your critical information systems to a dead halt.
The frequency of these attacks increased more than 150% in the U.S. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ane7pToFtWU:eqoAbBprQ3U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ane7pToFtWU:eqoAbBprQ3U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ane7pToFtWU:eqoAbBprQ3U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ane7pToFtWU:eqoAbBprQ3U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ane7pToFtWU:eqoAbBprQ3U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ane7pToFtWU:eqoAbBprQ3U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ane7pToFtWU:eqoAbBprQ3U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ane7pToFtWU:eqoAbBprQ3U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2118493992710402374
title: New Phorpiex Botnet Variant Steals Half a Million Dollars in Cryptocurrency
uri: New-Phorpiex-Botnet-Variant-Steals-Half-a-Million-Dollars-in-Cryptocur
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2118493992710402374
content:
Cryptocurrency users in Ethiopia, Nigeria, India, Guatemala, and the Philippines are being targeted by a new variant of the Phorpiex botnet called Twizt that has resulted in the theft of virtual coins amounting to $500,000 over the last one year.
Israeli security firm Check Point Research, which detailed the attacks, said the latest evolutionary version "enables the botnet to operate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L9r8Z9jOvDQ:mWV6eHcj7-8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L9r8Z9jOvDQ:mWV6eHcj7-8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L9r8Z9jOvDQ:mWV6eHcj7-8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L9r8Z9jOvDQ:mWV6eHcj7-8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L9r8Z9jOvDQ:mWV6eHcj7-8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L9r8Z9jOvDQ:mWV6eHcj7-8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L9r8Z9jOvDQ:mWV6eHcj7-8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L9r8Z9jOvDQ:mWV6eHcj7-8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1421609930498604976
title: New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021
uri: New-PseudoManuscrypt-Malware-Infected-Over-35-000-Computers-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1421609930498604976
content:
Industrial and government organizations, including enterprises in the military-industrial complex and research laboratories, are the targets of a new malware botnet dubbed PseudoManyscrypt that has infected roughly 35,000 Windows computers this year alone.
The name comes from its similarities to the Manuscrypt malware, which is part of the Lazarus APT group's attack toolset, Kaspersky <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TPeDr7gyRMo:CY1Xktd4TfA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TPeDr7gyRMo:CY1Xktd4TfA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TPeDr7gyRMo:CY1Xktd4TfA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TPeDr7gyRMo:CY1Xktd4TfA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TPeDr7gyRMo:CY1Xktd4TfA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TPeDr7gyRMo:CY1Xktd4TfA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TPeDr7gyRMo:CY1Xktd4TfA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TPeDr7gyRMo:CY1Xktd4TfA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3575822768093325020
title: How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools
uri: How-to-Prevent-Customer-Support-Help-Desk-Fraud-Using-VPN-and-Other-To
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3575822768093325020
content:
It's no secret that the internet isn't a very safe place. And it's not hard to understand why. It's a medium that connects billions of people around the world that affords bad actors enough anonymity to wreak havoc without getting caught. It's almost as if the internet's tailor-made to enable scams and fraud.
And that's just what it does. Right now, the world's on track to lose $10.5 trillion <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2yWad8fR9CM:sHsV6TaY9lo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2yWad8fR9CM:sHsV6TaY9lo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2yWad8fR9CM:sHsV6TaY9lo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2yWad8fR9CM:sHsV6TaY9lo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2yWad8fR9CM:sHsV6TaY9lo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2yWad8fR9CM:sHsV6TaY9lo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2yWad8fR9CM:sHsV6TaY9lo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2yWad8fR9CM:sHsV6TaY9lo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-822730539197603189
title: Facebook Bans 7 'Cyber Mercenary' Companies for Spying on 50,000 Users
uri: Facebook-Bans-7-Cyber-Mercenary-Companies-for-Spying-on-50-000-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/822730539197603189
content:
Meta Platforms on Thursday revealed it took steps to deplatform seven cyber mercenaries that it said carried out "indiscriminate" targeting of journalists, dissidents, critics of authoritarian regimes, families of opposition, and human rights activists located in over 100 countries, amid mounting scrutiny of surveillance technologies.
To that end, the company said it alerted 50,000 users of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYnm6biIXS0:ucLlaMprEIs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYnm6biIXS0:ucLlaMprEIs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYnm6biIXS0:ucLlaMprEIs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lYnm6biIXS0:ucLlaMprEIs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYnm6biIXS0:ucLlaMprEIs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lYnm6biIXS0:ucLlaMprEIs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYnm6biIXS0:ucLlaMprEIs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lYnm6biIXS0:ucLlaMprEIs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8229636188805845285
title: Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability
uri: Apache-Issues-3rd-Patch-to-Fix-New-High-Severity-Log4j-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8229636188805845285
content:
The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2.17.0 — for the widely used logging library that could be exploited by malicious actors to stage a denial-of-service (DoS) attack.

Tracked as CVE-2021-45105 (CVSS score: 7.5), the new vulnerability affects all versions of the tool from 2.0-beta9 to 2.16.0, which <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q4cmkVPxg08:lyOBkiPUbYg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q4cmkVPxg08:lyOBkiPUbYg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q4cmkVPxg08:lyOBkiPUbYg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q4cmkVPxg08:lyOBkiPUbYg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q4cmkVPxg08:lyOBkiPUbYg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q4cmkVPxg08:lyOBkiPUbYg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q4cmkVPxg08:lyOBkiPUbYg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q4cmkVPxg08:lyOBkiPUbYg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5485602817797749358
title: New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability
uri: New-Local-Attack-Vector-Expands-the-Attack-Surface-of-Log4j-Vulnerabil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5485602817797749358
content:
Cybersecurity researchers have discovered an entirely new attack vector that enables adversaries to exploit the Log4Shell vulnerability on servers locally by using a JavaScript WebSocket connection.
"This newly-discovered attack vector means that anyone with a vulnerable Log4j version on their machine or local private network can browse a website and potentially trigger the vulnerability," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7cIquPRZ9w:YeRoigKawCc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7cIquPRZ9w:YeRoigKawCc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7cIquPRZ9w:YeRoigKawCc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X7cIquPRZ9w:YeRoigKawCc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7cIquPRZ9w:YeRoigKawCc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X7cIquPRZ9w:YeRoigKawCc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X7cIquPRZ9w:YeRoigKawCc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X7cIquPRZ9w:YeRoigKawCc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-802977773212474015
title: Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store
uri: Over-500-000-Android-Users-Downloaded-a-New-Joker-Malware-App-from-Pla
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/802977773212474015
content:
A malicious Android app with more than 500,000 downloads from the Google Play app store has been found hosting malware that stealthily exfiltrates users' contact lists to an attacker-controlled server and signs up users to unwanted paid premium subscriptions without their knowledge.
The latest Joker malware was found in a messaging-focused app named Color Message ("com.guo.smscolor.amessage"), <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOmIBHvMAYc:sLKGBXFcd_M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOmIBHvMAYc:sLKGBXFcd_M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOmIBHvMAYc:sLKGBXFcd_M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cOmIBHvMAYc:sLKGBXFcd_M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOmIBHvMAYc:sLKGBXFcd_M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cOmIBHvMAYc:sLKGBXFcd_M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOmIBHvMAYc:sLKGBXFcd_M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cOmIBHvMAYc:sLKGBXFcd_M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6367401557508958071
title: Experts Discover Backdoor Deployed on the U.S. Federal Agency's Network
uri: Experts-Discover-Backdoor-Deployed-on-the-U-S-Federal-Agency-s-Networ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6367401557508958071
content:
A U.S. federal government commission associated with international rights has been targeted by a backdoor that reportedly compromised its internal network in what the researchers described as a "classic APT-type operation." 
"This attack could have given total visibility of the network and complete control of a system and thus could be used as the first step in a multi-stage attack to penetrate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zTHltkbg7k:ZXNKMopnJjk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zTHltkbg7k:ZXNKMopnJjk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zTHltkbg7k:ZXNKMopnJjk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5zTHltkbg7k:ZXNKMopnJjk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zTHltkbg7k:ZXNKMopnJjk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5zTHltkbg7k:ZXNKMopnJjk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zTHltkbg7k:ZXNKMopnJjk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5zTHltkbg7k:ZXNKMopnJjk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1181767744463788890
title: How to see if cybersecurity of your organization is in check for the New Year
uri: How-to-see-if-cybersecurity-of-your-organization-is-in-check-for-the-N
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1181767744463788890
content:
The last several years have seen an ever-increasing number of cyber-attacks, and while the frequency of such attacks has increased, so too has the resulting damage. One needs only to look at CISA's list of significant cyber incidents to appreciate the magnitude of the problem. In May of 2021, for example, a ransomware attack brought down the Colonial Pipeline, causing a serious fuel disruption <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DW0VRDBH12w:lscI4o3dkwI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DW0VRDBH12w:lscI4o3dkwI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DW0VRDBH12w:lscI4o3dkwI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DW0VRDBH12w:lscI4o3dkwI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DW0VRDBH12w:lscI4o3dkwI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DW0VRDBH12w:lscI4o3dkwI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DW0VRDBH12w:lscI4o3dkwI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DW0VRDBH12w:lscI4o3dkwI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1748646383760797542
title: New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G
uri: New-Mobile-Network-Vulnerabilities-Affect-All-Cellular-Generations-Sin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1748646383760797542
content:
Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service (DoS) and man-in-the-middle (MitM) attacks using low-cost equipment.
The "vulnerabilities in the handover procedure are not limited to one handover case only but they impact all different handover <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnmG7-ns7tM:xIrihgTSZtA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnmG7-ns7tM:xIrihgTSZtA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnmG7-ns7tM:xIrihgTSZtA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BnmG7-ns7tM:xIrihgTSZtA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnmG7-ns7tM:xIrihgTSZtA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BnmG7-ns7tM:xIrihgTSZtA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnmG7-ns7tM:xIrihgTSZtA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BnmG7-ns7tM:xIrihgTSZtA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7112568936644314193
title: Meta Sues Hackers Behind Facebook, WhatsApp and Instagram Phishing Attacks
uri: Meta-Sues-Hackers-Behind-Facebook-WhatsApp-and-Instagram-Phishing-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7112568936644314193
content:
Facebook's parent company Meta Platforms on Monday said it has filed a federal lawsuit in the U.S. state of California against bad actors who operated more than 39,000 phishing websites that impersonated its digital properties to mislead unsuspecting users into divulging their login credentials.
The social engineering scheme involved the creation of rogue webpages that masqueraded as the login <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4F7A2GQXQ08:wrbC5nGLHfM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4F7A2GQXQ08:wrbC5nGLHfM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4F7A2GQXQ08:wrbC5nGLHfM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4F7A2GQXQ08:wrbC5nGLHfM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4F7A2GQXQ08:wrbC5nGLHfM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4F7A2GQXQ08:wrbC5nGLHfM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4F7A2GQXQ08:wrbC5nGLHfM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4F7A2GQXQ08:wrbC5nGLHfM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8569101703708014151
title: Secret Backdoors Found in German-made Auerswald VoIP System
uri: Secret-Backdoors-Found-in-German-made-Auerswald-VoIP-System
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8569101703708014151
content:
Multiple backdoors have been discovered during a penetration test in the firmware of a widely used voice over Internet Protocol (VoIP) appliance from Auerswald, a German telecommunications hardware manufacturer, that could be abused to gain full administrative access to the devices.
"Two backdoor passwords were found in the firmware of the COMpact 5500R PBX," researchers from RedTeam Pentesting <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zvbopMFbDyo:6SE_lx8bFvQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zvbopMFbDyo:6SE_lx8bFvQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zvbopMFbDyo:6SE_lx8bFvQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zvbopMFbDyo:6SE_lx8bFvQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zvbopMFbDyo:6SE_lx8bFvQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zvbopMFbDyo:6SE_lx8bFvQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zvbopMFbDyo:6SE_lx8bFvQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zvbopMFbDyo:6SE_lx8bFvQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3681381490465644598
title: Tropic Trooper Cyber Espionage Hackers Targeting Transportation Sector
uri: Tropic-Trooper-Cyber-Espionage-Hackers-Targeting-Transportation-Sector
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3681381490465644598
content:
Transportation industry and government agencies related to the sector are the victims of an ongoing campaign since July 2020 by a sophisticated and well-equipped cyberespionage group in what appears to be yet another uptick in malicious activities that are "just the tip of the iceberg."
"The group tried to access some internal documents (such as flight schedules and documents for financial plans<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9ybLeSQ8tk:3QQk3yUwwBs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9ybLeSQ8tk:3QQk3yUwwBs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9ybLeSQ8tk:3QQk3yUwwBs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F9ybLeSQ8tk:3QQk3yUwwBs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9ybLeSQ8tk:3QQk3yUwwBs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F9ybLeSQ8tk:3QQk3yUwwBs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F9ybLeSQ8tk:3QQk3yUwwBs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F9ybLeSQ8tk:3QQk3yUwwBs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2907365611086675958
title: Top 7 common Cybersecurity Myths — Busted
uri: Top-7-common-Cybersecurity-Myths-Busted
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2907365611086675958
content:
Even with the growing awareness about cybersecurity, many myths about it are prevalent. These misconceptions can be a barrier to effective security. 
The first step to ensure the security of your business is to separate the false information, myths, and rumors from the truth.
Here, we're busting some common cybersecurity myths. Read on to find out which of the following you thought were true.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ckCxP-1mFcU:-hlPdmlHWiE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ckCxP-1mFcU:-hlPdmlHWiE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ckCxP-1mFcU:-hlPdmlHWiE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ckCxP-1mFcU:-hlPdmlHWiE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ckCxP-1mFcU:-hlPdmlHWiE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ckCxP-1mFcU:-hlPdmlHWiE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ckCxP-1mFcU:-hlPdmlHWiE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ckCxP-1mFcU:-hlPdmlHWiE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4590358325815938563
title: New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw
uri: New-Exploit-Lets-Malware-Attackers-Bypass-Patch-for-Critical-Microsoft
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4590358325815938563
content:
A short-lived phishing campaign has been observed taking advantage of a novel exploit that bypassed a patch put in place by Microsoft to fix a remote code execution vulnerability affecting the MSHTML component with the goal of delivering Formbook malware.
"The attachments represent an escalation of the attacker's abuse of the CVE-2021-40444 bug and demonstrate that even a patch can't always <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdy61QKIINs:4aOCxt48XQM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdy61QKIINs:4aOCxt48XQM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdy61QKIINs:4aOCxt48XQM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xdy61QKIINs:4aOCxt48XQM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdy61QKIINs:4aOCxt48XQM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xdy61QKIINs:4aOCxt48XQM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdy61QKIINs:4aOCxt48XQM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xdy61QKIINs:4aOCxt48XQM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3534774718911501756
title: Active Directory Bugs Could Let hackers Take Over Windows Domain Controllers
uri: Active-Directory-Bugs-Could-Let-hackers-Take-Over-Windows-Domain-Contr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3534774718911501756
content:
Microsoft is urging customers to patch two security vulnerabilities in Active Directory domain controllers that it addressed in November following the availability of a proof-of-concept (PoC) tool on December 12.
The two vulnerabilities — tracked as CVE-2021-42278 and CVE-2021-42287 — have a severity rating of 7.5 out of a maximum of 10 and concern a privilege escalation flaw affecting the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DVkNpTC-Xck:dc8g2IgjaAU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DVkNpTC-Xck:dc8g2IgjaAU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DVkNpTC-Xck:dc8g2IgjaAU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DVkNpTC-Xck:dc8g2IgjaAU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DVkNpTC-Xck:dc8g2IgjaAU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DVkNpTC-Xck:dc8g2IgjaAU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DVkNpTC-Xck:dc8g2IgjaAU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DVkNpTC-Xck:dc8g2IgjaAU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4529256982993036104
title: China suspends deal with Alibaba for not sharing Log4j 0-day first with the government
uri: China-suspends-deal-with-Alibaba-for-not-sharing-Log4j-0-day-first-wit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4529256982993036104
content:
China's internet regulator, the Ministry of Industry and Information Technology (MIIT), has suspended a partnership with Alibaba Cloud, the cloud computing subsidiary of e-commerce giant Alibaba Group, for six months for failing to promptly report a critical security vulnerability affecting the broadly used Log4j logging library.
The development was reported by Reuters and South China Morning <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BzIfJ0zSjFg:0tgM7O3eolA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BzIfJ0zSjFg:0tgM7O3eolA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BzIfJ0zSjFg:0tgM7O3eolA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BzIfJ0zSjFg:0tgM7O3eolA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BzIfJ0zSjFg:0tgM7O3eolA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BzIfJ0zSjFg:0tgM7O3eolA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BzIfJ0zSjFg:0tgM7O3eolA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BzIfJ0zSjFg:0tgM7O3eolA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8376126757554955806
title: 4-Year-Old Bug in Azure App Service Exposed Hundreds of Source Code Repositories
uri: 4-Year-Old-Bug-in-Azure-App-Service-Exposed-Hundreds-of-Source-Code-Re
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8376126757554955806
content:
A security flaw has been unearthed in Microsoft's Azure App Service that resulted in the exposure of source code of customer applications written in Java, Node, PHP, Python, and Ruby for at least four years since September 2017.
The vulnerability, codenamed "NotLegit," was reported to the tech giant by Wiz researchers on October 7, 2021, following which mitigations have been undertaken to fix <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8KC7IDIVmeI:ZWPdVeidRcE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8KC7IDIVmeI:ZWPdVeidRcE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8KC7IDIVmeI:ZWPdVeidRcE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8KC7IDIVmeI:ZWPdVeidRcE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8KC7IDIVmeI:ZWPdVeidRcE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8KC7IDIVmeI:ZWPdVeidRcE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8KC7IDIVmeI:ZWPdVeidRcE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8KC7IDIVmeI:ZWPdVeidRcE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1910553187844813345
title: Researchers Disclose Unpatched Vulnerabilities in Microsoft Teams Software
uri: Researchers-Disclose-Unpatched-Vulnerabilities-in-Microsoft-Teams-Soft
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1910553187844813345
content:
Microsoft said it won't be fixing or is pushing patches to a later date for three of the four security flaws uncovered in its Teams business communication platform earlier this March.
The disclosure comes from Berlin-based cybersecurity firm Positive Security, which found that the implementation of the link preview feature was susceptible to a number of issues that could "allow accessing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_45aDjMKgOs:sxA5Ba8hf4o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_45aDjMKgOs:sxA5Ba8hf4o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_45aDjMKgOs:sxA5Ba8hf4o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_45aDjMKgOs:sxA5Ba8hf4o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_45aDjMKgOs:sxA5Ba8hf4o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_45aDjMKgOs:sxA5Ba8hf4o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_45aDjMKgOs:sxA5Ba8hf4o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_45aDjMKgOs:sxA5Ba8hf4o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8418027446854056470
title: CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities
uri: CISA-FBI-and-NSA-Publish-Joint-Advisory-and-Scanner-for-Log4j-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8418027446854056470
content:
Cybersecurity agencies from Australia, Canada, New Zealand, the U.S., and the U.K. on Wednesday released a joint advisory in response to widespread exploitation of multiple vulnerabilities in Apache's Log4j software library by nefarious adversaries.
"These vulnerabilities, especially Log4Shell, are severe," the intelligence agencies said in the new guidance. "Sophisticated cyber threat actors <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BGRktZIhfA:OmTLcf4FZOk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BGRktZIhfA:OmTLcf4FZOk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BGRktZIhfA:OmTLcf4FZOk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0BGRktZIhfA:OmTLcf4FZOk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BGRktZIhfA:OmTLcf4FZOk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0BGRktZIhfA:OmTLcf4FZOk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BGRktZIhfA:OmTLcf4FZOk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0BGRktZIhfA:OmTLcf4FZOk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5115149849949663173
title: IoT SAFE — An Innovative Way to Secure IoT
uri: IoT-SAFE-An-Innovative-Way-to-Secure-IoT
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5115149849949663173
content:
By the end of 2021, there will be 12 billion connected IoT devices, and by 2025, that number will rise to 27 billion.
All these devices will be connected to the internet and will send useful data that will make industries, medicine, and cars more intelligent and more efficient.
However, will all these devices be safe? It's worth asking what you can do to prevent (or at least reduce) becoming a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0FSqV_WOvGI:aWSsifbtZDk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0FSqV_WOvGI:aWSsifbtZDk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0FSqV_WOvGI:aWSsifbtZDk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0FSqV_WOvGI:aWSsifbtZDk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0FSqV_WOvGI:aWSsifbtZDk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0FSqV_WOvGI:aWSsifbtZDk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0FSqV_WOvGI:aWSsifbtZDk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0FSqV_WOvGI:aWSsifbtZDk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2730277528067951814
title: New BLISTER Malware Using Code Signing Certificates to Evade Detection
uri: New-BLISTER-Malware-Using-Code-Signing-Certificates-to-Evade-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2730277528067951814
content:
Cybersecurity researchers have disclosed details of an evasive malware campaign that makes use of valid code signing certificates to sneak past security defenses and stay under the radar with the goal of deploying Cobalt Strike and BitRAT payloads on compromised systems.
The binary, a loader, has been dubbed "Blister" by researchers from Elastic Security, with the malware samples having <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H_b0eDbfGRY:ry3YUGbE380:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H_b0eDbfGRY:ry3YUGbE380:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H_b0eDbfGRY:ry3YUGbE380:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H_b0eDbfGRY:ry3YUGbE380:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H_b0eDbfGRY:ry3YUGbE380:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H_b0eDbfGRY:ry3YUGbE380:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H_b0eDbfGRY:ry3YUGbE380:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H_b0eDbfGRY:ry3YUGbE380:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-707150423817274096
title: New Ransomware Variants Flourish Amid Law Enforcement Actions
uri: New-Ransomware-Variants-Flourish-Amid-Law-Enforcement-Actions
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/707150423817274096
content:
Ransomware groups continue to evolve their tactics and techniques to deploy file-encrypting malware on compromised systems, notwithstanding law enforcement's disruptive actions against the cybercrime gangs to prevent them from victimizing additional companies.
"Be it due to law enforcement, infighting amongst groups or people abandoning variants altogether, the RaaS [ransomware-as-a-service] <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7J3xHe9N-uA:EEK_sBz2ACQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7J3xHe9N-uA:EEK_sBz2ACQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7J3xHe9N-uA:EEK_sBz2ACQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7J3xHe9N-uA:EEK_sBz2ACQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7J3xHe9N-uA:EEK_sBz2ACQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7J3xHe9N-uA:EEK_sBz2ACQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7J3xHe9N-uA:EEK_sBz2ACQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7J3xHe9N-uA:EEK_sBz2ACQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6440101874293323286
title: Expert Details macOS Bug That Could Let Malware Bypass Gatekeeper Security
uri: Expert-Details-macOS-Bug-That-Could-Let-Malware-Bypass-Gatekeeper-Secu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6440101874293323286
content:
Apple recently fixed a security vulnerability in the macOS operating system that could be potentially exploited by a threat actor to "trivially and reliably" bypass a "myriad of foundational macOS security mechanisms" and run arbitrary code.
Security researcher Patrick Wardle detailed the discovery in a series of tweets on Thursday. Tracked as CVE-2021-30853 (CVSS score: 5.5), the issue relates <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uuLl9AtcorA:0IYM_sUYQ8g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uuLl9AtcorA:0IYM_sUYQ8g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uuLl9AtcorA:0IYM_sUYQ8g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uuLl9AtcorA:0IYM_sUYQ8g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uuLl9AtcorA:0IYM_sUYQ8g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uuLl9AtcorA:0IYM_sUYQ8g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uuLl9AtcorA:0IYM_sUYQ8g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uuLl9AtcorA:0IYM_sUYQ8g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-257084537888301250
title: New Android Malware Targeting Brazil's Itaú Unibanco Bank Customers
uri: New-Android-Malware-Targeting-Brazil-s-Itaú-Unibanco-Bank-Customers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/257084537888301250
content:
Researchers have discovered a new Android banking malware that targets Brazil’s Itaú Unibanco with the help of lookalike Google Play Store pages to carry out fraudulent financial transactions on victim devices without their knowledge.
“This application has a similar icon and name that could trick users into thinking it is a legitimate app related to Itaú Unibanco,” Cyble researchers said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6QMLT42zma4:z-LujFYODyA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6QMLT42zma4:z-LujFYODyA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6QMLT42zma4:z-LujFYODyA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6QMLT42zma4:z-LujFYODyA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6QMLT42zma4:z-LujFYODyA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6QMLT42zma4:z-LujFYODyA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6QMLT42zma4:z-LujFYODyA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6QMLT42zma4:z-LujFYODyA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1287961058717316626
title: Garrett Walk-Through Metal Detectors Can Be Hacked Remotely
uri: Garrett-Walk-Through-Metal-Detectors-Can-Be-Hacked-Remotely
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1287961058717316626
content:
A number of security flaws have been uncovered in a networking component in Garrett Metal Detectors that could allow remote attackers to bypass authentication requirements, tamper with metal detector configurations, and even execute arbitrary code on the devices.
"An attacker could manipulate this module to remotely monitor statistics on the metal detector, such as whether the alarm has been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i9lZCHDSi-k:SWbimp09TKQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i9lZCHDSi-k:SWbimp09TKQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i9lZCHDSi-k:SWbimp09TKQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i9lZCHDSi-k:SWbimp09TKQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i9lZCHDSi-k:SWbimp09TKQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i9lZCHDSi-k:SWbimp09TKQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i9lZCHDSi-k:SWbimp09TKQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i9lZCHDSi-k:SWbimp09TKQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3379091007792407765
title: PECB Certified Lead Ethical Hacker: Take Your Career to the Next Level
uri: PECB-Certified-Lead-Ethical-Hacker-Take-Your-Career-to-the-Next-Level
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3379091007792407765
content:
Cybercrime is increasing exponentially and presents devastating risks for most organizations. According to Cybercrime Magazine, global cybercrime damage is predicted to hit $10.5 trillion annually as of 2025.
One of the more recent and increasingly popular forms of tackling such issues by identifying is ethical hacking. This method identifies potential security vulnerabilities in its early <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H-JM6RIigrE:ZFMwu1zhE7Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H-JM6RIigrE:ZFMwu1zhE7Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H-JM6RIigrE:ZFMwu1zhE7Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H-JM6RIigrE:ZFMwu1zhE7Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H-JM6RIigrE:ZFMwu1zhE7Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H-JM6RIigrE:ZFMwu1zhE7Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H-JM6RIigrE:ZFMwu1zhE7Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H-JM6RIigrE:ZFMwu1zhE7Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-38831913660181343
title: 'Spider-Man: No Way Home' Pirated Downloads Contain Crypto-Mining Malware
uri: Spider-Man-No-Way-Home-Pirated-Downloads-Contain-Crypto-Mining-Malw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/38831913660181343
content:
Peter Parker might not be a mastermind cryptocurrency criminal, but the name Spiderman is quickly becoming more associated with the mining landscape. ReasonLabs, a leading provider of cybersecurity prevention and detection software, recently discovered a new form of malware hacking into customer computers in the guise of the latest Spiderman movie. 
As perhaps the most talked-about movie for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kGclFebHoVk:Jgq2EJV6K6U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kGclFebHoVk:Jgq2EJV6K6U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kGclFebHoVk:Jgq2EJV6K6U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kGclFebHoVk:Jgq2EJV6K6U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kGclFebHoVk:Jgq2EJV6K6U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kGclFebHoVk:Jgq2EJV6K6U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kGclFebHoVk:Jgq2EJV6K6U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kGclFebHoVk:Jgq2EJV6K6U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3571383050849091298
title: New Android Malware Targeting Brazil's Itaú Unibanco Bank Customers
uri: 2021-12-27-New-Android-Malware-Targeting-Brazil-s-Itaú-Unibanco-Bank-Customers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3571383050849091298
content:
Researchers have discovered a new Android banking malware that targets Brazil’s Itaú Unibanco with the help of lookalike Google Play Store pages to carry out fraudulent financial transactions on victim devices without their knowledge.
“This application has a similar icon and name that could trick users into thinking it is a legitimate app related to Itaú Unibanco,” Cyble researchers said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PdTTPEMbszk:0noojaPgboc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PdTTPEMbszk:0noojaPgboc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PdTTPEMbszk:0noojaPgboc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PdTTPEMbszk:0noojaPgboc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PdTTPEMbszk:0noojaPgboc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PdTTPEMbszk:0noojaPgboc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PdTTPEMbszk:0noojaPgboc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PdTTPEMbszk:0noojaPgboc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5028179534193259132
title: Experts Detail Logging Tool of DanderSpritz Framework Used by Equation Group Hackers
uri: Experts-Detail-Logging-Tool-of-DanderSpritz-Framework-Used-by-Equation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5028179534193259132
content:
Cybersecurity researchers have offered a detailed glimpse into a system called DoubleFeature that's dedicated to logging the different stages of post-exploitation stemming from the deployment of DanderSpritz, a full-featured malware framework used by the Equation Group.
DanderSpritz came to light on April 14, 2017, when a hacking group known as the Shadow Brokers leaked the exploit tool, among <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKI8lwpBoRc:I3UuqAs7LgM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKI8lwpBoRc:I3UuqAs7LgM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKI8lwpBoRc:I3UuqAs7LgM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QKI8lwpBoRc:I3UuqAs7LgM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKI8lwpBoRc:I3UuqAs7LgM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QKI8lwpBoRc:I3UuqAs7LgM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKI8lwpBoRc:I3UuqAs7LgM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QKI8lwpBoRc:I3UuqAs7LgM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5597142694484663279
title: New Apache Log4j Update Released to Patch Newly Discovered Vulnerability
uri: New-Apache-Log4j-Update-Released-to-Patch-Newly-Discovered-Vulnerabili
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5597142694484663279
content:
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat actors to run malicious code on affected systems, making it the fifth security shortcoming to be discovered in the tool in the span of a month.
Tracked as CVE-2021-44832, the vulnerability is rated 6.6 in severity on a scale of 10 and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1nzZMdynzPY:XTv6sAueK3Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1nzZMdynzPY:XTv6sAueK3Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1nzZMdynzPY:XTv6sAueK3Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1nzZMdynzPY:XTv6sAueK3Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1nzZMdynzPY:XTv6sAueK3Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1nzZMdynzPY:XTv6sAueK3Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1nzZMdynzPY:XTv6sAueK3Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1nzZMdynzPY:XTv6sAueK3Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7511527308269822547
title: Ongoing Autom Cryptomining Malware Attacks Using Upgraded Evasion Tactics
uri: Ongoing-Autom-Cryptomining-Malware-Attacks-Using-Upgraded-Evasion-Tact
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7511527308269822547
content:
An ongoing crypto mining campaign has upgraded its arsenal while adding new defense evasion tactics that enable the threat actors to conceal the intrusions and fly under the radar, new research published today has revealed.
Since first detected in 2019, a total of 84 attacks against its honeypot servers have been recorded to date, four of which transpired in 2021, according to researchers from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6jsbjc1GpcA:KDs-DSj2dq8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6jsbjc1GpcA:KDs-DSj2dq8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6jsbjc1GpcA:KDs-DSj2dq8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6jsbjc1GpcA:KDs-DSj2dq8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6jsbjc1GpcA:KDs-DSj2dq8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6jsbjc1GpcA:KDs-DSj2dq8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6jsbjc1GpcA:KDs-DSj2dq8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6jsbjc1GpcA:KDs-DSj2dq8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3053166950411133139
title: New iLOBleed Rootkit Targeting HP Enterprise Servers with Data Wiping Attacks
uri: New-iLOBleed-Rootkit-Targeting-HP-Enterprise-Servers-with-Data-Wiping
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3053166950411133139
content:
A previously unknown rootkit has been found setting its sights on Hewlett-Packard Enterprise's Integrated Lights-Out (iLO) server management technology to carry out in-the-wild attacks that tamper with the firmware modules and completely wipe data off the infected systems.
The discovery, which is the first instance of real-world malware in iLO firmware, was documented by Iranian cybersecurity <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vkcJpFKxErk:fEVqmTuU-L0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vkcJpFKxErk:fEVqmTuU-L0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vkcJpFKxErk:fEVqmTuU-L0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vkcJpFKxErk:fEVqmTuU-L0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vkcJpFKxErk:fEVqmTuU-L0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vkcJpFKxErk:fEVqmTuU-L0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vkcJpFKxErk:fEVqmTuU-L0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vkcJpFKxErk:fEVqmTuU-L0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1090465970973387313
title: Chinese APT Hackers Used Log4Shell Exploit to Target Academic Institution
uri: Chinese-APT-Hackers-Used-Log4Shell-Exploit-to-Target-Academic-Institut
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1090465970973387313
content:
A never-before-seen China-based targeted intrusion adversary dubbed Aquatic Panda has been observed leveraging critical flaws in the Apache Log4j logging library as an access vector to perform various post-exploitation operations, including reconnaissance and credential harvesting on targeted systems.
Cybersecurity firm CrowdStrike said the infiltration, which was ultimately foiled, was aimed at<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXefMES4HhI:vzflyCKYVyg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXefMES4HhI:vzflyCKYVyg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXefMES4HhI:vzflyCKYVyg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cXefMES4HhI:vzflyCKYVyg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXefMES4HhI:vzflyCKYVyg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cXefMES4HhI:vzflyCKYVyg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXefMES4HhI:vzflyCKYVyg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cXefMES4HhI:vzflyCKYVyg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3669952339674386619
title: Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service
uri: Microsoft-Issues-Fix-for-Exchange-Y2K22-Bug-That-Crippled-Email-Delive
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3669952339674386619
content:
Microsoft, over the weekend, rolled out a fix to address an issue that caused email messages to get stuck on its Exchange Server platforms due to what it blamed on a date validation error at around the turn of the year.
"The problem relates to a date check failure with the change of the new year and it [is] not a failure of the [antivirus] engine itself," the company said in a blog post. "This <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLFlqUc-qdw:rcEL2Q9VH0Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLFlqUc-qdw:rcEL2Q9VH0Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLFlqUc-qdw:rcEL2Q9VH0Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xLFlqUc-qdw:rcEL2Q9VH0Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLFlqUc-qdw:rcEL2Q9VH0Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xLFlqUc-qdw:rcEL2Q9VH0Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLFlqUc-qdw:rcEL2Q9VH0Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xLFlqUc-qdw:rcEL2Q9VH0Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5838239456064312187
title: Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations
uri: Detecting-Evasive-Malware-on-IoT-Devices-Using-Electromagnetic-Emanati
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5838239456064312187
content:
Cybersecurity researchers have proposed a novel approach that leverages electromagnetic field emanations from the Internet of Things (IoT) devices as a side-channel to glean precise knowledge about the different kinds of malware targeting the embedded systems, even in scenarios where obfuscation techniques have been applied to hinder analysis.
With the rapid adoption of IoT appliances presenting<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j7ZH77KpbCk:nc_jXVcseq0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j7ZH77KpbCk:nc_jXVcseq0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j7ZH77KpbCk:nc_jXVcseq0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j7ZH77KpbCk:nc_jXVcseq0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j7ZH77KpbCk:nc_jXVcseq0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j7ZH77KpbCk:nc_jXVcseq0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j7ZH77KpbCk:nc_jXVcseq0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j7ZH77KpbCk:nc_jXVcseq0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2345318452622297797
title: Are Medical Devices at Risk of Ransomware Attacks?
uri: Are-Medical-Devices-at-Risk-of-Ransomware-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2345318452622297797
content:
In May 2017, the first documented ransomware assault on networked medical equipment happened. The worldwide ransomware assault WannaCry compromised radiological and other instruments in several hospitals during its height, after a software failure caused by a cyberattack on its third-party vendor's oncology cloud service, cancer patients having radiation therapy at four healthcare institutions <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udSt1ndfri0:FVRUujsK8T8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udSt1ndfri0:FVRUujsK8T8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udSt1ndfri0:FVRUujsK8T8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=udSt1ndfri0:FVRUujsK8T8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udSt1ndfri0:FVRUujsK8T8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=udSt1ndfri0:FVRUujsK8T8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=udSt1ndfri0:FVRUujsK8T8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=udSt1ndfri0:FVRUujsK8T8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3124157755775999799
title: Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware
uri: Beware-of-Fake-Telegram-Messenger-App-Hacking-PCs-with-Purple-Fox-Malw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3124157755775999799
content:
Trojanized installers of the Telegram messaging application are being used to distribute the Windows-based Purple Fox backdoor on compromised systems.
That's according to new research published by Minerva Labs, describing the attack as different from intrusions that typically take advantage of legitimate software for dropping malicious payloads.
"This threat actor was able to leave most parts of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=52MaJ1PRGyc:XL9j8CpnUTc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=52MaJ1PRGyc:XL9j8CpnUTc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=52MaJ1PRGyc:XL9j8CpnUTc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=52MaJ1PRGyc:XL9j8CpnUTc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=52MaJ1PRGyc:XL9j8CpnUTc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=52MaJ1PRGyc:XL9j8CpnUTc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=52MaJ1PRGyc:XL9j8CpnUTc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=52MaJ1PRGyc:XL9j8CpnUTc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3298911358647313032
title: Researchers Detail New HomeKit 'doorLock' Bug Affecting Apple iOS
uri: Researchers-Detail-New-HomeKit-doorLock-Bug-Affecting-Apple-iOS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3298911358647313032
content:
A persistent denial-of-service (DoS) vulnerability has been discovered in Apple's iOS mobile operating system that's capable of sending affected devices into a crash or reboot loop upon connecting to an Apple Home-compatible appliance.
The behavior, dubbed "doorLock," is trivial in that it can be triggered by simply changing the name of a HomeKit device to a string larger than 500,000 characters<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FsNmAzj_cBQ:W1Fjh2srm9o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FsNmAzj_cBQ:W1Fjh2srm9o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FsNmAzj_cBQ:W1Fjh2srm9o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FsNmAzj_cBQ:W1Fjh2srm9o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FsNmAzj_cBQ:W1Fjh2srm9o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FsNmAzj_cBQ:W1Fjh2srm9o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FsNmAzj_cBQ:W1Fjh2srm9o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FsNmAzj_cBQ:W1Fjh2srm9o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3851506360420448900
title: SAILFISH System to Find State-Inconsistency Bugs in Smart Contracts
uri: SAILFISH-System-to-Find-State-Inconsistency-Bugs-in-Smart-Contracts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3851506360420448900
content:
A group of academics from the University of California, Santa Barbara, has demonstrated what it calls a "scalable technique" to vet smart contracts and mitigate state-inconsistency bugs, discovering 47 zero-day vulnerabilities on the Ethereum blockchain in the process.
Smart contracts are programs stored on the blockchain that are automatically executed when predetermined conditions are met <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xfxxmdayR0:rUqSm2nt1yU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xfxxmdayR0:rUqSm2nt1yU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xfxxmdayR0:rUqSm2nt1yU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2xfxxmdayR0:rUqSm2nt1yU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xfxxmdayR0:rUqSm2nt1yU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2xfxxmdayR0:rUqSm2nt1yU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2xfxxmdayR0:rUqSm2nt1yU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2xfxxmdayR0:rUqSm2nt1yU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1352759881243148910
title: Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
uri: Microsoft-Warns-of-Continued-Attacks-Exploiting-Apache-Log4j-Vulnerabi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1352759881243148910
content:
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage of security vulnerabilities uncovered in the Log4j open-source logging framework to deploy malware on vulnerable systems.
"Exploitation attempts and testing have remained high during the last weeks of December," Microsoft Threat Intelligence Center (MSTIC) said in revised guidance <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWD7-mOz-_0:yCzGMyQ38q8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWD7-mOz-_0:yCzGMyQ38q8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWD7-mOz-_0:yCzGMyQ38q8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWD7-mOz-_0:yCzGMyQ38q8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWD7-mOz-_0:yCzGMyQ38q8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWD7-mOz-_0:yCzGMyQ38q8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWD7-mOz-_0:yCzGMyQ38q8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWD7-mOz-_0:yCzGMyQ38q8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7886513075861415141
title: Hackers Target Real Estate Websites with Skimmer in Latest Supply Chain Attack
uri: Hackers-Target-Real-Estate-Websites-with-Skimmer-in-Latest-Supply-Chai
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7886513075861415141
content:
Threat actors leveraged a cloud video hosting service to carry out a supply chain attack on more than 100 real estate websites operated by Sotheby's Realty that involved injecting malicious skimmers to steal sensitive personal information.
"The attacker injected the skimmer JavaScript codes into video, so whenever others import the video, their websites get embedded with skimmer codes as well," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c5VrP2t8iZs:4QO5iUffrbg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c5VrP2t8iZs:4QO5iUffrbg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c5VrP2t8iZs:4QO5iUffrbg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c5VrP2t8iZs:4QO5iUffrbg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c5VrP2t8iZs:4QO5iUffrbg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c5VrP2t8iZs:4QO5iUffrbg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c5VrP2t8iZs:4QO5iUffrbg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c5VrP2t8iZs:4QO5iUffrbg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4533469361292739614
title: New Zloader Banking Malware Campaign Exploiting Microsoft Signature Verification
uri: New-Zloader-Banking-Malware-Campaign-Exploiting-Microsoft-Signature-Ve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4533469361292739614
content:
An ongoing ZLoader malware campaign has been uncovered exploiting remote monitoring tools and Microsoft's digital signature verification to siphon user credentials and sensitive information.
Israeli cybersecurity company Check Point Research, which has been tracking the sophisticated infection chain since November 2021, attributed it to a cybercriminal group dubbed Malsmoke, citing similarities <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uPUdNWJx7sA:Yjei2JYeWbs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uPUdNWJx7sA:Yjei2JYeWbs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uPUdNWJx7sA:Yjei2JYeWbs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uPUdNWJx7sA:Yjei2JYeWbs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uPUdNWJx7sA:Yjei2JYeWbs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uPUdNWJx7sA:Yjei2JYeWbs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uPUdNWJx7sA:Yjei2JYeWbs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uPUdNWJx7sA:Yjei2JYeWbs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1315663513376712518
title: Researchers Uncover Hacker Group Behind Organized Financial-Theft Operation
uri: Researchers-Uncover-Hacker-Group-Behind-Organized-Financial-Theft-Oper
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1315663513376712518
content:
Cybersecurity researchers have taken the wraps of an organized financial-theft operation undertaken by a discreet actor to target transaction processing systems and siphon funds from entities primarily located in Latin America for at least four years.
The malicious hacking group has been codenamed Elephant Beetle by Israeli incident response firm Sygnia, with the intrusions aimed at banks and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yPZiQgkug0E:spO-qLKkAd8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yPZiQgkug0E:spO-qLKkAd8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yPZiQgkug0E:spO-qLKkAd8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yPZiQgkug0E:spO-qLKkAd8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yPZiQgkug0E:spO-qLKkAd8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yPZiQgkug0E:spO-qLKkAd8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yPZiQgkug0E:spO-qLKkAd8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yPZiQgkug0E:spO-qLKkAd8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-340806221639377392
title: Google Releases New Chrome Update to Patch Dozens of New Browser Vulnerabilities
uri: Google-Releases-New-Chrome-Update-to-Patch-Dozens-of-New-Browser-Vulne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/340806221639377392
content:
Google has rolled out the first round of updates to its Chrome web browser for 2022 to fix 37 security issues, one of which is rated Critical in severity and could be exploited to pass arbitrary code and gain control over a victim's system.
Tracked as CVE-2022-0096, the flaw relates to a use-after-free bug in the Storage component, which could have devastating effects ranging from corruption of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0GU86bxWdU:NLJqsaRImyA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0GU86bxWdU:NLJqsaRImyA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0GU86bxWdU:NLJqsaRImyA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A0GU86bxWdU:NLJqsaRImyA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0GU86bxWdU:NLJqsaRImyA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A0GU86bxWdU:NLJqsaRImyA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0GU86bxWdU:NLJqsaRImyA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A0GU86bxWdU:NLJqsaRImyA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3708042861039922393
title: VMware Patches Important Bug Affecting ESXi, Workstation and Fusion Products
uri: VMware-Patches-Important-Bug-Affecting-ESXi-Workstation-and-Fusion-Pr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3708042861039922393
content:
VMWare has shipped updates to Workstation, Fusion, and ESXi products to address an "important" security vulnerability that could be weaponized by a threat actor to take control of affected systems.
The issue relates to a heap-overflow vulnerability — tracked as CVE-2021-22045 (CVSS score: 7.7) — that, if successfully exploited, results in the execution of arbitrary code. The company credited <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ucYqUrQ8HLY:ttzGL229Dgc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ucYqUrQ8HLY:ttzGL229Dgc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ucYqUrQ8HLY:ttzGL229Dgc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ucYqUrQ8HLY:ttzGL229Dgc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ucYqUrQ8HLY:ttzGL229Dgc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ucYqUrQ8HLY:ttzGL229Dgc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ucYqUrQ8HLY:ttzGL229Dgc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ucYqUrQ8HLY:ttzGL229Dgc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7527271152100900329
title: NIST Cybersecurity Framework: A Quick Guide for SaaS Security Compliance
uri: NIST-Cybersecurity-Framework-A-Quick-Guide-for-SaaS-Security-Complian
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7527271152100900329
content:
When I want to know the most recently published best practices in cyber security, I visit The National Institute of Standards and Technology (NIST). From the latest password requirements (NIST 800-63) to IoT security for manufacturers (NISTIR 8259), NIST is always the starting point. NIST plays a key role as a US standard-setter, due to the organization's professionalism and the external experts<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z0BSFirYWRc:0U_wA4dJz-I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z0BSFirYWRc:0U_wA4dJz-I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z0BSFirYWRc:0U_wA4dJz-I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z0BSFirYWRc:0U_wA4dJz-I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z0BSFirYWRc:0U_wA4dJz-I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z0BSFirYWRc:0U_wA4dJz-I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z0BSFirYWRc:0U_wA4dJz-I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z0BSFirYWRc:0U_wA4dJz-I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4794628266970026783
title: New Trick Could Let Malware Fake iPhone Shutdown to Spy on Users Secretly
uri: New-Trick-Could-Let-Malware-Fake-iPhone-Shutdown-to-Spy-on-Users-Secre
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4794628266970026783
content:
Researchers have disclosed a novel technique by which malware on iOS can achieve persistence on an infected device by faking its shutdown process, making it impossible to physically determine if an iPhone is off or otherwise.
The discovery — dubbed "NoReboot" — comes courtesy of mobile security firm ZecOps, which found that it's possible to block and then simulate an iOS rebooting operation, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onlJpavJVCg:_03Kj5IAfkY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onlJpavJVCg:_03Kj5IAfkY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onlJpavJVCg:_03Kj5IAfkY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=onlJpavJVCg:_03Kj5IAfkY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onlJpavJVCg:_03Kj5IAfkY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=onlJpavJVCg:_03Kj5IAfkY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onlJpavJVCg:_03Kj5IAfkY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=onlJpavJVCg:_03Kj5IAfkY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1551363002886161754
title: North Korean Hackers Start New Year with Attacks on Russian Foreign Ministry
uri: North-Korean-Hackers-Start-New-Year-with-Attacks-on-Russian-Foreign-Mi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1551363002886161754
content:
A North Korean cyberespionage group named Konni has been linked to a series of targeted attacks aimed at the Russian Federation's Ministry of Foreign Affairs (MID) with New Year lures to compromise Windows systems with malware.
"This activity cluster demonstrates the patient and persistent nature of advanced actors in waging multi-phased campaigns against perceived high-value networks," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lb1B3OG5yXw:lLSsZJBVwpQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lb1B3OG5yXw:lLSsZJBVwpQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lb1B3OG5yXw:lLSsZJBVwpQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Lb1B3OG5yXw:lLSsZJBVwpQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lb1B3OG5yXw:lLSsZJBVwpQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Lb1B3OG5yXw:lLSsZJBVwpQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lb1B3OG5yXw:lLSsZJBVwpQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Lb1B3OG5yXw:lLSsZJBVwpQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1484242310419465593
title: France Fines Google, Facebook €210 Million Over Privacy Violating Tracking Cookies
uri: France-Fines-Google-Facebook-210-Million-Over-Privacy-Violating-Tr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1484242310419465593
content:
The Commission nationale de l'informatique et des libertés (CNIL), France's data protection watchdog, has slapped Facebook (now Meta Platforms) and Google with fines of €150 million ($170 million) and €60 million ($68 million) for violating E.U. privacy rules by failing to provide users with an easy option to reject cookie tracking technology.
"The websites facebook.com, google.fr and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3iPKLiUyWyk:HQwEeAYHt1Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3iPKLiUyWyk:HQwEeAYHt1Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3iPKLiUyWyk:HQwEeAYHt1Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3iPKLiUyWyk:HQwEeAYHt1Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3iPKLiUyWyk:HQwEeAYHt1Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3iPKLiUyWyk:HQwEeAYHt1Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3iPKLiUyWyk:HQwEeAYHt1Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3iPKLiUyWyk:HQwEeAYHt1Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5848992253351291284
title: Log4Shell-like Critical RCE Flaw Discovered in H2 Database Console
uri: Log4Shell-like-Critical-RCE-Flaw-Discovered-in-H2-Database-Console
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5848992253351291284
content:
Researchers have disclosed a security flaw affecting H2 database consoles that could result in remote code execution in a manner that echoes the Log4j "Log4Shell" vulnerability that came to light last month.
The issue, tracked as CVE-2021-42392, is the " first critical issue published since Log4Shell, on a component other than Log4j, that exploits the same root cause of the Log4Shell <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jL1mqqsnwpA:REMWFZU0lNs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jL1mqqsnwpA:REMWFZU0lNs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jL1mqqsnwpA:REMWFZU0lNs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jL1mqqsnwpA:REMWFZU0lNs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jL1mqqsnwpA:REMWFZU0lNs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jL1mqqsnwpA:REMWFZU0lNs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jL1mqqsnwpA:REMWFZU0lNs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jL1mqqsnwpA:REMWFZU0lNs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-952119203897194677
title: Facebook Launches 'Privacy Center' to Educate Users on Data Collection and Privacy Options
uri: Facebook-Launches-Privacy-Center-to-Educate-Users-on-Data-Collection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/952119203897194677
content:
Meta Platforms, the company formerly known as Facebook, on Friday announced the launch of a centralized Privacy Center that aims to "educate people" about its approach with regards to how it collects and processes personal information across its family of social media apps.
"Privacy Center provides helpful information about five common privacy topics: sharing, security, data collection, data use<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uHz0XDGm8So:LDBz6CmKFT0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uHz0XDGm8So:LDBz6CmKFT0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uHz0XDGm8So:LDBz6CmKFT0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uHz0XDGm8So:LDBz6CmKFT0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uHz0XDGm8So:LDBz6CmKFT0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uHz0XDGm8So:LDBz6CmKFT0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uHz0XDGm8So:LDBz6CmKFT0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uHz0XDGm8So:LDBz6CmKFT0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8193781613482225410
title: NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon
uri: NHS-Warns-of-Hackers-Targeting-Log4j-Flaws-in-VMware-Horizon
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8193781613482225410
content:
The digital security team at the U.K. National Health Service (NHS) has raised the alarm on active exploitation of Log4Shell vulnerabilities in unpatched VMware Horizon servers by an unknown threat actor to drop malicious web shells and establish persistence on affected networks for follow-on attacks.
"The attack likely consists of a reconnaissance phase, where the attacker uses the Java Naming <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJdTBnrLXAw:xVgjXpN6sqg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJdTBnrLXAw:xVgjXpN6sqg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJdTBnrLXAw:xVgjXpN6sqg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PJdTBnrLXAw:xVgjXpN6sqg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJdTBnrLXAw:xVgjXpN6sqg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PJdTBnrLXAw:xVgjXpN6sqg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJdTBnrLXAw:xVgjXpN6sqg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PJdTBnrLXAw:xVgjXpN6sqg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3447055006866033657
title: BADNEWS! Patchwork APT Hackers Score Own Goal in Recent Malware Attacks
uri: BADNEWS-Patchwork-APT-Hackers-Score-Own-Goal-in-Recent-Malware-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3447055006866033657
content:
Threat hunters have shed light on the tactics, techniques, and procedures embraced by an Indian-origin hacking group called Patchwork as part of a renewed campaign that commenced in late November 2021, targeting Pakistani government entities and individuals with a research focus on molecular medicine and biological science.
"Ironically, all the information we gathered was possible thanks to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7V8UkdcNho:FMHOU8CjWSc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7V8UkdcNho:FMHOU8CjWSc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7V8UkdcNho:FMHOU8CjWSc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7V8UkdcNho:FMHOU8CjWSc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7V8UkdcNho:FMHOU8CjWSc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7V8UkdcNho:FMHOU8CjWSc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7V8UkdcNho:FMHOU8CjWSc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7V8UkdcNho:FMHOU8CjWSc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6095414182517233505
title: Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries
uri: Researchers-Find-Bugs-in-Over-A-Dozen-Widely-Used-URL-Parser-Libraries
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6095414182517233505
content:
A study of 16 different Uniform Resource Locator (URL) parsing libraries has unearthed inconsistencies and confusions that could be exploited to bypass validations and open the door to a wide range of attack vectors.
In a deep-dive analysis jointly conducted by cybersecurity firms Claroty  and Synk, eight security vulnerabilities were identified in as many third-party libraries written in C, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vv_D4bTHQcE:L1NxlZV2-z0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vv_D4bTHQcE:L1NxlZV2-z0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vv_D4bTHQcE:L1NxlZV2-z0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Vv_D4bTHQcE:L1NxlZV2-z0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vv_D4bTHQcE:L1NxlZV2-z0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Vv_D4bTHQcE:L1NxlZV2-z0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vv_D4bTHQcE:L1NxlZV2-z0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Vv_D4bTHQcE:L1NxlZV2-z0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6501189178592178976
title: Abcbot Botnet Linked to Operators of Xanthe Cryptomining malware
uri: Abcbot-Botnet-Linked-to-Operators-of-Xanthe-Cryptomining-malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6501189178592178976
content:
New research into the infrastructure behind an emerging DDoS botnet named Abcbot has uncovered links with a cryptocurrency-mining botnet attack that came to light in December 2020.
Attacks involving Abcbot, first disclosed by Qihoo 360's Netlab security team in November 2021, are triggered via a malicious shell script that targets insecure cloud instances operated by cloud service providers such<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HUJHtctYYCg:AjZdQZ1D9Zg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HUJHtctYYCg:AjZdQZ1D9Zg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HUJHtctYYCg:AjZdQZ1D9Zg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HUJHtctYYCg:AjZdQZ1D9Zg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HUJHtctYYCg:AjZdQZ1D9Zg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HUJHtctYYCg:AjZdQZ1D9Zg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HUJHtctYYCg:AjZdQZ1D9Zg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HUJHtctYYCg:AjZdQZ1D9Zg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5337303097734278328
title: Microsoft Details macOS Bug That Could Let Attackers Gain Access to User Data
uri: Microsoft-Details-macOS-Bug-That-Could-Let-Attackers-Gain-Access-to-Us
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5337303097734278328
content:
Microsoft on Monday disclosed details of a recently patched security vulnerability in Apple's macOS operating system that could be weaponized by a threat actor to expose users' personal information.
Tracked as CVE-2021-30970, the flaw concerns a logic issue in the Transparency, Consent and Control (TCC) security framework, which enables users to configure the privacy settings of their apps and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lnihDihwT7o:S28CSNWHD3A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lnihDihwT7o:S28CSNWHD3A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lnihDihwT7o:S28CSNWHD3A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lnihDihwT7o:S28CSNWHD3A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lnihDihwT7o:S28CSNWHD3A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lnihDihwT7o:S28CSNWHD3A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lnihDihwT7o:S28CSNWHD3A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lnihDihwT7o:S28CSNWHD3A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3809726968816757164
title: Europol Ordered to Delete Data of Individuals With No Proven Links to Crimes
uri: Europol-Ordered-to-Delete-Data-of-Individuals-With-No-Proven-Links-to
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3809726968816757164
content:
The European Union's data protection watchdog on Monday ordered Europol to delete a vast trove of personal data it obtained pertaining to individuals with no proven links to criminal activity.
"Datasets older than six months that have not undergone this Data Subject Categorisation must be erased," the European Data Protection Supervisor (EDPS) said in a press statement. "This means that Europol <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VKQ0uxRN8Xg:em5IkgiyfeE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VKQ0uxRN8Xg:em5IkgiyfeE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VKQ0uxRN8Xg:em5IkgiyfeE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VKQ0uxRN8Xg:em5IkgiyfeE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VKQ0uxRN8Xg:em5IkgiyfeE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VKQ0uxRN8Xg:em5IkgiyfeE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VKQ0uxRN8Xg:em5IkgiyfeE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VKQ0uxRN8Xg:em5IkgiyfeE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-829493643516088422
title: Signal CEO Resigns, WhatsApp Co-Founder Takes Over as Interim CEO
uri: Signal-CEO-Resigns-WhatsApp-Co-Founder-Takes-Over-as-Interim-CEO
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/829493643516088422
content:
Moxie Marlinspike, the founder of the popular encrypted instant messaging service Signal, has announced that he is stepping down as the chief executive of the non-profit in a move that has been underway over the last few months.
"In other words, after a decade or more, it's difficult to overstate how important Signal is to me, but I now feel very comfortable replacing myself as CEO based on the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vRptAno9rs:z4fVq6ws7Qw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vRptAno9rs:z4fVq6ws7Qw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vRptAno9rs:z4fVq6ws7Qw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0vRptAno9rs:z4fVq6ws7Qw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vRptAno9rs:z4fVq6ws7Qw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0vRptAno9rs:z4fVq6ws7Qw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vRptAno9rs:z4fVq6ws7Qw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0vRptAno9rs:z4fVq6ws7Qw:F7zBnMyn0Lo" border="0"></img></a>
</div>


