# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7815931748362795585
title: Learn Ethical Hacking From Scratch — 18 Online Courses for Just $43
uri: Learn-Ethical-Hacking-From-Scratch-18-Online-Courses-for-Just-43
url:
http://feedproxy.google.com/~r/TheHackersNews/~3/EQVM2XoVfwc/learn-ethical-hacking-from-scratch-18.html

content:
If you’re reading this post, there is a pretty good chance you’re interested in hacking. Ever thought about turning it into a career?
The cybersecurity industry is booming right now, and ethical hacking is one of the most lucrative and challenging niches. It’s open to anyone with the right skills.
Featuring 18 courses from top-rated instructors, The All-In-One 2021 Super-Sized Ethical Hacking<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/EQVM2XoVfwc" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MrbW6Ls0WDQ:bxcztUm19iM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MrbW6Ls0WDQ:bxcztUm19iM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MrbW6Ls0WDQ:bxcztUm19iM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MrbW6Ls0WDQ:bxcztUm19iM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MrbW6Ls0WDQ:bxcztUm19iM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MrbW6Ls0WDQ:bxcztUm19iM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MrbW6Ls0WDQ:bxcztUm19iM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MrbW6Ls0WDQ:bxcztUm19iM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6312057248927880135
title: Facebook Adds End-to-End Encryption for Audio and Video Calls in Messenger
uri: Facebook-Adds-End-to-End-Encryption-for-Audio-and-Video-Calls-in-Messe
url:
http://feedproxy.google.com/~r/TheHackersNews/~3/79DFCG5uroQ/facebook-adds-end-to-end-encryption-for.html

content:
Facebook on Friday said it's extending end-to-end encryption (E2EE) for voice and video calls in Messenger, along with testing a new opt-in setting that will turn on end-to-end encryption for Instagram DMs.
"The content of your messages and calls in an end-to-end encrypted conversation is protected from the moment it leaves your device to the moment it reaches the receiver's device," Messenger's<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/79DFCG5uroQ" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVnWuxAvAz0:ftqCD-Yqub8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVnWuxAvAz0:ftqCD-Yqub8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVnWuxAvAz0:ftqCD-Yqub8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eVnWuxAvAz0:ftqCD-Yqub8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVnWuxAvAz0:ftqCD-Yqub8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eVnWuxAvAz0:ftqCD-Yqub8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eVnWuxAvAz0:ftqCD-Yqub8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eVnWuxAvAz0:ftqCD-Yqub8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7394248235395572427
title: New Glowworm Attack Recovers Device's Sound from Its LED Power Indicator
uri: New-Glowworm-Attack-Recovers-Device-s-Sound-from-Its-LED-Power-Indicat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7394248235395572427
content:
A novel technique leverages optical emanations from a device's power indicator LED to recover sounds from connected peripherals and spy on electronic conversations from a distance of as much as 35 meters.
Dubbed the "Glowworm attack," the findings were published by a group of academics from the Ben-Gurion University of the Negev earlier this week, describing the method as "an optical TEMPEST <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1kR_AyuiEjw:4KZhySBR8cA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1kR_AyuiEjw:4KZhySBR8cA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1kR_AyuiEjw:4KZhySBR8cA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1kR_AyuiEjw:4KZhySBR8cA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1kR_AyuiEjw:4KZhySBR8cA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1kR_AyuiEjw:4KZhySBR8cA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1kR_AyuiEjw:4KZhySBR8cA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1kR_AyuiEjw:4KZhySBR8cA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7801096482417618048
title: New AdLoad Variant Bypasses Apple's Security Defenses to Target macOS Systems
uri: New-AdLoad-Variant-Bypasses-Apple-s-Security-Defenses-to-Target-macOS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7801096482417618048
content:
A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 alone, some of which have slipped past Apple's on-device malware scanner and even signed by its own notarization service, highlighting the malicious software ongoing attempts to adapt and evade detection.
"AdLoad," as the malware is known, is one of several <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AL44q59e3Wk:JICRHe5wh1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AL44q59e3Wk:JICRHe5wh1A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AL44q59e3Wk:JICRHe5wh1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AL44q59e3Wk:JICRHe5wh1A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AL44q59e3Wk:JICRHe5wh1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AL44q59e3Wk:JICRHe5wh1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AL44q59e3Wk:JICRHe5wh1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AL44q59e3Wk:JICRHe5wh1A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5805259908833960041
title: Dozens of STARTTLS Related Flaws Found Affecting Popular Email Clients
uri: Dozens-of-STARTTLS-Related-Flaws-Found-Affecting-Popular-Email-Clients
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5805259908833960041
content:
Security researchers have disclosed as many as 40 different vulnerabilities associated with an opportunistic encryption mechanism in mail clients and servers that could open the door to targeted man-in-the-middle (MitM) attacks, permitting an intruder to forge mailbox content and steal credentials.
The now-patched flaws, identified in various STARTTLS implementations, were detailed by a group of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIz4J8NjlAg:D4Q2AdKfcAU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIz4J8NjlAg:D4Q2AdKfcAU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIz4J8NjlAg:D4Q2AdKfcAU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XIz4J8NjlAg:D4Q2AdKfcAU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIz4J8NjlAg:D4Q2AdKfcAU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XIz4J8NjlAg:D4Q2AdKfcAU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIz4J8NjlAg:D4Q2AdKfcAU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XIz4J8NjlAg:D4Q2AdKfcAU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7582013535070817894
title: Attackers Can Weaponize Firewalls and Middleboxes for Amplified DDoS Attacks
uri: Attackers-Can-Weaponize-Firewalls-and-Middleboxes-for-Amplified-DDoS-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7582013535070817894
content:
Weaknesses in the implementation of TCP protocol in middleboxes and censorship infrastructure could be weaponized as a vector to stage reflected denial of service (DoS) amplification attacks, surpassing many of the existing UDP-based amplification factors to date.
Detailed by a group of academics from the University of Maryland and the University of Colorado Boulder at the USENIX Security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BvgJS_yCYSQ:X93Y8QPo8mo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BvgJS_yCYSQ:X93Y8QPo8mo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BvgJS_yCYSQ:X93Y8QPo8mo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BvgJS_yCYSQ:X93Y8QPo8mo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BvgJS_yCYSQ:X93Y8QPo8mo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BvgJS_yCYSQ:X93Y8QPo8mo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BvgJS_yCYSQ:X93Y8QPo8mo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BvgJS_yCYSQ:X93Y8QPo8mo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1056393082327030081
title: Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices
uri: Multiple-Flaws-Affecting-Realtek-Wi-Fi-SDKs-Impact-Nearly-a-Million-Io
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1056393082327030081
content:
Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors.
The flaws, which affect Realtek SDK v2.x, Realtek "Jungle" SDK v3.0/v3.1/v3.2/v3.4.x/v3.4T/v3.4T-CT, and Realtek "Luna" SDK up to version 1.3.2, could be abused by attackers to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wmWqVUXfGAA:zv4WF2YtuDs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wmWqVUXfGAA:zv4WF2YtuDs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wmWqVUXfGAA:zv4WF2YtuDs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wmWqVUXfGAA:zv4WF2YtuDs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wmWqVUXfGAA:zv4WF2YtuDs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wmWqVUXfGAA:zv4WF2YtuDs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wmWqVUXfGAA:zv4WF2YtuDs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wmWqVUXfGAA:zv4WF2YtuDs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5690595364081626308
title: Malicious Ads Target Cryptocurrency Users With Cinobi Banking Trojan
uri: Malicious-Ads-Target-Cryptocurrency-Users-With-Cinobi-Banking-Trojan
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5690595364081626308
content:
A new social engineering-based malvertising campaign targeting Japan has been found to deliver a malicious application that deploys a banking trojan on compromised Windows machines to steal credentials associated with cryptocurrency accounts.
The application masquerades as an animated porn game, a reward points application, or a video streaming application, Trend Micro researchers Jaromir <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g7hh-aCA4l8:YjeRdfiujdw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g7hh-aCA4l8:YjeRdfiujdw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g7hh-aCA4l8:YjeRdfiujdw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g7hh-aCA4l8:YjeRdfiujdw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g7hh-aCA4l8:YjeRdfiujdw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g7hh-aCA4l8:YjeRdfiujdw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g7hh-aCA4l8:YjeRdfiujdw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g7hh-aCA4l8:YjeRdfiujdw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6227952337921335270
title: Unpatched Remote Hacking Flaw Disclosed in Fortinet's FortiWeb WAF
uri: Unpatched-Remote-Hacking-Flaw-Disclosed-in-Fortinet-s-FortiWeb-WAF
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6227952337921335270
content:
Details have emerged about a new unpatched security vulnerability in Fortinet's web application firewall (WAF) appliances that could be abused by a remote, authenticated attacker to execute malicious commands on the system.
"An OS command injection vulnerability in FortiWeb's management interface (version 6.3.11 and prior) can allow a remote, authenticated attacker to execute arbitrary commands <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J-tgoAERMb8:xXPmjdJ5lEA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J-tgoAERMb8:xXPmjdJ5lEA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J-tgoAERMb8:xXPmjdJ5lEA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=J-tgoAERMb8:xXPmjdJ5lEA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J-tgoAERMb8:xXPmjdJ5lEA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=J-tgoAERMb8:xXPmjdJ5lEA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J-tgoAERMb8:xXPmjdJ5lEA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=J-tgoAERMb8:xXPmjdJ5lEA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6443911630039604343
title: NK Hackers Deploy Browser Exploits on South Korean Sites to Spread Malware
uri: NK-Hackers-Deploy-Browser-Exploits-on-South-Korean-Sites-to-Spread-Mal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6443911630039604343
content:
A North Korean threat actor has been discovered taking advantage of two exploits in Internet Explorer to infect victims with a custom implant as part of a strategic web compromise (SWC) targeting a South Korean online newspaper.
Cybersecurity firm Volexity attributed the attacks to a threat actor it tracks as InkySquid, and more widely known by the monikers ScarCruft and APT37. Daily NK, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f3Q4pG8_fI8:f1PZo-6i6Vo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f3Q4pG8_fI8:f1PZo-6i6Vo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f3Q4pG8_fI8:f1PZo-6i6Vo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f3Q4pG8_fI8:f1PZo-6i6Vo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f3Q4pG8_fI8:f1PZo-6i6Vo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f3Q4pG8_fI8:f1PZo-6i6Vo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f3Q4pG8_fI8:f1PZo-6i6Vo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f3Q4pG8_fI8:f1PZo-6i6Vo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3920918805914365805
title: Iranian Hackers Target Several Israeli Organizations With Supply-Chain Attacks
uri: Iranian-Hackers-Target-Several-Israeli-Organizations-With-Supply-Chain
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3920918805914365805
content:
IT and communication companies in Israel were at the center of a supply chain attack campaign spearheaded by an Iranian threat actor that involved impersonating the firms and their HR personnel to target victims with fake job offers in an attempt to penetrate their computers and gain access to the company's clients.
The attacks, which occurred in two waves in May and July 2021, have been linked <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYwwJ8EtEpY:Z3WyzT7NJYg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYwwJ8EtEpY:Z3WyzT7NJYg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYwwJ8EtEpY:Z3WyzT7NJYg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hYwwJ8EtEpY:Z3WyzT7NJYg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYwwJ8EtEpY:Z3WyzT7NJYg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hYwwJ8EtEpY:Z3WyzT7NJYg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hYwwJ8EtEpY:Z3WyzT7NJYg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hYwwJ8EtEpY:Z3WyzT7NJYg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2142059394919257012
title: Does a VPN Protect You from Hackers?
uri: Does-a-VPN-Protect-You-from-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2142059394919257012
content:
A virtual private network (VPN) is the perfect solution for a lot of issues you might experience online- accessing blocked sites, hiding your browsing activity, getting rid of internet throttling, finding better deals, and much more. 
But does a VPN protect you from hackers? Is your private information and files safer on the internet with a VPN? How much of a difference does it make in terms of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GL32gMmUFfw:JzZfx097tTc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GL32gMmUFfw:JzZfx097tTc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GL32gMmUFfw:JzZfx097tTc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GL32gMmUFfw:JzZfx097tTc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GL32gMmUFfw:JzZfx097tTc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GL32gMmUFfw:JzZfx097tTc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GL32gMmUFfw:JzZfx097tTc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GL32gMmUFfw:JzZfx097tTc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5478551036657687837
title: BadAlloc Flaw Affects BlackBerry QNX Used in Millions of Cars and Medical Devices
uri: BadAlloc-Flaw-Affects-BlackBerry-QNX-Used-in-Millions-of-Cars-and-Medi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5478551036657687837
content:
A major vulnerability affecting older versions of BlackBerry's QNX Real-Time Operating System (RTOS) could allow malicious actors to cripple and gain control of a variety of products, including cars, medical, and industrial equipment.
The shortcoming (CVE-2021-22156, CVSS score: 9.0) is part of a broader collection of flaws, collectively dubbed BadAlloc, that was originally disclosed by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=03swn3d6Tt0:UxUfmhvk0kw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=03swn3d6Tt0:UxUfmhvk0kw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=03swn3d6Tt0:UxUfmhvk0kw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=03swn3d6Tt0:UxUfmhvk0kw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=03swn3d6Tt0:UxUfmhvk0kw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=03swn3d6Tt0:UxUfmhvk0kw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=03swn3d6Tt0:UxUfmhvk0kw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=03swn3d6Tt0:UxUfmhvk0kw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3843023230146083011
title: Critical ThroughTek SDK Bug Could Let Attackers Spy On Millions of IoT Devices
uri: Critical-ThroughTek-SDK-Bug-Could-Let-Attackers-Spy-On-Millions-of-IoT
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3843023230146083011
content:
A security vulnerability has been found affecting several versions of ThroughTek Kalay P2P Software Development Kit (SDK), which could be abused by a remote attacker to take control of an affected device and potentially lead to remote code execution.
Tracked as CVE-2021-28372 (CVSS score: 9.6) and discovered by FireEye Mandiant in late 2020, the weakness concerns an improper access control flaw <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlfB1HbNQ5Q:YyrrBR5WnF4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlfB1HbNQ5Q:YyrrBR5WnF4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlfB1HbNQ5Q:YyrrBR5WnF4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RlfB1HbNQ5Q:YyrrBR5WnF4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlfB1HbNQ5Q:YyrrBR5WnF4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RlfB1HbNQ5Q:YyrrBR5WnF4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlfB1HbNQ5Q:YyrrBR5WnF4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RlfB1HbNQ5Q:YyrrBR5WnF4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1581576331232587457
title: Researchers Find New Evidence Linking Diavol Ransomware to TrickBot Gang
uri: Researchers-Find-New-Evidence-Linking-Diavol-Ransomware-to-TrickBot-Ga
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1581576331232587457
content:
Cybersecurity researchers have disclosed details about an early development version of a nascent ransomware strain called Diavol that has been linked to threat actors behind the infamous TrickBot syndicate.
The latest findings from IBM X-Force show that the ransomware sample shares similarities to other malware that has been attributed to the cybercrime gang, thus establishing a clearer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qjnNWD-N1A:agaBMEp7pvg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qjnNWD-N1A:agaBMEp7pvg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qjnNWD-N1A:agaBMEp7pvg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4qjnNWD-N1A:agaBMEp7pvg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qjnNWD-N1A:agaBMEp7pvg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4qjnNWD-N1A:agaBMEp7pvg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qjnNWD-N1A:agaBMEp7pvg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4qjnNWD-N1A:agaBMEp7pvg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5409041521776302098
title: Critical Flaw Found in Older Cisco Small Business Routers Won't Be Fixed
uri: Critical-Flaw-Found-in-Older-Cisco-Small-Business-Routers-Won-t-Be-Fix
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5409041521776302098
content:
A critical vulnerability in Cisco Small Business Routers will not be patched by the networking equipment giant, since the devices reached end-of-life in 2019.
Tracked as CVE-2021-34730 (CVSS score: 9.8), the issue resides in the routers' Universal Plug-and-Play (UPnP) service, enabling an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OyKJHymfsVE:jffSzANhcEc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OyKJHymfsVE:jffSzANhcEc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OyKJHymfsVE:jffSzANhcEc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OyKJHymfsVE:jffSzANhcEc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OyKJHymfsVE:jffSzANhcEc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OyKJHymfsVE:jffSzANhcEc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OyKJHymfsVE:jffSzANhcEc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OyKJHymfsVE:jffSzANhcEc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8193835428259416271
title: Mozi IoT Botnet Now Also Targets Netgear, Huawei, and ZTE Network Gateways
uri: Mozi-IoT-Botnet-Now-Also-Targets-Netgear-Huawei-and-ZTE-Network-Gate
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8193835428259416271
content:
Mozi, a peer-to-peer (P2P) botnet known to target IoT devices, has gained new capabilities that allow it to achieve persistence on network gateways manufactured by Netgear, Huawei, and ZTE, according to new findings.
"Network gateways are a particularly juicy target for adversaries because they are ideal as initial access points to corporate networks," researchers at Microsoft Security Threat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aCw0kPVCl50:aSVnNF8AjWk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aCw0kPVCl50:aSVnNF8AjWk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aCw0kPVCl50:aSVnNF8AjWk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aCw0kPVCl50:aSVnNF8AjWk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aCw0kPVCl50:aSVnNF8AjWk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aCw0kPVCl50:aSVnNF8AjWk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aCw0kPVCl50:aSVnNF8AjWk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aCw0kPVCl50:aSVnNF8AjWk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2666812568208496839
title: Cybercrime Group Asking Insiders for Help in Planting Ransomware
uri: Cybercrime-Group-Asking-Insiders-for-Help-in-Planting-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2666812568208496839
content:
A Nigerian threat actor has been observed attempting to recruit employees by offering them to pay $1 million in bitcoins to deploy Black Kingdom ransomware on companies' networks as part of an insider threat scheme.
"The sender tells the employee that if they're able to deploy ransomware on a company computer or Windows server, then they would be paid $1 million in bitcoin, or 40% of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rpQ_wMFjfu0:y-a4XKKXies:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rpQ_wMFjfu0:y-a4XKKXies:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rpQ_wMFjfu0:y-a4XKKXies:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rpQ_wMFjfu0:y-a4XKKXies:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rpQ_wMFjfu0:y-a4XKKXies:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rpQ_wMFjfu0:y-a4XKKXies:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rpQ_wMFjfu0:y-a4XKKXies:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rpQ_wMFjfu0:y-a4XKKXies:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-719375128337722082
title: Cloudflare mitigated one of the largest DDoS attack involving 17.2 million rps
uri: Cloudflare-mitigated-one-of-the-largest-DDoS-attack-involving-17-2-mil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/719375128337722082
content:
Web infrastructure and website security company Cloudflare on Thursday disclosed that it mitigated the largest ever volumetric distributed denial of service (DDoS) attack recorded to date.
The attack, launched via a Mirai botnet, is said to have targeted an unnamed customer in the financial industry last month. "Within seconds, the botnet bombarded the Cloudflare edge with over 330 million <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gm_twO6hOFY:HWlOiDmHDCg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gm_twO6hOFY:HWlOiDmHDCg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gm_twO6hOFY:HWlOiDmHDCg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gm_twO6hOFY:HWlOiDmHDCg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gm_twO6hOFY:HWlOiDmHDCg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gm_twO6hOFY:HWlOiDmHDCg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gm_twO6hOFY:HWlOiDmHDCg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gm_twO6hOFY:HWlOiDmHDCg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-321082078355733903
title: ShadowPad Malware is Becoming a Favorite Choice of Chinese Espionage Groups
uri: ShadowPad-Malware-is-Becoming-a-Favorite-Choice-of-Chinese-Espionage-G
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/321082078355733903
content:
ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chinese threat clusters since 2017.
"The adoption of ShadowPad significantly reduces the costs of development and maintenance for threat actors," SentinelOne researchers Yi-Jhen Hsieh and Joey Chen said in a detailed overview of the malware, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wKbT_CkGLVY:dizFQWLyR-4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wKbT_CkGLVY:dizFQWLyR-4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wKbT_CkGLVY:dizFQWLyR-4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wKbT_CkGLVY:dizFQWLyR-4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wKbT_CkGLVY:dizFQWLyR-4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wKbT_CkGLVY:dizFQWLyR-4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wKbT_CkGLVY:dizFQWLyR-4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wKbT_CkGLVY:dizFQWLyR-4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3758929288943557037
title: Microsoft Exchange Under Attack With ProxyShell Flaws; Over 1900 Servers Hacked!
uri: Microsoft-Exchange-Under-Attack-With-ProxyShell-Flaws-Over-1900-Serve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3758929288943557037
content:
The U.S. Cybersecurity and Infrastructure Security Agency is warning of active exploitation attempts that leverage the latest line of "ProxyShell" Microsoft Exchange vulnerabilities that were patched earlier this May, including deploying LockFile ransomware on compromised systems.
Tracked as CVE-2021-34473, CVE-2021-34523, and CVE-2021-31207, the vulnerabilities enable adversaries to bypass ACL <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZBrnqEFoZ70:nitul1jB91c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZBrnqEFoZ70:nitul1jB91c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZBrnqEFoZ70:nitul1jB91c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZBrnqEFoZ70:nitul1jB91c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZBrnqEFoZ70:nitul1jB91c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZBrnqEFoZ70:nitul1jB91c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZBrnqEFoZ70:nitul1jB91c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZBrnqEFoZ70:nitul1jB91c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4460856867361346482
title: Navigating Vendor Risk Management as IT Professionals
uri: Navigating-Vendor-Risk-Management-as-IT-Professionals
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4460856867361346482
content:
One of the great resources available to businesses today is the large ecosystem of value-added services and solutions. Especially in technology solutions, there is no end to the services of which organizations can avail themselves.
In addition, if a business needs a particular solution or service they don't handle in-house, there is most likely a third-party vendor that can take care of that for<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sIfQrk7G7-U:FLFlOpOQKB0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sIfQrk7G7-U:FLFlOpOQKB0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sIfQrk7G7-U:FLFlOpOQKB0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sIfQrk7G7-U:FLFlOpOQKB0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sIfQrk7G7-U:FLFlOpOQKB0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sIfQrk7G7-U:FLFlOpOQKB0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sIfQrk7G7-U:FLFlOpOQKB0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sIfQrk7G7-U:FLFlOpOQKB0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8127371562731853535
title: Researchers Detail Modus Operandi of ShinyHunters Cyber Crime Group
uri: Researchers-Detail-Modus-Operandi-of-ShinyHunters-Cyber-Crime-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8127371562731853535
content:
ShinyHunters, a notorious cybercriminal underground group that's been on a data breach spree since last year, has been observed searching companies' GitHub repository source code for vulnerabilities that can be abused to stage larger scale attacks, an analysis of the hackers' modus operandi has revealed.
"Primarily operating on Raid Forums, the collective's moniker and motivation can partly be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5sG8irJjwRQ:CXOfPANZpVw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5sG8irJjwRQ:CXOfPANZpVw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5sG8irJjwRQ:CXOfPANZpVw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5sG8irJjwRQ:CXOfPANZpVw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5sG8irJjwRQ:CXOfPANZpVw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5sG8irJjwRQ:CXOfPANZpVw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5sG8irJjwRQ:CXOfPANZpVw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5sG8irJjwRQ:CXOfPANZpVw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-809657378381659202
title: Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems
uri: Top-15-Vulnerabilities-Attackers-Exploited-Millions-of-Times-to-Hack-L
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/809657378381659202
content:
Close to 14 million Linux-based systems are directly exposed to the Internet, making them a lucrative target for an array of real-world attacks that could result in the deployment of malicious web shells, coin miners, ransomware, and other trojans.
That's according to an in-depth look at the Linux threat landscape published by U.S.-Japanese cybersecurity firm Trend Micro, detailing the top <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecvux2Zv6Zo:DoqNSNpQB8Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecvux2Zv6Zo:DoqNSNpQB8Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecvux2Zv6Zo:DoqNSNpQB8Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ecvux2Zv6Zo:DoqNSNpQB8Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecvux2Zv6Zo:DoqNSNpQB8Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ecvux2Zv6Zo:DoqNSNpQB8Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecvux2Zv6Zo:DoqNSNpQB8Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ecvux2Zv6Zo:DoqNSNpQB8Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3176730704267036755
title: 38 Million Records Exposed from Microsoft Power Apps of Dozens of Organisations
uri: 38-Million-Records-Exposed-from-Microsoft-Power-Apps-of-Dozens-of-Orga
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3176730704267036755
content:
More than 38 million records from 47 different entities that rely on Microsoft's Power Apps portals platform were inadvertently left exposed online, bringing into sharp focus a "new vector of data exposure."
"The types of data varied between portals, including personal information used for COVID-19 contact tracing, COVID-19 vaccination appointments, social security numbers for job applicants, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tsPAcpbuxU:IX5dTG45sLI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tsPAcpbuxU:IX5dTG45sLI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tsPAcpbuxU:IX5dTG45sLI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3tsPAcpbuxU:IX5dTG45sLI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tsPAcpbuxU:IX5dTG45sLI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3tsPAcpbuxU:IX5dTG45sLI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3tsPAcpbuxU:IX5dTG45sLI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3tsPAcpbuxU:IX5dTG45sLI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1513949400035616751
title: Researchers Warn of 4 Emerging Ransomware Groups That Can Cause Havoc
uri: Researchers-Warn-of-4-Emerging-Ransomware-Groups-That-Can-Cause-Havoc
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1513949400035616751
content:
Cybersecurity researchers on Tuesday took the wraps off four up-and-coming ransomware groups that could pose a serious threat to enterprises and critical infrastructure, as the ripple effect of a recent spurt in ransomware incidents show that attackers are growing more sophisticated and more profitable in extracting payouts from victims.
"While the ransomware crisis appears poised to get worse <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1SZlZhg8VYE:vopJtw7ME4M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1SZlZhg8VYE:vopJtw7ME4M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1SZlZhg8VYE:vopJtw7ME4M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1SZlZhg8VYE:vopJtw7ME4M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1SZlZhg8VYE:vopJtw7ME4M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1SZlZhg8VYE:vopJtw7ME4M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1SZlZhg8VYE:vopJtw7ME4M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1SZlZhg8VYE:vopJtw7ME4M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7534340830038193649
title: Modified Version of WhatsApp for Android Spotted Installing Triada Trojan
uri: Modified-Version-of-WhatsApp-for-Android-Spotted-Installing-Triada-Tro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7534340830038193649
content:
A modified version of the WhatsApp messaging app for Android has been trojanized to serve malicious payloads, display full-screen ads, and sign up device owners for unwanted premium subscriptions without their knowledge.
"The Trojan Triada snuck into one of these modified versions of the messenger called FMWhatsApp 16.80.0 together with the advertising software development kit (SDK)," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yCE2AXvZTBc:vCK9RXOjqTQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yCE2AXvZTBc:vCK9RXOjqTQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yCE2AXvZTBc:vCK9RXOjqTQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yCE2AXvZTBc:vCK9RXOjqTQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yCE2AXvZTBc:vCK9RXOjqTQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yCE2AXvZTBc:vCK9RXOjqTQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yCE2AXvZTBc:vCK9RXOjqTQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yCE2AXvZTBc:vCK9RXOjqTQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5543539551723024995
title: Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group
uri: Bahraini-Activists-Targeted-Using-a-New-iPhone-Zero-Day-Exploit-From-N
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5543539551723024995
content:
A previously undisclosed "zero-click" exploit in Apple's iMessage was abused by Israeli surveillance vendor NSO Group to circumvent iOS security protections and target nine Bahraini activists.
"The hacked activists included three members of Waad (a secular Bahraini political society), three members of the Bahrain Center for Human Rights, two exiled Bahraini dissidents, and one member of Al Wefaq<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7dMnI1aRV8Y:mWgaBBvYW2Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7dMnI1aRV8Y:mWgaBBvYW2Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7dMnI1aRV8Y:mWgaBBvYW2Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7dMnI1aRV8Y:mWgaBBvYW2Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7dMnI1aRV8Y:mWgaBBvYW2Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7dMnI1aRV8Y:mWgaBBvYW2Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7dMnI1aRV8Y:mWgaBBvYW2Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7dMnI1aRV8Y:mWgaBBvYW2Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5360322701423400580
title: New SideWalk Backdoor Targets U.S.-based Computer Retail Business
uri: New-SideWalk-Backdoor-Targets-U-S-based-Computer-Retail-Business
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5360322701423400580
content:
A computer retail company based in the U.S. was the target of a previously undiscovered implant called SideWalk as part of a recent campaign undertaken by a Chinese advanced persistent threat group primarily known for singling out entities in East and Southeast Asia.
Slovak cybersecurity firm ESET attributed the malware to an advanced persistent threat it tracks under the moniker SparklingGoblin<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ISKgVU4FRTM:03d3-WbtsmY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ISKgVU4FRTM:03d3-WbtsmY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ISKgVU4FRTM:03d3-WbtsmY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ISKgVU4FRTM:03d3-WbtsmY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ISKgVU4FRTM:03d3-WbtsmY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ISKgVU4FRTM:03d3-WbtsmY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ISKgVU4FRTM:03d3-WbtsmY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ISKgVU4FRTM:03d3-WbtsmY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7935966582819563057
title: B.Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages
uri: B-Braun-Infusomat-Pumps-Could-Let-Attackers-Remotely-Alter-Medication
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7935966582819563057
content:
Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun's Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication.
McAfee, which discovered and reported the flaws to the German medical and pharmaceutical device company on January 11, 2021, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QDnlq6zTtd0:X4ZvNhLE3As:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QDnlq6zTtd0:X4ZvNhLE3As:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QDnlq6zTtd0:X4ZvNhLE3As:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QDnlq6zTtd0:X4ZvNhLE3As:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QDnlq6zTtd0:X4ZvNhLE3As:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QDnlq6zTtd0:X4ZvNhLE3As:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QDnlq6zTtd0:X4ZvNhLE3As:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QDnlq6zTtd0:X4ZvNhLE3As:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1935761379082462243
title: Preventing your Cloud 'Secrets' from Public Exposure: An IDE plugin solution
uri: Preventing-your-Cloud-Secrets-from-Public-Exposure-An-IDE-plugin-so
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1935761379082462243
content:
I'm sure you would agree that, in today's digital world, the majority of applications we work on require some type of credentials – to connect to a database with a username/password, to access computer programs via authorized tokens, or API keys to invoke services for authentication.
Credentials, or sometimes just referred to as 'Secrets,' are pieces of user or system-level confidential <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0gldB91DgY:0i13eH9-cZo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0gldB91DgY:0i13eH9-cZo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0gldB91DgY:0i13eH9-cZo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o0gldB91DgY:0i13eH9-cZo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0gldB91DgY:0i13eH9-cZo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o0gldB91DgY:0i13eH9-cZo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o0gldB91DgY:0i13eH9-cZo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o0gldB91DgY:0i13eH9-cZo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4474678002423064021
title: Researchers Uncover FIN8's New Backdoor Targeting Financial Institutions
uri: Researchers-Uncover-FIN8-s-New-Backdoor-Targeting-Financial-Institutio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4474678002423064021
content:
A financially motivated threat actor notorious for setting its sights on retail, hospitality, and entertainment industries has been observed deploying a completely new backdoor on infected systems, indicating the operators are continuously retooling their malware arsenal to avoid detection and stay under the radar.
The previously undocumented malware has been dubbed "Sardonic" by Romanian <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nAxQ7S6XfmM:keu6ZcRHUNI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nAxQ7S6XfmM:keu6ZcRHUNI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nAxQ7S6XfmM:keu6ZcRHUNI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nAxQ7S6XfmM:keu6ZcRHUNI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nAxQ7S6XfmM:keu6ZcRHUNI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nAxQ7S6XfmM:keu6ZcRHUNI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nAxQ7S6XfmM:keu6ZcRHUNI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nAxQ7S6XfmM:keu6ZcRHUNI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6134470246805451758
title: Critical Flaw Discovered in Cisco APIC for Switches — Patch Released
uri: Critical-Flaw-Discovered-in-Cisco-APIC-for-Switches-Patch-Released
url:
http://feedproxy.google.com/~r/TheHackersNews/~3/S_W29xiLrCM/critical-flaw-discovered-in-cisco-apic.html

content:
Cisco Systems on Wednesday issued patches to address a critical security vulnerability affecting the Application Policy Infrastructure Controller (APIC) interface used in its Nexus 9000 Series Switches that could be potentially abused to read or write arbitrary files on a vulnerable system.
Tracked as CVE-2021-1577 (CVSS score: 9.1), the issue — which is due to improper access control — could<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/S_W29xiLrCM" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AxBo2eHj5NI:5LxbdQDacuQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AxBo2eHj5NI:5LxbdQDacuQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AxBo2eHj5NI:5LxbdQDacuQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AxBo2eHj5NI:5LxbdQDacuQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AxBo2eHj5NI:5LxbdQDacuQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AxBo2eHj5NI:5LxbdQDacuQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AxBo2eHj5NI:5LxbdQDacuQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AxBo2eHj5NI:5LxbdQDacuQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8033854994631925841
title: VMware Issues Patches to Fix New Flaws Affecting Multiple Products
uri: VMware-Issues-Patches-to-Fix-New-Flaws-Affecting-Multiple-Products
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8033854994631925841
content:
VMware on Wednesday shipped security updates to address vulnerabilities in multiple products that could be potentially exploited by an attacker to take control of an affected system.
The six security weaknesses (from CVE-2021-22022 through CVE-2021-22027, CVSS scores: 4.4 - 8.6) affect VMware vRealize Operations (prior to version 8.5.0), VMware Cloud Foundation (versions 3.x and 4.x), and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W1TVjhDXMS0:gzC6gIKZP2k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W1TVjhDXMS0:gzC6gIKZP2k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W1TVjhDXMS0:gzC6gIKZP2k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W1TVjhDXMS0:gzC6gIKZP2k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W1TVjhDXMS0:gzC6gIKZP2k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W1TVjhDXMS0:gzC6gIKZP2k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W1TVjhDXMS0:gzC6gIKZP2k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W1TVjhDXMS0:gzC6gIKZP2k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8831348937598128780
title: The Increased Liability of Local In-home Propagation
uri: The-Increased-Liability-of-Local-In-home-Propagation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8831348937598128780
content:
Today I discuss an attack vector conducive to cross-organizational spread, in-home local propagation. Though often overlooked, this vector is especially relevant today, as many corporate employees remain working from home.
In this post, I contrast in-home local propagation with traditional vectors through which a threat (ransomware in particular) spreads throughout an organization. I discuss the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHRFsjzWvy8:4aSrL6-QjMY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHRFsjzWvy8:4aSrL6-QjMY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHRFsjzWvy8:4aSrL6-QjMY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kHRFsjzWvy8:4aSrL6-QjMY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHRFsjzWvy8:4aSrL6-QjMY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kHRFsjzWvy8:4aSrL6-QjMY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kHRFsjzWvy8:4aSrL6-QjMY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kHRFsjzWvy8:4aSrL6-QjMY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1715672760046879517
title: F5 Releases Critical Security Patches for BIG-IP and BIG-IQ Devices
uri: F5-Releases-Critical-Security-Patches-for-BIG-IP-and-BIG-IQ-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1715672760046879517
content:
Enterprise security and network appliance vendor F5 has released patches for more than two dozen security vulnerabilities affecting multiple versions of BIG-IP and BIG-IQ devices that could potentially allow an attacker to perform a wide range of malicious actions, including accessing arbitrary files, escalating privileges, and executing JavaScript code.
Of the 29 bugs addressed, 13 are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Np9FVlTYBrs:Fuf495tmZgI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Np9FVlTYBrs:Fuf495tmZgI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Np9FVlTYBrs:Fuf495tmZgI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Np9FVlTYBrs:Fuf495tmZgI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Np9FVlTYBrs:Fuf495tmZgI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Np9FVlTYBrs:Fuf495tmZgI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Np9FVlTYBrs:Fuf495tmZgI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Np9FVlTYBrs:Fuf495tmZgI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5568180326240631571
title: New Passwordless Verification API Uses SIM Security for Zero Trust Remote Access
uri: New-Passwordless-Verification-API-Uses-SIM-Security-for-Zero-Trust-Rem
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5568180326240631571
content:
Forget watercooler conspiracies or boardroom battles. There's a new war in the office. As companies nudge their staff to return to communal workspaces, many workers don't actually want to – more than 50 percent of employees would rather quit, according to research by EY. 
While HR teams worry over the hearts and minds of staff, IT security professionals have a different battle plan to draft – <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=co7lVIx79ew:W3EySxO60P8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=co7lVIx79ew:W3EySxO60P8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=co7lVIx79ew:W3EySxO60P8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=co7lVIx79ew:W3EySxO60P8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=co7lVIx79ew:W3EySxO60P8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=co7lVIx79ew:W3EySxO60P8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=co7lVIx79ew:W3EySxO60P8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=co7lVIx79ew:W3EySxO60P8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-256129347085951120
title: Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers
uri: Critical-Cosmos-Database-Flaw-Affected-Thousands-of-Microsoft-Azure-Cu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/256129347085951120
content:
Cloud infrastructure security company Wiz on Thursday revealed details of a now-fixed Azure Cosmos database vulnerability that could have been potentially exploited to grant any Azure user full admin access to other customers' database instances without any authorization.
The flaw, which grants read, write, and delete privileges, has been dubbed "ChaosDB," with Wiz researchers noting that "the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pypMjuxvg5k:GGIg1uVh_1g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pypMjuxvg5k:GGIg1uVh_1g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pypMjuxvg5k:GGIg1uVh_1g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pypMjuxvg5k:GGIg1uVh_1g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pypMjuxvg5k:GGIg1uVh_1g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pypMjuxvg5k:GGIg1uVh_1g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pypMjuxvg5k:GGIg1uVh_1g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pypMjuxvg5k:GGIg1uVh_1g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5184522625661299133
title: Kaseya Issues Patches for Two New 0-Day Flaws Affecting Unitrends Servers
uri: Kaseya-Issues-Patches-for-Two-New-0-Day-Flaws-Affecting-Unitrends-Serv
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5184522625661299133
content:
U.S. technology firm Kaseya has released security patches to address two zero-day vulnerabilities affecting its Unitrends enterprise backup and continuity solution that could result in privilege escalation and authenticated remote code execution.
The two weaknesses are part of a trio of vulnerabilities discovered and reported by researchers at the Dutch Institute for Vulnerability Disclosure (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sCRQhfmrVbI:is2hZDM6WLs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sCRQhfmrVbI:is2hZDM6WLs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sCRQhfmrVbI:is2hZDM6WLs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sCRQhfmrVbI:is2hZDM6WLs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sCRQhfmrVbI:is2hZDM6WLs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sCRQhfmrVbI:is2hZDM6WLs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sCRQhfmrVbI:is2hZDM6WLs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sCRQhfmrVbI:is2hZDM6WLs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7090234765774695585
title: Microsoft, Google to Invest $30 Billion in Cybersecurity Over Next 5 Years
uri: Microsoft-Google-to-Invest-30-Billion-in-Cybersecurity-Over-Next-5-Y
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7090234765774695585
content:
Google and Microsoft said they are pledging to invest a total of $30 billion in cybersecurity advancements over the next five years, as the U.S. government partners with private sector companies to address threats facing the country in the wake of a string of sophisticated malicious cyber activity targeting critical infrastructure, laying bare the risks to data, organizations, and governments <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MgjMdL8q-oU:2WmKLTIrnDA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MgjMdL8q-oU:2WmKLTIrnDA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MgjMdL8q-oU:2WmKLTIrnDA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MgjMdL8q-oU:2WmKLTIrnDA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MgjMdL8q-oU:2WmKLTIrnDA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MgjMdL8q-oU:2WmKLTIrnDA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MgjMdL8q-oU:2WmKLTIrnDA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MgjMdL8q-oU:2WmKLTIrnDA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4036314719613066883
title: LockFile Ransomware Bypasses Protection Using Intermittent File Encryption
uri: LockFile-Ransomware-Bypasses-Protection-Using-Intermittent-File-Encryp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4036314719613066883
content:
A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called "intermittent encryption."
Called LockFile, the operators of the ransomware have been found exploiting recently disclosed flaws such as ProxyShell and PetitPotam to compromise Windows servers and deploy file-encrypting malware that scrambles only<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=82TcvpnnSBY:8VM5twE9B2k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=82TcvpnnSBY:8VM5twE9B2k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=82TcvpnnSBY:8VM5twE9B2k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=82TcvpnnSBY:8VM5twE9B2k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=82TcvpnnSBY:8VM5twE9B2k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=82TcvpnnSBY:8VM5twE9B2k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=82TcvpnnSBY:8VM5twE9B2k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=82TcvpnnSBY:8VM5twE9B2k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7425764952733980707
title: Microsoft Warns of Widespread Phishing Attacks Using Open Redirects
uri: Microsoft-Warns-of-Widespread-Phishing-Attacks-Using-Open-Redirects
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7425764952733980707
content:
Microsoft is warning of a widespread credential phishing campaign that leverages open redirector links in email communications as a vector to trick users into visiting malicious websites while effectively bypassing security software.
"Attackers combine these links with social engineering baits that impersonate well-known productivity tools and services to lure users into clicking," Microsoft 365<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Tjh4-cInN7U:Q4urnELxOiU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Tjh4-cInN7U:Q4urnELxOiU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Tjh4-cInN7U:Q4urnELxOiU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Tjh4-cInN7U:Q4urnELxOiU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Tjh4-cInN7U:Q4urnELxOiU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Tjh4-cInN7U:Q4urnELxOiU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Tjh4-cInN7U:Q4urnELxOiU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Tjh4-cInN7U:Q4urnELxOiU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8471729094880548488
title: Get Lifetime Access to 24 Professional Cybersecurity Certification Prep Courses
uri: Get-Lifetime-Access-to-24-Professional-Cybersecurity-Certification-Pre
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8471729094880548488
content:
Not all heroes wear capes. Cybersecurity professionals are digital warriors who use their knowledge and skill to battle malicious hackers. 
Sounds like an exciting career, right? 
If the comic-book comparisons aren’t working for you, perhaps some figures will. According to ZipRecruiter, the average salary of a cybersecurity professional is just over $100,000 a year.
The Complete 2021 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e_THZ2HXtZo:WZQrbNHp4Nw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e_THZ2HXtZo:WZQrbNHp4Nw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e_THZ2HXtZo:WZQrbNHp4Nw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=e_THZ2HXtZo:WZQrbNHp4Nw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e_THZ2HXtZo:WZQrbNHp4Nw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=e_THZ2HXtZo:WZQrbNHp4Nw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=e_THZ2HXtZo:WZQrbNHp4Nw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=e_THZ2HXtZo:WZQrbNHp4Nw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5544990770847290732
title: How Does MTA-STS Improve Your Email Security?
uri: How-Does-MTA-STS-Improve-Your-Email-Security
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5544990770847290732
content:
Simple Mail Transfer Protocol or SMTP has easily exploitable security loopholes. Email routing protocols were designed in a time when cryptographic technology was at a nascent stage (e.g., the de-facto protocol for email transfer, SMTP, is nearly 40 years old now), and therefore security was not an important consideration. 
As a result, in most email systems encryption is still opportunistic, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OZCdxdVMp7s:biQ3ujdPxFk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OZCdxdVMp7s:biQ3ujdPxFk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OZCdxdVMp7s:biQ3ujdPxFk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OZCdxdVMp7s:biQ3ujdPxFk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OZCdxdVMp7s:biQ3ujdPxFk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OZCdxdVMp7s:biQ3ujdPxFk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OZCdxdVMp7s:biQ3ujdPxFk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OZCdxdVMp7s:biQ3ujdPxFk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7674143044456288842
title: New Microsoft Exchange 'ProxyToken' Flaw Lets Attackers Reconfigure Mailboxes
uri: New-Microsoft-Exchange-ProxyToken-Flaw-Lets-Attackers-Reconfigure-Ma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7674143044456288842
content:
Details have emerged about a now-patched security vulnerability impacting Microsoft Exchange Server that could be weaponized by an unauthenticated attacker to modify server configurations, thus leading to the disclosure of Personally Identifiable Information (PII).
The issue, tracked as CVE-2021-33766 (CVSS score: 7.3) and coined "ProxyToken," was discovered by Le Xuan Tuyen, a researcher at the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pUmKLslo0YA:OEKFCSdMDJY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pUmKLslo0YA:OEKFCSdMDJY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pUmKLslo0YA:OEKFCSdMDJY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pUmKLslo0YA:OEKFCSdMDJY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pUmKLslo0YA:OEKFCSdMDJY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pUmKLslo0YA:OEKFCSdMDJY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pUmKLslo0YA:OEKFCSdMDJY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pUmKLslo0YA:OEKFCSdMDJY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6095405519864244914
title: CISA Adds Single-Factor Authentication to the List of Bad Practices
uri: CISA-Adds-Single-Factor-Authentication-to-the-List-of-Bad-Practices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6095405519864244914
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added single-factor authentication to the short list of "exceptionally risky" cybersecurity practices that could expose critical infrastructure as well as government and the private sector entities to devastating cyberattacks.
Single-factor authentication is a method of signing in users to websites and remote systems by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0_f35xzLjPk:ngoBNnrtSHY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0_f35xzLjPk:ngoBNnrtSHY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0_f35xzLjPk:ngoBNnrtSHY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0_f35xzLjPk:ngoBNnrtSHY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0_f35xzLjPk:ngoBNnrtSHY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0_f35xzLjPk:ngoBNnrtSHY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0_f35xzLjPk:ngoBNnrtSHY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0_f35xzLjPk:ngoBNnrtSHY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-571852818019612664
title: Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms
uri: Attackers-Can-Remotely-Disable-Fortress-Wi-Fi-Home-Security-Alarms
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/571852818019612664
content:
New vulnerabilities have been discovered in Fortress S03 Wi-Fi Home Security System that could be potentially abused by a malicious party to gain unauthorized access with an aim to alter system behavior, including disarming the devices without the victim's knowledge.
The two unpatched issues, tracked under the identifiers CVE-2021-39276 (CVSS score: 5.3) and CVE-2021-39277 (CVSS score: 5.7), <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jt-gmS-z3HY:-me9sG_vECA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jt-gmS-z3HY:-me9sG_vECA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jt-gmS-z3HY:-me9sG_vECA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jt-gmS-z3HY:-me9sG_vECA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jt-gmS-z3HY:-me9sG_vECA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jt-gmS-z3HY:-me9sG_vECA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jt-gmS-z3HY:-me9sG_vECA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jt-gmS-z3HY:-me9sG_vECA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6438496964793315683
title: Researchers Propose Machine Learning-based Bluetooth Authentication Scheme
uri: Researchers-Propose-Machine-Learning-based-Bluetooth-Authentication-Sc
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6438496964793315683
content:
A group of academics has proposed a machine learning approach that uses authentic interactions between devices in Bluetooth networks as a foundation to handle device-to-device authentication reliably.
Called "Verification of Interaction Authenticity" (aka VIA), the recurring authentication scheme aims to solve the problem of passive, continuous authentication and automatic deauthentication once <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IMCYMc3Yido:_tJOsvyUSb4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IMCYMc3Yido:_tJOsvyUSb4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IMCYMc3Yido:_tJOsvyUSb4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IMCYMc3Yido:_tJOsvyUSb4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IMCYMc3Yido:_tJOsvyUSb4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IMCYMc3Yido:_tJOsvyUSb4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IMCYMc3Yido:_tJOsvyUSb4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IMCYMc3Yido:_tJOsvyUSb4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2615467300253678351
title: QNAP Working on Patches for OpenSSL Flaws Affecting its NAS Devices
uri: QNAP-Working-on-Patches-for-OpenSSL-Flaws-Affecting-its-NAS-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2615467300253678351
content:
Network-attached storage (NAS) appliance maker QNAP said it's currently investigating two recently patched security flaws in OpenSSL to determine their potential impact, adding it will release security updates should its products turn out to be vulnerable.
Tracked as CVE-2021-3711 (CVSS score: 7.5) and CVE-2021-3712 (CVSS score: 4.4), the weaknesses concern a high-severity buffer overflow in SM2<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyS8_28YwQ:UuVqHkhfISM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyS8_28YwQ:UuVqHkhfISM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyS8_28YwQ:UuVqHkhfISM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtyS8_28YwQ:UuVqHkhfISM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyS8_28YwQ:UuVqHkhfISM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtyS8_28YwQ:UuVqHkhfISM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtyS8_28YwQ:UuVqHkhfISM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtyS8_28YwQ:UuVqHkhfISM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4209778066969169386
title: Cybercriminals Abusing Internet-Sharing Services to Monetize Malware Campaigns
uri: Cybercriminals-Abusing-Internet-Sharing-Services-to-Monetize-Malware-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4209778066969169386
content:
Threat actors are capitalizing on the growing popularity of proxyware platforms like Honeygain and Nanowire to monetize their own malware campaigns, once again illustrating how attackers are quick to repurpose and weaponize legitimate platforms to their advantage.
"Malware is currently leveraging these platforms to monetize the internet bandwidth of victims, similar to how malicious <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NPtoR-CxPpA:xrvnaj1n6gg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NPtoR-CxPpA:xrvnaj1n6gg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NPtoR-CxPpA:xrvnaj1n6gg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NPtoR-CxPpA:xrvnaj1n6gg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NPtoR-CxPpA:xrvnaj1n6gg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NPtoR-CxPpA:xrvnaj1n6gg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NPtoR-CxPpA:xrvnaj1n6gg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NPtoR-CxPpA:xrvnaj1n6gg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5722926038248344830
title: Linphone SIP Stack Bug Could Let Attackers Remotely Crash Client Devices
uri: Linphone-SIP-Stack-Bug-Could-Let-Attackers-Remotely-Crash-Client-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5722926038248344830
content:
Cybersecurity researchers on Tuesday disclosed details about a zero-click security vulnerability in Linphone Session Initiation Protocol (SIP) stack that could be remotely exploited without any action from a victim to crash the SIP client and cause a denial-of-service (DoS) condition.
Tracked as CVE-2021-33056 (CVSS score: 7.5), the issue concerns a NULL pointer dereference vulnerability in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xH931z1FQJo:ORfgde6CYuQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xH931z1FQJo:ORfgde6CYuQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xH931z1FQJo:ORfgde6CYuQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xH931z1FQJo:ORfgde6CYuQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xH931z1FQJo:ORfgde6CYuQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xH931z1FQJo:ORfgde6CYuQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xH931z1FQJo:ORfgde6CYuQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xH931z1FQJo:ORfgde6CYuQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6309986282057737089
title: [LIVE WEBINAR] How Lean Security Teams Can Improve Their Time to Response
uri: LIVE-WEBINAR-How-Lean-Security-Teams-Can-Improve-Their-Time-to-Respo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6309986282057737089
content:
Cybersecurity could be described as a marathon for security teams that spend most of their time building sustained defenses that prevent threats day after day. However, they must be ready to hit a sprint whenever an attack succeeds since attack duration, and the resulting damages are directly correlated. 
Reacting to a successful attack is a major challenge for lean security teams today since <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JGOk6mSOQOk:M_KVL0FucNQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JGOk6mSOQOk:M_KVL0FucNQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JGOk6mSOQOk:M_KVL0FucNQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JGOk6mSOQOk:M_KVL0FucNQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JGOk6mSOQOk:M_KVL0FucNQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JGOk6mSOQOk:M_KVL0FucNQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JGOk6mSOQOk:M_KVL0FucNQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JGOk6mSOQOk:M_KVL0FucNQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-976528504633216188
title: FTC Bans Stalkerware App SpyFone; Orders Company to Erase Secretly Stolen Data
uri: FTC-Bans-Stalkerware-App-SpyFone-Orders-Company-to-Erase-Secretly-Sto
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/976528504633216188
content:
The U.S. Federal Trade Commission on Wednesday banned a stalkerware app company called SpyFone from the surveillance business over concerns that it stealthily harvested and shared data on people's physical movements, phone use, and online activities that were then used by stalkers and domestic abusers to monitor potential targets.
"SpyFone is a brazen brand name for a surveillance business that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bCkS2qfaA:yhskTa8irkc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bCkS2qfaA:yhskTa8irkc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bCkS2qfaA:yhskTa8irkc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n4bCkS2qfaA:yhskTa8irkc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bCkS2qfaA:yhskTa8irkc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n4bCkS2qfaA:yhskTa8irkc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=n4bCkS2qfaA:yhskTa8irkc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=n4bCkS2qfaA:yhskTa8irkc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6705878566139734115
title: WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers
uri: WhatsApp-Photo-Filter-Bug-Could-Have-Exposed-Your-Data-to-Remote-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6705878566139734115
content:
A now-patched high-severity security vulnerability in WhatApp's image filter feature could have been abused to send a malicious image over the messaging app to read sensitive information from the app's memory.
Tracked as CVE-2020-1910 (CVSS score: 7.8), the flaw concerns an out-of-bounds read/write and stems from applying specific image filters to a rogue image and sending the altered image to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rRknLTaJs5E:QJrBqNebf4g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rRknLTaJs5E:QJrBqNebf4g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rRknLTaJs5E:QJrBqNebf4g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rRknLTaJs5E:QJrBqNebf4g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rRknLTaJs5E:QJrBqNebf4g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rRknLTaJs5E:QJrBqNebf4g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rRknLTaJs5E:QJrBqNebf4g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rRknLTaJs5E:QJrBqNebf4g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8902433270067603836
title: Is Traffic Mirroring for NDR Worth the Trouble? We Argue It Isn't
uri: Is-Traffic-Mirroring-for-NDR-Worth-the-Trouble-We-Argue-It-Isn-t
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8902433270067603836
content:
Network Detection &amp; Response (NDR) is an emerging technology developed to close the blind security spots left by conventional security solutions, which hackers exploited to gain a foothold in target networks.
Nowadays, enterprises are using a plethora of security solutions to protect their network from cyber threats. The most prominent ones are Firewalls, IPS/IDS, SIEM, EDR, and XDR (which <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lv4B5r_kxMk:QkHtI2Q_NGM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lv4B5r_kxMk:QkHtI2Q_NGM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lv4B5r_kxMk:QkHtI2Q_NGM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Lv4B5r_kxMk:QkHtI2Q_NGM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lv4B5r_kxMk:QkHtI2Q_NGM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Lv4B5r_kxMk:QkHtI2Q_NGM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Lv4B5r_kxMk:QkHtI2Q_NGM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Lv4B5r_kxMk:QkHtI2Q_NGM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6266134280136425396
title: Chinese Authorities Arrest Hackers Behind Mozi IoT Botnet Attacks
uri: Chinese-Authorities-Arrest-Hackers-Behind-Mozi-IoT-Botnet-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6266134280136425396
content:
The operators of the Mozi IoT botnet have been taken into custody by Chinese law enforcement authorities, nearly two years after the malware emerged on the threat landscape in September 2019.
News of the arrest, which originally happened in June, was disclosed by researchers from Netlab, the network research division of Chinese internet security company Qihoo 360, earlier this Monday, detailing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2u5nz4MrzI:-47AzY-9bUI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2u5nz4MrzI:-47AzY-9bUI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2u5nz4MrzI:-47AzY-9bUI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q2u5nz4MrzI:-47AzY-9bUI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2u5nz4MrzI:-47AzY-9bUI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q2u5nz4MrzI:-47AzY-9bUI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2u5nz4MrzI:-47AzY-9bUI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q2u5nz4MrzI:-47AzY-9bUI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8327881458543708095
title: New BrakTooth Flaws Leave Millions of Bluetooth-enabled Devices Vulnerable
uri: New-BrakTooth-Flaws-Leave-Millions-of-Bluetooth-enabled-Devices-Vulner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8327881458543708095
content:
A set of new security vulnerabilities has been disclosed in commercial Bluetooth stacks that could enable an adversary to execute arbitrary code and, worse, crash the devices via denial-of-service (DoS) attacks. 
Collectively dubbed "BrakTooth" (referring to the Norwegian word "Brak" which translates to "crash"), the 16 security weaknesses span across 13 Bluetooth chipsets from 11 vendors such <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3VcT0zxmVc:mzo0WlucBao:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3VcT0zxmVc:mzo0WlucBao:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3VcT0zxmVc:mzo0WlucBao:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3VcT0zxmVc:mzo0WlucBao:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3VcT0zxmVc:mzo0WlucBao:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3VcT0zxmVc:mzo0WlucBao:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j3VcT0zxmVc:mzo0WlucBao:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j3VcT0zxmVc:mzo0WlucBao:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-638760236037640120
title: What is AS-REP Roasting attack, really?
uri: What-is-AS-REP-Roasting-attack-really
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/638760236037640120
content:
Microsoft's Active Directory is said to be used by 95% of Fortune 500. As a result, it is a prime target for attackers as they look to gain access to credentials in the organization, as compromised credentials provide one of the easiest ways for hackers to access your data.
A key authentication technology that underpins Microsoft Active Directory is Kerberos. Unfortunately, hackers use many <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33geH4Ccu3Q:Hqj12OU5Jk0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33geH4Ccu3Q:Hqj12OU5Jk0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33geH4Ccu3Q:Hqj12OU5Jk0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=33geH4Ccu3Q:Hqj12OU5Jk0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33geH4Ccu3Q:Hqj12OU5Jk0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=33geH4Ccu3Q:Hqj12OU5Jk0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=33geH4Ccu3Q:Hqj12OU5Jk0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=33geH4Ccu3Q:Hqj12OU5Jk0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-431376471981180606
title: Cisco Issues Patch for Critical Enterprise NFVIS Flaw — PoC Exploit Available
uri: Cisco-Issues-Patch-for-Critical-Enterprise-NFVIS-Flaw-PoC-Exploit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/431376471981180606
content:
Cisco has patched a critical security vulnerability impacting its Enterprise Network Function Virtualization Infrastructure Software (NFVIS) that could be exploited by an attacker to take control of an affected system.
Tracked as CVE-2021-34746, the weakness has been rated 9.8 out of a maximum of 10 on the Common Vulnerability Scoring System (CVSS) and could allow a remote attacker to circumvent<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=62_Sa5DBHuY:KBpunwWWnik:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=62_Sa5DBHuY:KBpunwWWnik:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=62_Sa5DBHuY:KBpunwWWnik:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=62_Sa5DBHuY:KBpunwWWnik:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=62_Sa5DBHuY:KBpunwWWnik:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=62_Sa5DBHuY:KBpunwWWnik:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=62_Sa5DBHuY:KBpunwWWnik:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=62_Sa5DBHuY:KBpunwWWnik:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2783448720205945009
title: FIN7 Hackers Using Windows 11 Themed Documents to Drop Javascript Backdoor
uri: FIN7-Hackers-Using-Windows-11-Themed-Documents-to-Drop-Javascript-Back
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2783448720205945009
content:
A recent wave of spear-phishing campaigns leveraged weaponized Windows 11 Alpha-themed Word documents with Visual Basic macros to drop malicious payloads, including a JavaScript implant, against a point-of-sale (PoS) service provider located in the U.S.
The attacks, which are believed to have taken place between late June to late July 2021, have been attributed with "moderate confidence" to a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zvjn94hLREs:9UKJK7tG6U0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zvjn94hLREs:9UKJK7tG6U0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zvjn94hLREs:9UKJK7tG6U0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zvjn94hLREs:9UKJK7tG6U0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zvjn94hLREs:9UKJK7tG6U0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zvjn94hLREs:9UKJK7tG6U0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zvjn94hLREs:9UKJK7tG6U0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zvjn94hLREs:9UKJK7tG6U0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5581463019320814908
title: This New Malware Family Using CLFS Log Files to Avoid Detection
uri: This-New-Malware-Family-Using-CLFS-Log-Files-to-Avoid-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5581463019320814908
content:
Cybersecurity researchers have disclosed details about a new malware family that relies on the Common Log File System (CLFS) to hide a second-stage payload in registry transaction files in an attempt to evade detection mechanisms.
FireEye's Mandiant Advanced Practices team, which made the discovery, dubbed the malware PRIVATELOG, and its installer, STASHLOG. Specifics about the identities of the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XJVDI_HAZlE:5Cx9wi9z0uA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XJVDI_HAZlE:5Cx9wi9z0uA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XJVDI_HAZlE:5Cx9wi9z0uA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XJVDI_HAZlE:5Cx9wi9z0uA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XJVDI_HAZlE:5Cx9wi9z0uA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XJVDI_HAZlE:5Cx9wi9z0uA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XJVDI_HAZlE:5Cx9wi9z0uA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XJVDI_HAZlE:5Cx9wi9z0uA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7068966040887949562
title: Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH 0-Day Attack
uri: Microsoft-Says-Chinese-Hackers-Were-Behind-SolarWinds-Serv-U-SSH-0-Day
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7068966040887949562
content:
Microsoft has shared technical details about a now-fixed, actively exploited critical security vulnerability affecting SolarWinds Serv-U managed file transfer service that it has attributed with "high confidence" to a threat actor operating out of China.
In mid-July, the Texas-based company remedied a remote code execution flaw (CVE-2021-35211) that was rooted in Serv-U's implementation of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tp-FCNzHRR4:WR9ZS18WIIA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tp-FCNzHRR4:WR9ZS18WIIA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tp-FCNzHRR4:WR9ZS18WIIA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tp-FCNzHRR4:WR9ZS18WIIA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tp-FCNzHRR4:WR9ZS18WIIA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tp-FCNzHRR4:WR9ZS18WIIA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tp-FCNzHRR4:WR9ZS18WIIA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tp-FCNzHRR4:WR9ZS18WIIA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-224133282502611910
title: U.S. Cyber Command Warns of Ongoing Attacks Exploiting Atlassian Confluence Flaw
uri: U-S-Cyber-Command-Warns-of-Ongoing-Attacks-Exploiting-Atlassian-Confl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/224133282502611910
content:
The U.S. Cyber Command on Friday warned of ongoing mass exploitation attempts in the wild targeting a now-patched critical security vulnerability affecting Atlassian Confluence deployments that could be abused by unauthenticated attackers to take control of a vulnerable system.
"Mass exploitation of Atlassian Confluence CVE-2021-26084 is ongoing and expected to accelerate," the Cyber National <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPYoGwOE-5g:YGZqmFWehoI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPYoGwOE-5g:YGZqmFWehoI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPYoGwOE-5g:YGZqmFWehoI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WPYoGwOE-5g:YGZqmFWehoI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPYoGwOE-5g:YGZqmFWehoI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WPYoGwOE-5g:YGZqmFWehoI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPYoGwOE-5g:YGZqmFWehoI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WPYoGwOE-5g:YGZqmFWehoI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1152260392291441796
title: Apple Delays Plans to Scan Devices for Child Abuse Images After Privacy Backlash
uri: Apple-Delays-Plans-to-Scan-Devices-for-Child-Abuse-Images-After-Privac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1152260392291441796
content:
Apple is temporarily hitting the pause button on its controversial plans to screen users' devices for child sexual abuse material (CSAM) after receiving sustained blowback over worries that the tool could be weaponized for mass surveillance and erode the privacy of users.
"Based on feedback from customers, advocacy groups, researchers, and others, we have decided to take additional time over the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_twqLrugNg4:aD5-_0v6DF4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_twqLrugNg4:aD5-_0v6DF4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_twqLrugNg4:aD5-_0v6DF4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_twqLrugNg4:aD5-_0v6DF4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_twqLrugNg4:aD5-_0v6DF4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_twqLrugNg4:aD5-_0v6DF4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_twqLrugNg4:aD5-_0v6DF4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_twqLrugNg4:aD5-_0v6DF4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7769446725365720370
title: Traffic Exchange Networks Distributing Malware Disguised as Cracked Software
uri: Traffic-Exchange-Networks-Distributing-Malware-Disguised-as-Cracked-So
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7769446725365720370
content:
An ongoing campaign has been found to leverage a network of websites acting as a "dropper as a service" to deliver a bundle of malware payloads to victims looking for "cracked" versions of popular business and consumer applications.
"These malware included an assortment of click fraud bots, other information stealers, and even ransomware," researchers from cybersecurity firm Sophos said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dzA_V_Nzdxc:XE4psGJKIDY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dzA_V_Nzdxc:XE4psGJKIDY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dzA_V_Nzdxc:XE4psGJKIDY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dzA_V_Nzdxc:XE4psGJKIDY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dzA_V_Nzdxc:XE4psGJKIDY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dzA_V_Nzdxc:XE4psGJKIDY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dzA_V_Nzdxc:XE4psGJKIDY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dzA_V_Nzdxc:XE4psGJKIDY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8911113123664942947
title: Critical Auth Bypass Bug Affect NETGEAR Smart Switches — Patch and PoC Released
uri: Critical-Auth-Bypass-Bug-Affect-NETGEAR-Smart-Switches-Patch-and-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8911113123664942947
content:
Networking, storage and security solutions provider Netgear on Friday issued patches to address three security vulnerabilities affecting its smart switches that could be abused by an adversary to gain full control of a vulnerable device.
The flaws, which were discovered and reported to Netgear by Google security engineer Gynvael Coldwind, impact the following models -

GC108P (fixed in firmware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fa-9UA-CNf4:gMnnyR6jvN8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fa-9UA-CNf4:gMnnyR6jvN8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fa-9UA-CNf4:gMnnyR6jvN8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fa-9UA-CNf4:gMnnyR6jvN8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fa-9UA-CNf4:gMnnyR6jvN8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fa-9UA-CNf4:gMnnyR6jvN8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fa-9UA-CNf4:gMnnyR6jvN8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fa-9UA-CNf4:gMnnyR6jvN8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2028311891501131547
title: ProtonMail Shares Activist's IP Address With Authorities Despite Its "No Log" Claims
uri: ProtonMail-Shares-Activist-s-IP-Address-With-Authorities-Despite-Its
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2028311891501131547
content:
End-to-end encrypted email service provider ProtonMail has drawn criticism after it ceded to a legal request and shared the IP address of anti-gentrification activists with law enforcement authorities, leading to their arrests in France.
The Switzerland-based company said it received a "legally binding order from the Swiss Federal Department of Justice" related to a collective called Youth for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVG5bWd6SK0:Eucul8678DM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVG5bWd6SK0:Eucul8678DM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVG5bWd6SK0:Eucul8678DM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fVG5bWd6SK0:Eucul8678DM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVG5bWd6SK0:Eucul8678DM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fVG5bWd6SK0:Eucul8678DM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fVG5bWd6SK0:Eucul8678DM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fVG5bWd6SK0:Eucul8678DM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1849464232524143686
title: Latest Atlassian Confluence Flaw Exploited to Breach Jenkins Project Server
uri: Latest-Atlassian-Confluence-Flaw-Exploited-to-Breach-Jenkins-Project-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1849464232524143686
content:
The maintainers of Jenkins—a popular open-source automation server software—have disclosed a security breach after unidentified threat actors gained access to one of their servers by exploiting a recently disclosed vulnerability in Atlassian Confluence service to install a cryptocurrency miner.
The "successful attack," which is believed to have occurred last week, was mounted against its <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGsy6yHe1B8:5zFXIeDSCsY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGsy6yHe1B8:5zFXIeDSCsY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGsy6yHe1B8:5zFXIeDSCsY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGsy6yHe1B8:5zFXIeDSCsY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGsy6yHe1B8:5zFXIeDSCsY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGsy6yHe1B8:5zFXIeDSCsY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGsy6yHe1B8:5zFXIeDSCsY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGsy6yHe1B8:5zFXIeDSCsY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2301071965402774927
title: New 0-Day Attack Targeting Windows Users With Microsoft Office Documents
uri: New-0-Day-Attack-Targeting-Windows-Users-With-Microsoft-Office-Documen
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2301071965402774927
content:
Microsoft on Tuesday warned of an actively exploited zero-day flaw impacting Internet Explorer that's being used to hijack vulnerable Windows systems by leveraging weaponized Office documents.
Tracked as CVE-2021-40444 (CVSS score: 8.8), the remote code execution flaw is rooted in MSHTML (aka Trident), a proprietary browser engine for the now-discontinued Internet Explorer and which is used in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8XfTlHB1Kh8:_Xs-Dvhk5jo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8XfTlHB1Kh8:_Xs-Dvhk5jo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8XfTlHB1Kh8:_Xs-Dvhk5jo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8XfTlHB1Kh8:_Xs-Dvhk5jo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8XfTlHB1Kh8:_Xs-Dvhk5jo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8XfTlHB1Kh8:_Xs-Dvhk5jo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8XfTlHB1Kh8:_Xs-Dvhk5jo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8XfTlHB1Kh8:_Xs-Dvhk5jo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8634024722974836574
title: Experts Uncover Mobile Spyware Attacks Targeting Kurdish Ethnic Group
uri: Experts-Uncover-Mobile-Spyware-Attacks-Targeting-Kurdish-Ethnic-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8634024722974836574
content:
Cybersecurity researchers on Tuesday released new findings that reveal a year-long mobile espionage campaign against the Kurdish ethnic group to deploy two Android backdoors that masquerade as legitimate apps.
Active since at least March 2020, the attacks leveraged as many as six dedicated Facebook profiles that claimed to provide news, two of which were aimed at Android users while the other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kEn8PHkmMg0:FVHYcdtOt1w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kEn8PHkmMg0:FVHYcdtOt1w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kEn8PHkmMg0:FVHYcdtOt1w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kEn8PHkmMg0:FVHYcdtOt1w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kEn8PHkmMg0:FVHYcdtOt1w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kEn8PHkmMg0:FVHYcdtOt1w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kEn8PHkmMg0:FVHYcdtOt1w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kEn8PHkmMg0:FVHYcdtOt1w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-849847502033867440
title: [Ebook] The Guide for Speeding Time to Response for Lean IT Security Teams
uri: Ebook-The-Guide-for-Speeding-Time-to-Response-for-Lean-IT-Security-T
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/849847502033867440
content:
Most cyber security today involves much more planning, and much less reacting than in the past. Security teams spend most of their time preparing their organizations' defenses and doing operational work. Even so, teams often must quickly spring into action to respond to an attack.
Security teams with copious resources can quickly shift between these two modes. They have enough resources to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtBj17pMqck:D8xWs9GRiPc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtBj17pMqck:D8xWs9GRiPc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtBj17pMqck:D8xWs9GRiPc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtBj17pMqck:D8xWs9GRiPc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtBj17pMqck:D8xWs9GRiPc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtBj17pMqck:D8xWs9GRiPc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LtBj17pMqck:D8xWs9GRiPc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LtBj17pMqck:D8xWs9GRiPc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2814230618813508071
title: 3 Ways to Secure SAP SuccessFactors and Stay Compliant
uri: 3-Ways-to-Secure-SAP-SuccessFactors-and-Stay-Compliant
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2814230618813508071
content:
The work-from-anywhere economy has opened up the possibility for your human resources team to source the best talent from anywhere. To scale their operations, organizations are leveraging the cloud to accelerate essential HR functions such as recruiting, onboarding, evaluating, and more.
SAP is leading this HR transformation with its human capital management (HCM) solution, SAP SuccessFactors. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HMXgMoq7Ypg:sU2HWUcDoIU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HMXgMoq7Ypg:sU2HWUcDoIU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HMXgMoq7Ypg:sU2HWUcDoIU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HMXgMoq7Ypg:sU2HWUcDoIU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HMXgMoq7Ypg:sU2HWUcDoIU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HMXgMoq7Ypg:sU2HWUcDoIU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HMXgMoq7Ypg:sU2HWUcDoIU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HMXgMoq7Ypg:sU2HWUcDoIU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9173091439097775045
title: HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack
uri: HAProxy-Found-Vulnerable-to-Critical-HTTP-Request-Smuggling-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9173091439097775045
content:
A critical security vulnerability has been disclosed in HAProxy, a widely used open-source load balancer and proxy server, that could be abused by an adversary to possibly smuggle HTTP requests, resulting in unauthorized access to sensitive data and execution of arbitrary commands, effectively opening the door to an array of attacks.
Tracked as CVE-2021-40346, the Integer Overflow vulnerability <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mGxCMDcSmTs:tUciicY_2tY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mGxCMDcSmTs:tUciicY_2tY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mGxCMDcSmTs:tUciicY_2tY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mGxCMDcSmTs:tUciicY_2tY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mGxCMDcSmTs:tUciicY_2tY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mGxCMDcSmTs:tUciicY_2tY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mGxCMDcSmTs:tUciicY_2tY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mGxCMDcSmTs:tUciicY_2tY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4935489379808572496
title: Hackers Leak VPN Account Passwords From 87,000 Fortinet FortiGate Devices
uri: Hackers-Leak-VPN-Account-Passwords-From-87-000-Fortinet-FortiGate-Devi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4935489379808572496
content:
Network security solutions provider Fortinet confirmed that a malicious actor had unauthorizedly disclosed VPN login names and passwords associated with 87,000 FortiGate SSL-VPN devices.
"These credentials were obtained from systems that remained unpatched against CVE-2018-13379 at the time of the actor's scan. While they may have since been patched, if the passwords were not reset, they remain <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JtPdakV_g-c:_QUOPvXi6qw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JtPdakV_g-c:_QUOPvXi6qw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JtPdakV_g-c:_QUOPvXi6qw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JtPdakV_g-c:_QUOPvXi6qw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JtPdakV_g-c:_QUOPvXi6qw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JtPdakV_g-c:_QUOPvXi6qw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JtPdakV_g-c:_QUOPvXi6qw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JtPdakV_g-c:_QUOPvXi6qw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7274143314970605839
title: CISA Warns of Actively Exploited Zoho ManageEngine ADSelfService Vulnerability
uri: CISA-Warns-of-Actively-Exploited-Zoho-ManageEngine-ADSelfService-Vulne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7274143314970605839
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday issued a bulletin warning of a zero-day flaw affecting Zoho ManageEngine ADSelfService Plus deployments that is currently being actively exploited in the wild.
The flaw, tracked as CVE-2021-40539, concerns a REST API authentication bypass that could lead to arbitrary remote code execution (RCE). ADSelfService Plus <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faDFTzIbhfQ:TiVV-L8qrh4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faDFTzIbhfQ:TiVV-L8qrh4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faDFTzIbhfQ:TiVV-L8qrh4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=faDFTzIbhfQ:TiVV-L8qrh4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faDFTzIbhfQ:TiVV-L8qrh4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=faDFTzIbhfQ:TiVV-L8qrh4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faDFTzIbhfQ:TiVV-L8qrh4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=faDFTzIbhfQ:TiVV-L8qrh4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6206809164524604596
title: Fighting the Rogue Toaster Army: Why Secure Coding in Embedded Systems is Our Defensive Edge
uri: Fighting-the-Rogue-Toaster-Army-Why-Secure-Coding-in-Embedded-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6206809164524604596
content:
There are plenty of pop culture references to rogue AI and robots, and appliances turning on their human masters. It is the stuff of science fiction, fun, and fantasy, but with IoT and connected devices becoming more prevalent in our homes, we need more discussion around cybersecurity and safety.
Software is all around us, and it’s very easy to forget just how much we’re relying on lines of code<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-k2W9SSr5vI:f4wqptLPqXQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-k2W9SSr5vI:f4wqptLPqXQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-k2W9SSr5vI:f4wqptLPqXQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-k2W9SSr5vI:f4wqptLPqXQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-k2W9SSr5vI:f4wqptLPqXQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-k2W9SSr5vI:f4wqptLPqXQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-k2W9SSr5vI:f4wqptLPqXQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-k2W9SSr5vI:f4wqptLPqXQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7124536691337169644
title: Russian Ransomware Group REvil Back Online After 2-Month Hiatus
uri: Russian-Ransomware-Group-REvil-Back-Online-After-2-Month-Hiatus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7124536691337169644
content:
The operators behind the REvil ransomware-as-a-service (RaaS) staged a surprise return after a two-month hiatus following the widely publicized attack on technology services provider Kaseya on July 4.
&lt;!--adsense--&gt;
Two of the dark web portals, including the gang's Happy Blog data leak site and its payment/negotiation site, have resurfaced online, with the most recent victim added on July 8, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HWVELWFdtSA:68-FOuPuPGA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HWVELWFdtSA:68-FOuPuPGA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HWVELWFdtSA:68-FOuPuPGA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HWVELWFdtSA:68-FOuPuPGA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HWVELWFdtSA:68-FOuPuPGA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HWVELWFdtSA:68-FOuPuPGA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HWVELWFdtSA:68-FOuPuPGA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HWVELWFdtSA:68-FOuPuPGA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8684721881867308794
title: Microsoft Warns of Cross-Account Takeover Bug in Azure Container Instances
uri: Microsoft-Warns-of-Cross-Account-Takeover-Bug-in-Azure-Container-Insta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8684721881867308794
content:
Microsoft on Wednesday said it remediated a vulnerability in its Azure Container Instances (ACI) services that could have been exploited by a malicious actor "to access other customers' information" in what the researcher described as the "first cross-account container takeover in the public cloud."
An attacker exploiting the weakness could execute malicious commands on other users' containers, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TbU9jkAaJlY:ing38Qyx5zw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TbU9jkAaJlY:ing38Qyx5zw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TbU9jkAaJlY:ing38Qyx5zw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TbU9jkAaJlY:ing38Qyx5zw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TbU9jkAaJlY:ing38Qyx5zw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TbU9jkAaJlY:ing38Qyx5zw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TbU9jkAaJlY:ing38Qyx5zw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TbU9jkAaJlY:ing38Qyx5zw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2568727920139402948
title: Experts Link Sidewalk Malware Attacks to Grayfly Chinese Hacker Group
uri: Experts-Link-Sidewalk-Malware-Attacks-to-Grayfly-Chinese-Hacker-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2568727920139402948
content:
A previously undocumented backdoor that was recently found targeting an unnamed computer retail company based in the U.S. has been linked to a longstanding Chinese espionage operation dubbed Grayfly.
In late August, Slovakian cybersecurity firm ESET disclosed details of an implant called SideWalk, which is designed to load arbitrary plugins sent from an attacker-controlled server, gather <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mK3ON58t51s:DKFucBwIJmg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mK3ON58t51s:DKFucBwIJmg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mK3ON58t51s:DKFucBwIJmg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mK3ON58t51s:DKFucBwIJmg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mK3ON58t51s:DKFucBwIJmg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mK3ON58t51s:DKFucBwIJmg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mK3ON58t51s:DKFucBwIJmg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mK3ON58t51s:DKFucBwIJmg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4052227163995708604
title: SOVA: New Android Banking Trojan Emerges With Growing Capabilities
uri: SOVA-New-Android-Banking-Trojan-Emerges-With-Growing-Capabilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4052227163995708604
content:
A mix of banking applications, cryptocurrency wallets, and shopping apps from the U.S. and Spain are the target of a newly discovered Android trojan that could enable attackers to siphon personally identifiable information from infected devices, including banking credentials and open the door for on-device fraud.
Dubbed S.O.V.A. (referring to the Russian word for owl), the current version of the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8EhtY3kWYRE:Iola8PAFBcQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8EhtY3kWYRE:Iola8PAFBcQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8EhtY3kWYRE:Iola8PAFBcQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8EhtY3kWYRE:Iola8PAFBcQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8EhtY3kWYRE:Iola8PAFBcQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8EhtY3kWYRE:Iola8PAFBcQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8EhtY3kWYRE:Iola8PAFBcQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8EhtY3kWYRE:Iola8PAFBcQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6438197408751792578
title: Moving Forward After CentOS 8 EOL
uri: Moving-Forward-After-CentOS-8-EOL
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6438197408751792578
content:
The Linux community was caught unprepared when, in December 2020, as part of a change in the way Red Hat supports and develops CentOS, Red Hat suddenly announced that it's cutting the official CentOS 8 support window from ten years – to just two, with support ending Dec 31, 2021.
It created a peculiar situation where CentOS 7 users that did the right thing and upgraded quickly to CentOS 8 were <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gKc39rXTBD8:KEJclPi5lgE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gKc39rXTBD8:KEJclPi5lgE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gKc39rXTBD8:KEJclPi5lgE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gKc39rXTBD8:KEJclPi5lgE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gKc39rXTBD8:KEJclPi5lgE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gKc39rXTBD8:KEJclPi5lgE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gKc39rXTBD8:KEJclPi5lgE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gKc39rXTBD8:KEJclPi5lgE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6903768971491241431
title: WhatsApp to Finally Let Users Encrypt Their Chat Backups in the Cloud
uri: WhatsApp-to-Finally-Let-Users-Encrypt-Their-Chat-Backups-in-the-Cloud
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6903768971491241431
content:
WhatsApp on Friday announced it will roll out support for end-to-end encrypted chat backups on the cloud for Android and iOS users, paving the way for storing information such as chat messages and photos in Apple iCloud or Google Drive in a cryptographically secure manner.
The feature, which will go live to all of its two billion users in the coming weeks, is expected to only work on the primary<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WpxRVcETwg:Tf2ZR0EqBQw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WpxRVcETwg:Tf2ZR0EqBQw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WpxRVcETwg:Tf2ZR0EqBQw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0WpxRVcETwg:Tf2ZR0EqBQw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WpxRVcETwg:Tf2ZR0EqBQw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0WpxRVcETwg:Tf2ZR0EqBQw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WpxRVcETwg:Tf2ZR0EqBQw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0WpxRVcETwg:Tf2ZR0EqBQw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3728884836969107626
title: Mēris Botnet Hit Russia's Yandex With Massive 22 Million RPS DDoS Attack
uri: Mēris-Botnet-Hit-Russia-s-Yandex-With-Massive-22-Million-RPS-DDoS-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3728884836969107626
content:
Russian internet giant Yandex has been the target of a record-breaking distributed denial-of-service (DDoS) attack by a new botnet called Mēris.
The botnet is believed to have pummeled the company's web infrastructure with millions of HTTP requests, before hitting a peak of 21.8 million requests per second (RPS), dwarfing a recent botnet-powered attack that came to light last month, bombarding <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkFAKWvtSPY:1N9AjuZQumw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkFAKWvtSPY:1N9AjuZQumw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkFAKWvtSPY:1N9AjuZQumw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkFAKWvtSPY:1N9AjuZQumw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkFAKWvtSPY:1N9AjuZQumw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkFAKWvtSPY:1N9AjuZQumw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZkFAKWvtSPY:1N9AjuZQumw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZkFAKWvtSPY:1N9AjuZQumw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-113991600089167924
title: New SpookJs Attack Bypasses Google Chrome’s Site Isolation Protection
uri: New-SpookJs-Attack-Bypasses-Google-Chrome-s-Site-Isolation-Protectio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/113991600089167924
content:
A newly discovered side-channel attack demonstrated on modern processors can be weaponized to successfully overcome Site Isolation protections weaved into Google Chrome and Chromium browsers and leak sensitive data in a Spectre-style speculative execution attack.
Dubbed "Spook.js" by academics from the University of Michigan, University of Adelaide, Georgia Institute of Technology, and Tel Aviv <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6BCg_n44FJA:MW0tBilBSVA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6BCg_n44FJA:MW0tBilBSVA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6BCg_n44FJA:MW0tBilBSVA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6BCg_n44FJA:MW0tBilBSVA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6BCg_n44FJA:MW0tBilBSVA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6BCg_n44FJA:MW0tBilBSVA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6BCg_n44FJA:MW0tBilBSVA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6BCg_n44FJA:MW0tBilBSVA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5117810459763167919
title: Linux Implementation of Cobalt Strike Beacon Targeting Organizations Worldwide
uri: Linux-Implementation-of-Cobalt-Strike-Beacon-Targeting-Organizations-W
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5117810459763167919
content:
Researchers on Monday took the wraps off a newly discovered Linux and Windows re-implementation of Cobalt Strike Beacon that's actively set its sights on government, telecommunications, information technology, and financial institutions in the wild.
The as-yet undetected version of the penetration testing tool — codenamed "Vermilion Strike" — marks one of the rare Linux ports, which has been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0XpixPbVic0:qQb0T183l5A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0XpixPbVic0:qQb0T183l5A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0XpixPbVic0:qQb0T183l5A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0XpixPbVic0:qQb0T183l5A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0XpixPbVic0:qQb0T183l5A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0XpixPbVic0:qQb0T183l5A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0XpixPbVic0:qQb0T183l5A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0XpixPbVic0:qQb0T183l5A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4846516645519321445
title: Critical Bug Reported in NPM Package With Millions of Downloads Weekly
uri: Critical-Bug-Reported-in-NPM-Package-With-Millions-of-Downloads-Weekly
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4846516645519321445
content:
A widely used NPM package called 'Pac-Resolver' for the JavaScript programming language has been remediated with a fix for a high-severity remote code execution vulnerability that could be abused to run malicious code inside Node.js applications whenever HTTP requests are sent. 
The flaw, tracked as CVE-2021-23406, has a severity rating of 8.1 on the CVSS vulnerability scoring system and affects<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl1ZWythcaM:KUdJ28WrrlU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl1ZWythcaM:KUdJ28WrrlU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl1ZWythcaM:KUdJ28WrrlU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jl1ZWythcaM:KUdJ28WrrlU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl1ZWythcaM:KUdJ28WrrlU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jl1ZWythcaM:KUdJ28WrrlU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl1ZWythcaM:KUdJ28WrrlU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jl1ZWythcaM:KUdJ28WrrlU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6722655132912916866
title: Update Google Chrome to Patch 2 New Zero-Day Flaws Under Attack
uri: Update-Google-Chrome-to-Patch-2-New-Zero-Day-Flaws-Under-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6722655132912916866
content:
Google on Monday released security updates for Chrome web browser to address a total of 11 security issues, two of which it says are actively exploited zero-days in the wild.
Tracked as CVE-2021-30632 and CVE-2021-30633, the vulnerabilities concern an out of bounds write in V8 JavaScript engine and a use after free flaw in Indexed DB API respectively, with the internet giant credited anonymous <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=da2k0924F-c:pKf3DfJCvmM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=da2k0924F-c:pKf3DfJCvmM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=da2k0924F-c:pKf3DfJCvmM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=da2k0924F-c:pKf3DfJCvmM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=da2k0924F-c:pKf3DfJCvmM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=da2k0924F-c:pKf3DfJCvmM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=da2k0924F-c:pKf3DfJCvmM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=da2k0924F-c:pKf3DfJCvmM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1373093696349388236
title: Apple Issues Urgent Updates to Fix New Zero-Day Linked to Pegasus Spyware
uri: Apple-Issues-Urgent-Updates-to-Fix-New-Zero-Day-Linked-to-Pegasus-Spyw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1373093696349388236
content:
Apple has released iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 to fix two actively exploited vulnerabilities, one of which defeated extra security protections built into the operating system.
The list of two flaws is as follows -

CVE-2021-30858 (WebKit) - A use after free issue that could result in arbitrary code execution when processing maliciously crafted web <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ENMTl6PDY0Q:xYVa6KxoV88:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ENMTl6PDY0Q:xYVa6KxoV88:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ENMTl6PDY0Q:xYVa6KxoV88:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ENMTl6PDY0Q:xYVa6KxoV88:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ENMTl6PDY0Q:xYVa6KxoV88:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ENMTl6PDY0Q:xYVa6KxoV88:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ENMTl6PDY0Q:xYVa6KxoV88:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ENMTl6PDY0Q:xYVa6KxoV88:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7560095078144738123
title: Zero Trust Requires Cloud Data Security with Integrated Continuous Endpoint Risk Assessment
uri: Zero-Trust-Requires-Cloud-Data-Security-with-Integrated-Continuous-End
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7560095078144738123
content:
Every once in a while, an industry term will get overused by marketing to the point of becoming a cliche. "Zero Trust" may have reached this threshold.
In some ways, we understand why this is happening. Security perimeters have become obsolete as people use mobile devices and cloud applications to work from anywhere. Zero Trust deployment — moving all your apps and data to the cloud and assuming<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4g-U01kxsE:bbK0fGfB5no:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4g-U01kxsE:bbK0fGfB5no:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4g-U01kxsE:bbK0fGfB5no:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4g-U01kxsE:bbK0fGfB5no:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4g-U01kxsE:bbK0fGfB5no:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4g-U01kxsE:bbK0fGfB5no:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4g-U01kxsE:bbK0fGfB5no:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4g-U01kxsE:bbK0fGfB5no:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9170850738441574747
title: HP OMEN Gaming Hub Flaw Affects Millions of Windows Computers
uri: HP-OMEN-Gaming-Hub-Flaw-Affects-Millions-of-Windows-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9170850738441574747
content:
Cybersecurity researchers on Tuesday disclosed details about a high-severity flaw in the HP OMEN driver software that impacts millions of gaming computers worldwide, leaving them open to an array of attacks.
Tracked as CVE-2021-3437 (CVSS score: 7.8), the vulnerabilities could allow threat actors to escalate privileges to kernel mode without requiring administrator permissions, allowing them to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wVd3IKssJBQ:TBJ5BxBJXww:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wVd3IKssJBQ:TBJ5BxBJXww:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wVd3IKssJBQ:TBJ5BxBJXww:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wVd3IKssJBQ:TBJ5BxBJXww:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wVd3IKssJBQ:TBJ5BxBJXww:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wVd3IKssJBQ:TBJ5BxBJXww:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wVd3IKssJBQ:TBJ5BxBJXww:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wVd3IKssJBQ:TBJ5BxBJXww:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3562686994176940971
title: New Stealthier ZLoader Variant Spreading Via Fake TeamViewer Download Ads
uri: New-Stealthier-ZLoader-Variant-Spreading-Via-Fake-TeamViewer-Download
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3562686994176940971
content:
Users searching for TeamViewer remote desktop software on search engines like Google are being redirected to malicious links that drop ZLoader malware onto their systems while simultaneously embracing a stealthier infection chain that allows it to linger on infected devices and evade detection by security solutions.
"The malware is downloaded from a Google advertisement published through Google <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ae2cGOR5tA:o9SXLJckfnA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ae2cGOR5tA:o9SXLJckfnA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ae2cGOR5tA:o9SXLJckfnA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8ae2cGOR5tA:o9SXLJckfnA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ae2cGOR5tA:o9SXLJckfnA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8ae2cGOR5tA:o9SXLJckfnA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ae2cGOR5tA:o9SXLJckfnA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8ae2cGOR5tA:o9SXLJckfnA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1519666985018087040
title: Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability
uri: Microsoft-Releases-Patch-for-Actively-Exploited-Windows-Zero-Day-Vulne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1519666985018087040
content:
A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively exploited zero-day in its MSHTML Platform that came to light last week. 
Of the 66 flaws, three are rated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0GNOvPHi998:kRkCIeGxfi8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0GNOvPHi998:kRkCIeGxfi8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0GNOvPHi998:kRkCIeGxfi8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0GNOvPHi998:kRkCIeGxfi8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0GNOvPHi998:kRkCIeGxfi8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0GNOvPHi998:kRkCIeGxfi8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0GNOvPHi998:kRkCIeGxfi8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0GNOvPHi998:kRkCIeGxfi8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6090994646442940458
title: 3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company
uri: 3-Former-U-S-Intelligence-Officers-Admit-to-Hacking-for-UAE-Company
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6090994646442940458
content:
The U.S. Department of Justice (DoJ) on Tuesday disclosed it fined three intelligence community and military personnel $1.68 million in penalties for their role as cyber-mercenaries working on behalf of a U.A.E.-based cybersecurity company.
The trio in question — Marc Baier, 49, Ryan Adams, 34, and Daniel Gericke, 40 — are accused of "knowingly and willfully combine, conspire, confederate, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w8_lR4EWzNk:tAwh_QrdBsk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w8_lR4EWzNk:tAwh_QrdBsk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w8_lR4EWzNk:tAwh_QrdBsk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w8_lR4EWzNk:tAwh_QrdBsk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w8_lR4EWzNk:tAwh_QrdBsk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w8_lR4EWzNk:tAwh_QrdBsk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w8_lR4EWzNk:tAwh_QrdBsk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w8_lR4EWzNk:tAwh_QrdBsk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7080156067218545336
title: Critical Flaws Discovered in Azure App That Microsoft Secretly Installed on Linux VMs
uri: Critical-Flaws-Discovered-in-Azure-App-That-Microsoft-Secretly-Install
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7080156067218545336
content:
Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well as allow for remote takeover of vulnerable systems.
The list of flaws, collectively called OMIGOD by researchers from Wiz, affect a little-known software agent called Open Management Infrastructure <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cYBHGdbUNVY:IHjdzPpNtZw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cYBHGdbUNVY:IHjdzPpNtZw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cYBHGdbUNVY:IHjdzPpNtZw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cYBHGdbUNVY:IHjdzPpNtZw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cYBHGdbUNVY:IHjdzPpNtZw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cYBHGdbUNVY:IHjdzPpNtZw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cYBHGdbUNVY:IHjdzPpNtZw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cYBHGdbUNVY:IHjdzPpNtZw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-741152725641850358
title: Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks
uri: Windows-MSHTML-0-Day-Exploited-to-Deploy-Cobalt-Strike-Beacon-in-Targe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/741152725641850358
content:
Microsoft on Wednesday disclosed details of a targeting phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on compromised Windows systems.
"These attacks used the vulnerability, tracked as CVE-2021-40444, as part of an initial access campaign that distributed custom Cobalt Strike Beacon <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6b6tzNP05sQ:D6R7OLw5CL4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6b6tzNP05sQ:D6R7OLw5CL4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6b6tzNP05sQ:D6R7OLw5CL4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6b6tzNP05sQ:D6R7OLw5CL4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6b6tzNP05sQ:D6R7OLw5CL4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6b6tzNP05sQ:D6R7OLw5CL4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6b6tzNP05sQ:D6R7OLw5CL4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6b6tzNP05sQ:D6R7OLw5CL4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-609523872659947701
title: You Can Now Sign-in to Your Microsoft Accounts Without a Password
uri: You-Can-Now-Sign-in-to-Your-Microsoft-Accounts-Without-a-Password
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/609523872659947701
content:
Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification code sent via SMS or email.
The change is expected to be rolled out in the coming weeks.
"Except for auto-generated passwords that are nearly impossible to remember, we largely create our own<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWuHmV8W4ZA:QdZXrhqSiPE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWuHmV8W4ZA:QdZXrhqSiPE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWuHmV8W4ZA:QdZXrhqSiPE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWuHmV8W4ZA:QdZXrhqSiPE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWuHmV8W4ZA:QdZXrhqSiPE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWuHmV8W4ZA:QdZXrhqSiPE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kWuHmV8W4ZA:QdZXrhqSiPE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kWuHmV8W4ZA:QdZXrhqSiPE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7954657272505326307
title: Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released
uri: Third-Critical-Bug-Affects-Netgear-Smart-Switches-Details-and-PoC
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7954657272505326307
content:
New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control of vulnerable devices.
The flaw — dubbed "Seventh Inferno" (CVSS score: 9.8) — is part of a trio of security weaknesses, called Demon's Cries (CVSS score: 9.8) and Draconian Fear (CVSS score: 7.8)<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O38K3ZiFVdw:OzAB5EjKiiQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O38K3ZiFVdw:OzAB5EjKiiQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O38K3ZiFVdw:OzAB5EjKiiQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O38K3ZiFVdw:OzAB5EjKiiQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O38K3ZiFVdw:OzAB5EjKiiQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O38K3ZiFVdw:OzAB5EjKiiQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O38K3ZiFVdw:OzAB5EjKiiQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O38K3ZiFVdw:OzAB5EjKiiQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3916867567604553482
title: Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects
uri: Travis-CI-Flaw-Exposes-Secrets-of-Thousands-of-Open-Source-Projects
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3916867567604553482
content:
Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk of further attacks.
The issue — tracked as CVE-2021-41077 — concerns unauthorized access and plunder of secret environment data associated with a public open-source project during the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NpRawNWfCI:91eJ21apNaE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NpRawNWfCI:91eJ21apNaE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NpRawNWfCI:91eJ21apNaE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2NpRawNWfCI:91eJ21apNaE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NpRawNWfCI:91eJ21apNaE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2NpRawNWfCI:91eJ21apNaE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NpRawNWfCI:91eJ21apNaE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2NpRawNWfCI:91eJ21apNaE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2031560755437869422
title: Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years
uri: Malware-Attack-on-Aviation-Sector-Uncovered-After-Going-Unnoticed-for
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2031560755437869422
content:
A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale cyber offensives for extended periods of time while staying under the radar.
Cisco Talos dubbed the malware attacks "Operation Layover," building on previous research from the Microsoft Security Intelligence <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdCs_mO18Ps:aV518xpYXTQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdCs_mO18Ps:aV518xpYXTQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdCs_mO18Ps:aV518xpYXTQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kdCs_mO18Ps:aV518xpYXTQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdCs_mO18Ps:aV518xpYXTQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kdCs_mO18Ps:aV518xpYXTQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdCs_mO18Ps:aV518xpYXTQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kdCs_mO18Ps:aV518xpYXTQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9056707910013133053
title: New Malware Targets Windows Subsystem for Linux to Evade Detection
uri: New-Malware-Targets-Windows-Subsystem-for-Linux-to-Evade-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9056707910013133053
content:
A number of malicious samples have been created for the Windows Subsystem for Linux (WSL) with the goal of compromising Windows machines, highlighting a sneaky method that allows the operators to stay under the radar and thwart detection by popular anti-malware engines.
The "distinct tradecraft" marks the first instance where a threat actor has been found abusing WSL to install subsequent <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alb0Tv1cUr8:GgNWsgWK8ww:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alb0Tv1cUr8:GgNWsgWK8ww:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alb0Tv1cUr8:GgNWsgWK8ww:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=alb0Tv1cUr8:GgNWsgWK8ww:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alb0Tv1cUr8:GgNWsgWK8ww:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=alb0Tv1cUr8:GgNWsgWK8ww:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alb0Tv1cUr8:GgNWsgWK8ww:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=alb0Tv1cUr8:GgNWsgWK8ww:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4056129397113688417
title: Google to Auto-Reset Unused Android App Permissions for Billions of Devices
uri: Google-to-Auto-Reset-Unused-Android-App-Permissions-for-Billions-of-De
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4056129397113688417
content:
Google on Friday said it's bringing an Android 11 feature that auto-resets permissions granted to apps that haven't been used in months, to devices running Android versions 6 and above.
The expansion is expected to go live later this year in December 2021 and enabled on Android phones with Google Play services running Android 6.0 (API level 23) or higher, which the company said should cover "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h1dICbI5mzE:pxC0OODPMGs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h1dICbI5mzE:pxC0OODPMGs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h1dICbI5mzE:pxC0OODPMGs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h1dICbI5mzE:pxC0OODPMGs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h1dICbI5mzE:pxC0OODPMGs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h1dICbI5mzE:pxC0OODPMGs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h1dICbI5mzE:pxC0OODPMGs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h1dICbI5mzE:pxC0OODPMGs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4171517670749828317
title: Numando: A New Banking Trojan Targeting Latin American Users
uri: Numando-A-New-Banking-Trojan-Targeting-Latin-American-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4171517670749828317
content:
A newly spotted banking trojan has been caught leveraging legitimate platforms like YouTube and Pastebin to store its encrypted, remote configuration and commandeer infected Windows systems, making it the latest to join the long list of malware targeting Latin America (LATAM) after Guildma, Javali, Melcoz, Grandoreiro, Mekotio, Casbaneiro, Amavaldo, Vadokrist, and Janeleiro.
The threat actor <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mwd6MK_UJTc:JOWFo06QPgQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mwd6MK_UJTc:JOWFo06QPgQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mwd6MK_UJTc:JOWFo06QPgQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mwd6MK_UJTc:JOWFo06QPgQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mwd6MK_UJTc:JOWFo06QPgQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mwd6MK_UJTc:JOWFo06QPgQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mwd6MK_UJTc:JOWFo06QPgQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mwd6MK_UJTc:JOWFo06QPgQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2010801703380355216
title: A New Wave of Malware Attack Targeting Organizations in South America
uri: A-New-Wave-of-Malware-Attack-Targeting-Organizations-in-South-America
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2010801703380355216
content:
A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote access trojans (RATs) and geolocation filtering to avoid detection, according to new research.
Cybersecurity firm Trend Micro attributed the attacks to an advanced persistent threat (APT) tracked as APT-C-36 (aka Blind Eagle), a suspected <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0xlymO1MaG4:4ascxC6iemQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0xlymO1MaG4:4ascxC6iemQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0xlymO1MaG4:4ascxC6iemQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0xlymO1MaG4:4ascxC6iemQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0xlymO1MaG4:4ascxC6iemQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0xlymO1MaG4:4ascxC6iemQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0xlymO1MaG4:4ascxC6iemQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0xlymO1MaG4:4ascxC6iemQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8714745895005645755
title: Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters
uri: Europol-Busts-Major-Crime-Ring-Arrests-Over-100-Online-Fraudsters
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8714745895005645755
content:
Law enforcement agencies in Italy and Spain have dismantled an organized crime group linked to the Italian Mafia that was involved in online fraud, money laundering, drug trafficking, and property crime, netting the gang about €10 million ($11.7 million) in illegal proceeds in just a year.
"The suspects defrauded hundreds of victims through phishing attacks and other types of online fraud such <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWRBbPKV_2E:cKQsAq4AJ_s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWRBbPKV_2E:cKQsAq4AJ_s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWRBbPKV_2E:cKQsAq4AJ_s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CWRBbPKV_2E:cKQsAq4AJ_s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWRBbPKV_2E:cKQsAq4AJ_s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CWRBbPKV_2E:cKQsAq4AJ_s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWRBbPKV_2E:cKQsAq4AJ_s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CWRBbPKV_2E:cKQsAq4AJ_s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7042144274862221372
title: Cybersecurity Priorities in 2021: How Can CISOs Re-Analyze and Shift Focus?
uri: Cybersecurity-Priorities-in-2021-How-Can-CISOs-Re-Analyze-and-Shift-F
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7042144274862221372
content:
2020 was a year of relentless disruptions. The protective layer of secured enterprise networks and controlled IT environments of the physical premises did not exist. Over the past year, CISOs (Chief Information Security Officers) have had to grapple with the challenges of bolstering the security posture, minimizing risks, and ensuring business continuity in the new normal. The rise in volumes <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CoRyQi7Q1kE:e-DcWIL2Mko:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CoRyQi7Q1kE:e-DcWIL2Mko:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CoRyQi7Q1kE:e-DcWIL2Mko:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CoRyQi7Q1kE:e-DcWIL2Mko:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CoRyQi7Q1kE:e-DcWIL2Mko:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CoRyQi7Q1kE:e-DcWIL2Mko:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CoRyQi7Q1kE:e-DcWIL2Mko:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CoRyQi7Q1kE:e-DcWIL2Mko:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6372385501194309863
title: New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin
uri: New-Capoae-Malware-Infiltrates-WordPress-Sites-and-Installs-Backdoored
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6372385501194309863
content:
A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative credentials to co-opt them into a network with the goal of illegally mining cryptocurrency.
"The malware's primary tactic is to spread by taking advantage of vulnerable systems and weak administrative credentials. Once they've been infected, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LNnBCXKL1w0:-PXkNEb5cHs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LNnBCXKL1w0:-PXkNEb5cHs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LNnBCXKL1w0:-PXkNEb5cHs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LNnBCXKL1w0:-PXkNEb5cHs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LNnBCXKL1w0:-PXkNEb5cHs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LNnBCXKL1w0:-PXkNEb5cHs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LNnBCXKL1w0:-PXkNEb5cHs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LNnBCXKL1w0:-PXkNEb5cHs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-423485003509080502
title: Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug
uri: Cring-Ransomware-Gang-Exploits-11-Year-Old-ColdFusion-Bug
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/423485003509080502
content:
Unidentified threat actors breached a server running an unpatched, 11-year-old version of Adobe's ColdFusion 9 software in minutes to remotely take over control and deploy file-encrypting Cring ransomware on the target's network 79 hours after the hack.
The server, which belonged to an unnamed services company, was used to collect timesheet and accounting data for payroll as well as to host a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USuDSvrWDUo:KhkHZja4PXc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USuDSvrWDUo:KhkHZja4PXc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USuDSvrWDUo:KhkHZja4PXc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=USuDSvrWDUo:KhkHZja4PXc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USuDSvrWDUo:KhkHZja4PXc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=USuDSvrWDUo:KhkHZja4PXc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=USuDSvrWDUo:KhkHZja4PXc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=USuDSvrWDUo:KhkHZja4PXc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2978554180635131169
title: Unpatched High-Severity Vulnerability Affects Apple macOS Computers
uri: Unpatched-High-Severity-Vulnerability-Affects-Apple-macOS-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2978554180635131169
content:
Cybersecurity researchers on Tuesday disclosed details of an unpatched vulnerability in macOS Finder that could be abused by remote adversaries to trick users into running arbitrary commands on the machines.
"A vulnerability in macOS Finder allows files whose extension is inetloc to execute arbitrary commands, these files can be embedded inside emails which if the user clicks on them will <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9L96LFgOB5w:uOX5MjmCEJU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9L96LFgOB5w:uOX5MjmCEJU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9L96LFgOB5w:uOX5MjmCEJU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9L96LFgOB5w:uOX5MjmCEJU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9L96LFgOB5w:uOX5MjmCEJU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9L96LFgOB5w:uOX5MjmCEJU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9L96LFgOB5w:uOX5MjmCEJU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9L96LFgOB5w:uOX5MjmCEJU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6652371854312976786
title: High-Severity RCE Flaw Disclosed in Several Netgear Router Models
uri: High-Severity-RCE-Flaw-Disclosed-in-Several-Netgear-Router-Models
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6652371854312976786
content:
Networking equipment company Netgear has released patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system.
&lt;!--adsense--&gt;
Traced as CVE-2021-40847 (CVSS score: 8.1), the security weakness impacts the following models -

R6400v2 (fixed in firmware version 1.0.4.120)
R6700 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RMNDc21JRlo:tYj2onhYjVk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RMNDc21JRlo:tYj2onhYjVk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RMNDc21JRlo:tYj2onhYjVk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RMNDc21JRlo:tYj2onhYjVk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RMNDc21JRlo:tYj2onhYjVk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RMNDc21JRlo:tYj2onhYjVk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RMNDc21JRlo:tYj2onhYjVk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RMNDc21JRlo:tYj2onhYjVk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7714654579820908715
title: VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
uri: VMware-Warns-of-Critical-File-Upload-Vulnerability-Affecting-vCenter-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7714654579820908715
content:
VMware on Tuesday published a new bulletin warning of as many as 19 vulnerabilities in vCenter Server and Cloud Foundation appliances that a remote attacker could exploit to take control of an affected system.
The most urgent among them is an arbitrary file upload vulnerability in the Analytics service (CVE-2021-22005) that impacts vCenter Server 6.7 and 7.0 deployments. "A malicious actor with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r8ZzAQq3YU4:VtjcjaT0aKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r8ZzAQq3YU4:VtjcjaT0aKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r8ZzAQq3YU4:VtjcjaT0aKo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r8ZzAQq3YU4:VtjcjaT0aKo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r8ZzAQq3YU4:VtjcjaT0aKo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r8ZzAQq3YU4:VtjcjaT0aKo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r8ZzAQq3YU4:VtjcjaT0aKo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r8ZzAQq3YU4:VtjcjaT0aKo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4646360310541057318
title: The Gap in Your Zero Trust Implementation
uri: The-Gap-in-Your-Zero-Trust-Implementation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4646360310541057318
content:
Over the last several years, there have been numerous high-profile security breaches. These breaches have underscored the fact that traditional cyber defenses have become woefully inadequate and that stronger defenses are needed. As such, many organizations have transitioned toward a zero trust security model.
A zero trust security model is based on the idea that no IT resource should be trusted<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TD8dPwSf7Ds:9GNiHleq3QA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TD8dPwSf7Ds:9GNiHleq3QA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TD8dPwSf7Ds:9GNiHleq3QA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TD8dPwSf7Ds:9GNiHleq3QA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TD8dPwSf7Ds:9GNiHleq3QA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TD8dPwSf7Ds:9GNiHleq3QA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TD8dPwSf7Ds:9GNiHleq3QA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TD8dPwSf7Ds:9GNiHleq3QA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5005196413113906418
title: US Sanctions Cryptocurrency Exchange SUEX for Aiding Ransomware Gangs
uri: US-Sanctions-Cryptocurrency-Exchange-SUEX-for-Aiding-Ransomware-Gangs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5005196413113906418
content:
The U.S. Treasury Department on Tuesday imposed sanctions on Russian cryptocurrency exchange Suex for helping facilitate and launder transactions from at least eight ransomware variants as part of the government's efforts to crack down on a surge in ransomware incidents and make it difficult for bad actors to profit from such attacks using digital currencies.
"Virtual currency exchanges such as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lEF7-AJSuc0:Rv5zChble_Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lEF7-AJSuc0:Rv5zChble_Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lEF7-AJSuc0:Rv5zChble_Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lEF7-AJSuc0:Rv5zChble_Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lEF7-AJSuc0:Rv5zChble_Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lEF7-AJSuc0:Rv5zChble_Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lEF7-AJSuc0:Rv5zChble_Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lEF7-AJSuc0:Rv5zChble_Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3464381818826823205
title: New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures
uri: New-Nagios-Software-Bugs-Could-Let-Hackers-Take-Over-IT-Infrastructure
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3464381818826823205
content:
As many as 11 security vulnerabilities have been disclosed in Nagios network management systems, some of which could be chained to achieve pre-authenticated remote code execution with the highest privileges, as well as lead to credential theft and phishing attacks. 
Industrial cybersecurity firm Claroty, which discovered the flaws, said flaws in tools such as Nagios make them an attractive <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeFHS3DnjBY:4YXaaa_Uhl4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeFHS3DnjBY:4YXaaa_Uhl4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeFHS3DnjBY:4YXaaa_Uhl4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xeFHS3DnjBY:4YXaaa_Uhl4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeFHS3DnjBY:4YXaaa_Uhl4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xeFHS3DnjBY:4YXaaa_Uhl4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeFHS3DnjBY:4YXaaa_Uhl4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xeFHS3DnjBY:4YXaaa_Uhl4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3485570677736199481
title: How Cynet's Response Automation Helps Organizations Mitigate Cyber Threats
uri: How-Cynet-s-Response-Automation-Helps-Organizations-Mitigate-Cyber-Thr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3485570677736199481
content:
One of the determining factors of how much damage a cyber-attack cause is how fast organizations can respond to it. Time to response is critical for security teams, and it is a major hurdle for leaner teams.
To help improve this metric and enhance organizations’ ability to respond to attacks quickly, many endpoint detection and response (EDR) and extended detection and response (XDR) vendors <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ksXg3mvAbC0:-LOG9Vs94v8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ksXg3mvAbC0:-LOG9Vs94v8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ksXg3mvAbC0:-LOG9Vs94v8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ksXg3mvAbC0:-LOG9Vs94v8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ksXg3mvAbC0:-LOG9Vs94v8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ksXg3mvAbC0:-LOG9Vs94v8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ksXg3mvAbC0:-LOG9Vs94v8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ksXg3mvAbC0:-LOG9Vs94v8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8440051222081864351
title: Microsoft Warns of a Wide-Scale Phishing-as-a-Service Operation
uri: Microsoft-Warns-of-a-Wide-Scale-Phishing-as-a-Service-Operation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8440051222081864351
content:
Microsoft has opened the lid on a large-scale phishing-as-a-service (PHaaS) operation that's involved in selling phishing kits and email templates as well as providing hosting and automated services at a low cost, thus enabling cyber actors to purchase phishing campaigns and deploy them with minimal efforts.
"With over 100 available phishing templates that mimic known brands and services, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oor8QBAgjtY:40IDO-4Dijk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oor8QBAgjtY:40IDO-4Dijk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oor8QBAgjtY:40IDO-4Dijk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oor8QBAgjtY:40IDO-4Dijk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oor8QBAgjtY:40IDO-4Dijk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oor8QBAgjtY:40IDO-4Dijk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oor8QBAgjtY:40IDO-4Dijk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oor8QBAgjtY:40IDO-4Dijk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6927935843613455875
title: A New Bug in Microsoft Windows Could Let Hackers Easily Install a Rootkit
uri: A-New-Bug-in-Microsoft-Windows-Could-Let-Hackers-Easily-Install-a-Root
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6927935843613455875
content:
Security researchers have disclosed an unpatched weakness in Microsoft Windows Platform Binary Table (WPBT) affecting all Windows-based devices since Windows 8 that could be potentially exploited to install a rootkit and compromise the integrity of devices.
"These flaws make every Windows system vulnerable to easily-crafted attacks that install fraudulent vendor-specific tables," researchers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AhpTI3xcGPs:Zf12FOgbS90:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AhpTI3xcGPs:Zf12FOgbS90:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AhpTI3xcGPs:Zf12FOgbS90:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AhpTI3xcGPs:Zf12FOgbS90:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AhpTI3xcGPs:Zf12FOgbS90:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AhpTI3xcGPs:Zf12FOgbS90:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AhpTI3xcGPs:Zf12FOgbS90:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AhpTI3xcGPs:Zf12FOgbS90:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1749879993891529365
title: Why You Should Consider QEMU Live Patching
uri: Why-You-Should-Consider-QEMU-Live-Patching
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1749879993891529365
content:
Sysadmins know what the risks are of running unpatched services. Given the choice, and unlimited resources, most hardworking administrators will ensure that all systems and services are patched consistently.
But things are rarely that simple. Technical resources are limited, and patching can often be more complicated than it appears at first glance. Worse, some services are so hidden in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q0tJHjYUBvY:qtsv-OFyQao:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q0tJHjYUBvY:qtsv-OFyQao:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q0tJHjYUBvY:qtsv-OFyQao:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q0tJHjYUBvY:qtsv-OFyQao:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q0tJHjYUBvY:qtsv-OFyQao:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q0tJHjYUBvY:qtsv-OFyQao:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q0tJHjYUBvY:qtsv-OFyQao:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q0tJHjYUBvY:qtsv-OFyQao:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2262375089452006963
title: New Android Malware Targeting US, Canadian Users with COVID-19 Lures
uri: New-Android-Malware-Targeting-US-Canadian-Users-with-COVID-19-Lures
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2262375089452006963
content:
An "insidious" new SMS smishing malware has been found targeting Android mobile users in the U.S. and Canada as part of a new campaign that uses SMS text message lures related to COVID-19 regulations and vaccine information in an attempt to steal personal and financial data.
Proofpoint's messaging security subsidiary Cloudmark coined the emerging malware "TangleBot."
&lt;!--adsense--&gt;
"The malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onZZ-BuixwQ:xZ5FUxvUbro:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onZZ-BuixwQ:xZ5FUxvUbro:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onZZ-BuixwQ:xZ5FUxvUbro:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=onZZ-BuixwQ:xZ5FUxvUbro:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onZZ-BuixwQ:xZ5FUxvUbro:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=onZZ-BuixwQ:xZ5FUxvUbro:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=onZZ-BuixwQ:xZ5FUxvUbro:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=onZZ-BuixwQ:xZ5FUxvUbro:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3260784460581937618
title: Colombian Real Estate Agency Leak Exposes Records of Over 100,000 Buyers
uri: Colombian-Real-Estate-Agency-Leak-Exposes-Records-of-Over-100-000-Buye
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3260784460581937618
content:
More than one terabyte of data containing 5.5 million files has been left exposed, leaking personal information of over 100,000 customers of a Colombian real estate firm, according to cybersecurity company WizCase.
The breach was discovered by Ata Hakçıl and his team in a database owned by Coninsa Ramon H, a company that specializes in architecture, engineering, construction, and real estate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wX0ySGIpjl0:Q25pt8_gh-4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wX0ySGIpjl0:Q25pt8_gh-4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wX0ySGIpjl0:Q25pt8_gh-4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wX0ySGIpjl0:Q25pt8_gh-4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wX0ySGIpjl0:Q25pt8_gh-4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wX0ySGIpjl0:Q25pt8_gh-4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wX0ySGIpjl0:Q25pt8_gh-4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wX0ySGIpjl0:Q25pt8_gh-4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6174829457850173406
title: Microsoft Exchange Bug Exposes ~100,000 Windows Domain Credentials
uri: Microsoft-Exchange-Bug-Exposes-100-000-Windows-Domain-Credentials
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6174829457850173406
content:
An unpatched design flaw in the implementation of Microsoft Exchange's Autodiscover protocol has resulted in the leak of approximately 100,000 login names and passwords for Windows domains worldwide.
"This is a severe security issue, since if an attacker can control such domains or has the ability to 'sniff' traffic in the same network, they can capture domain credentials in plain text (HTTP <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nI_vQihlxnA:jpYodu1WqE8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nI_vQihlxnA:jpYodu1WqE8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nI_vQihlxnA:jpYodu1WqE8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nI_vQihlxnA:jpYodu1WqE8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nI_vQihlxnA:jpYodu1WqE8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nI_vQihlxnA:jpYodu1WqE8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nI_vQihlxnA:jpYodu1WqE8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nI_vQihlxnA:jpYodu1WqE8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3810484339985134548
title: Cisco Releases Patches 3 New Critical Flaws Affecting IOS XE Software
uri: Cisco-Releases-Patches-3-New-Critical-Flaws-Affecting-IOS-XE-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3810484339985134548
content:
Networking equipment maker Cisco Systems has rolled out patches to address three critical security vulnerabilities in its IOS XE network operating system that remote attackers could potentially abuse to execute arbitrary code with administrative privileges and trigger a denial-of-service (DoS) condition on vulnerable devices.
The list of three flaws is as follows -

CVE-2021-34770 (CVSS score: <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2UFqPvKE-Fw:P-bhTylHGI0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2UFqPvKE-Fw:P-bhTylHGI0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2UFqPvKE-Fw:P-bhTylHGI0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2UFqPvKE-Fw:P-bhTylHGI0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2UFqPvKE-Fw:P-bhTylHGI0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2UFqPvKE-Fw:P-bhTylHGI0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2UFqPvKE-Fw:P-bhTylHGI0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2UFqPvKE-Fw:P-bhTylHGI0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4747726331493130757
title: Urgent Apple iOS and macOS Updates Released to Fix Actively Exploited Zero-Days
uri: Urgent-Apple-iOS-and-macOS-Updates-Released-to-Fix-Actively-Exploited
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4747726331493130757
content:
Apple on Thursday released security updates to fix multiple security vulnerabilities in older versions of iOS and macOS that it says have been detected in exploits in the wild, in addition to expanding patches for a previously plugged security weakness abused by NSO Group's Pegasus surveillance tool to target iPhone users.
&lt;!--adsense--&gt;
Chief among them is CVE-2021-30869, a type confusion flaw <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bSQnUNeQEDM:Mz0l7h50vRQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bSQnUNeQEDM:Mz0l7h50vRQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bSQnUNeQEDM:Mz0l7h50vRQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bSQnUNeQEDM:Mz0l7h50vRQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bSQnUNeQEDM:Mz0l7h50vRQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bSQnUNeQEDM:Mz0l7h50vRQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bSQnUNeQEDM:Mz0l7h50vRQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bSQnUNeQEDM:Mz0l7h50vRQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4247648545895427853
title: Apple's New iCloud Private Relay Service Leaks Users' Real IP Addresses
uri: Apple-s-New-iCloud-Private-Relay-Service-Leaks-Users-Real-IP-Addresse
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4247648545895427853
content:
A new as-yet unpatched weakness in Apple's iCloud Private Relay feature could be circumvented to leak users' true IP addresses from iOS devices running the latest version of the operating system.
Introduced with iOS 15, which was officially released this week, iCloud Private Relay aims to improve anonymity on the web by employing a dual-hop architecture that effectively shields users' IP address<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s4zOAPnxFu8:9wGUumb9Ia4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s4zOAPnxFu8:9wGUumb9Ia4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s4zOAPnxFu8:9wGUumb9Ia4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s4zOAPnxFu8:9wGUumb9Ia4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s4zOAPnxFu8:9wGUumb9Ia4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s4zOAPnxFu8:9wGUumb9Ia4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s4zOAPnxFu8:9wGUumb9Ia4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s4zOAPnxFu8:9wGUumb9Ia4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5875042166816617902
title: Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows
uri: Google-Warns-of-a-New-Way-Hackers-Can-Make-Malware-Undetectable-on-Win
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5875042166816617902
content:
Cybersecurity researchers have disclosed a novel technique adopted by threat actors to deliberately evade detection with the help of malformed digital signatures of its malware payloads.
"Attackers created malformed code signatures that are treated as valid by Windows but are not able to be decoded or checked by OpenSSL code — which is used in a number of security scanning products," Google <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0oFzthS174:E3wHwo-jDNs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0oFzthS174:E3wHwo-jDNs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0oFzthS174:E3wHwo-jDNs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A0oFzthS174:E3wHwo-jDNs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0oFzthS174:E3wHwo-jDNs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A0oFzthS174:E3wHwo-jDNs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A0oFzthS174:E3wHwo-jDNs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A0oFzthS174:E3wHwo-jDNs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6073375266216429268
title: SonicWall Issues Patches for a New Critical Flaw in SMA 100 Series Devices
uri: SonicWall-Issues-Patches-for-a-New-Critical-Flaw-in-SMA-100-Series-Dev
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6073375266216429268
content:
Network security company SonicWall has addressed a critical security vulnerability affecting its Secure Mobile Access (SMA) 100 series appliances that can permit remote, unauthenticated attackers to gain administrator access on targeted devices remotely.
Tracked as CVE-2021-20034, the arbitrary file deletion flaw is rated 9.1 out of a maximum of 10 on the CVSS scoring system, and could allow an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZ03V3AHhdQ:HyV1x8v5L1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZ03V3AHhdQ:HyV1x8v5L1A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZ03V3AHhdQ:HyV1x8v5L1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XZ03V3AHhdQ:HyV1x8v5L1A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZ03V3AHhdQ:HyV1x8v5L1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XZ03V3AHhdQ:HyV1x8v5L1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XZ03V3AHhdQ:HyV1x8v5L1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XZ03V3AHhdQ:HyV1x8v5L1A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4382927518941073532
title: A New APT Hacker Group Spying On Hotels and Governments Worldwide
uri: A-New-APT-Hacker-Group-Spying-On-Hotels-and-Governments-Worldwide
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4382927518941073532
content:
A new advanced persistent threat (APT) has been behind a string of attacks against hotels across the world, along with governments, international organizations, engineering companies, and law firms.
Slovak cybersecurity firm ESET codenamed the cyber espionage group FamousSparrow, which it said has been active since at least August 2019, with victims located across Africa, Asia, Europe, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NimfalfF25s:LELfdvR4Z0I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NimfalfF25s:LELfdvR4Z0I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NimfalfF25s:LELfdvR4Z0I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NimfalfF25s:LELfdvR4Z0I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NimfalfF25s:LELfdvR4Z0I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NimfalfF25s:LELfdvR4Z0I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NimfalfF25s:LELfdvR4Z0I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NimfalfF25s:LELfdvR4Z0I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8845627449835813300
title: Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability
uri: Urgent-Chrome-Update-Released-to-Patch-Actively-Exploited-Zero-Day-Vul
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8845627449835813300
content:
Google on Friday rolled out an emergency security patch to its Chrome web browser to address a security flaw that's known to have an exploit in the wild.
Tracked as CVE-2021-37973, the vulnerability has been described as use after free in Portals API, a web page navigation system that enables a page to show another page as an inset and "perform a seamless transition to a new state, where the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PwebSfuRgtQ:V9bzppsS-sU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PwebSfuRgtQ:V9bzppsS-sU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PwebSfuRgtQ:V9bzppsS-sU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PwebSfuRgtQ:V9bzppsS-sU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PwebSfuRgtQ:V9bzppsS-sU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PwebSfuRgtQ:V9bzppsS-sU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PwebSfuRgtQ:V9bzppsS-sU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PwebSfuRgtQ:V9bzppsS-sU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-847080924257325567
title: A New Jupyter Malware Version is Being Distributed via MSI Installers
uri: A-New-Jupyter-Malware-Version-is-Being-Distributed-via-MSI-Installers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/847080924257325567
content:
Cybersecurity researchers have charted the evolution of Jupyter, a .NET infostealer known for singling out healthcare and education sectors, which make it exceptional at defeating most endpoint security scanning solutions.
The new delivery chain, spotted by Morphisec on September 8, underscores that the malware has not just continued to remain active but also showcases "how threat actors <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jvyBqhvoon8:5TnLkbU-oNw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jvyBqhvoon8:5TnLkbU-oNw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jvyBqhvoon8:5TnLkbU-oNw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jvyBqhvoon8:5TnLkbU-oNw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jvyBqhvoon8:5TnLkbU-oNw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jvyBqhvoon8:5TnLkbU-oNw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jvyBqhvoon8:5TnLkbU-oNw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jvyBqhvoon8:5TnLkbU-oNw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3623132556239093946
title: New Android Malware Steals Financial Data from 378 Banking and Wallet Apps
uri: New-Android-Malware-Steals-Financial-Data-from-378-Banking-and-Wallet
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3623132556239093946
content:
The operators behind the BlackRock mobile malware have surfaced back with a new Android banking trojan called ERMAC that targets Poland and has its roots in the infamous Cerberus malware, according to the latest research.
"The new trojan already has active distribution campaigns and is targeting 378 banking and wallet apps with overlays," ThreatFabric's CEO Cengiz Han Sahin said in an emailed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jKTB7FZFTxc:Mnn5T7TM4UE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jKTB7FZFTxc:Mnn5T7TM4UE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jKTB7FZFTxc:Mnn5T7TM4UE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jKTB7FZFTxc:Mnn5T7TM4UE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jKTB7FZFTxc:Mnn5T7TM4UE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jKTB7FZFTxc:Mnn5T7TM4UE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jKTB7FZFTxc:Mnn5T7TM4UE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jKTB7FZFTxc:Mnn5T7TM4UE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1703177955290421480
title: How Does DMARC Prevent Phishing?
uri: How-Does-DMARC-Prevent-Phishing
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1703177955290421480
content:
DMARC is a global standard for email authentication. It allows senders to verify that the email really comes from whom it claims to come from. This helps curb spam and phishing attacks, which are among the most prevalent cybercrimes of today. Gmail, Yahoo, and many other large email providers have implemented DMARC and praised its benefits in recent years.
If your company's domain name is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7li3ub2TF4:dzOAYcSbmE8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7li3ub2TF4:dzOAYcSbmE8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7li3ub2TF4:dzOAYcSbmE8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G7li3ub2TF4:dzOAYcSbmE8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7li3ub2TF4:dzOAYcSbmE8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G7li3ub2TF4:dzOAYcSbmE8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G7li3ub2TF4:dzOAYcSbmE8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G7li3ub2TF4:dzOAYcSbmE8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1381055138374545746
title: Russian Turla APT Group Deploying New Backdoor on Targeted Systems
uri: Russian-Turla-APT-Group-Deploying-New-Backdoor-on-Targeted-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1381055138374545746
content:
State-sponsored hackers affiliated with Russia are behind a new series of intrusions using a previously undocumented implant to compromise systems in the U.S., Germany, and Afghanistan.
Cisco Talos attributed the attacks to the Turla advanced persistent threat (APT) group, coining the malware "TinyTurla" for its limited functionality and efficient coding style that allows it to go undetected. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMlg-R85xWE:j2fOM8qf96Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMlg-R85xWE:j2fOM8qf96Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMlg-R85xWE:j2fOM8qf96Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lMlg-R85xWE:j2fOM8qf96Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMlg-R85xWE:j2fOM8qf96Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lMlg-R85xWE:j2fOM8qf96Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lMlg-R85xWE:j2fOM8qf96Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lMlg-R85xWE:j2fOM8qf96Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-114715146510380579
title: Microsoft Warns of FoggyWeb Malware Targeting Active Directory FS Servers
uri: Microsoft-Warns-of-FoggyWeb-Malware-Targeting-Active-Directory-FS-Serv
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/114715146510380579
content:
Microsoft on Monday revealed new malware deployed by the hacking group behind the SolarWinds supply chain attack last December to deliver additional payloads and steal sensitive information from Active Directory Federation Services (AD FS) servers.
The tech giant's Threat Intelligence Center (MSTIC) codenamed the "passive and highly targeted backdoor" FoggyWeb, making it the threat actor tracked<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=omq9oO8cSzE:i_cR5vtNeFg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=omq9oO8cSzE:i_cR5vtNeFg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=omq9oO8cSzE:i_cR5vtNeFg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=omq9oO8cSzE:i_cR5vtNeFg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=omq9oO8cSzE:i_cR5vtNeFg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=omq9oO8cSzE:i_cR5vtNeFg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=omq9oO8cSzE:i_cR5vtNeFg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=omq9oO8cSzE:i_cR5vtNeFg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8952856871364636462
title: New BloodyStealer Trojan Steals Gamers' Epic Games and Steam Accounts
uri: New-BloodyStealer-Trojan-Steals-Gamers-Epic-Games-and-Steam-Accounts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8952856871364636462
content:
A new advanced trojan sold on Russian-speaking underground forums comes with capabilities to steal users' accounts on popular online video game distribution services, including Steam, Epic Games Store, and EA Origin, underscoring a growing threat to the lucrative gaming market.
Cybersecurity firm Kaspersky, which coined the malware "BloodyStealer," said it first detected the malicious tool in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qNeq_n_89Ao:NbEDuhx7_r0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qNeq_n_89Ao:NbEDuhx7_r0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qNeq_n_89Ao:NbEDuhx7_r0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qNeq_n_89Ao:NbEDuhx7_r0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qNeq_n_89Ao:NbEDuhx7_r0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qNeq_n_89Ao:NbEDuhx7_r0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qNeq_n_89Ao:NbEDuhx7_r0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qNeq_n_89Ao:NbEDuhx7_r0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7694057219999628549
title: Atlassian Confluence RCE Flaw Abused in Multiple Cyberattack Campaigns
uri: Atlassian-Confluence-RCE-Flaw-Abused-in-Multiple-Cyberattack-Campaigns
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7694057219999628549
content:
Opportunistic threat actors have been found actively exploiting a recently disclosed critical security flaw in Atlassian Confluence deployments across Windows and Linux to deploy web shells that result in the execution of crypto miners on compromised systems.
Tracked as CVE-2021-26084 (CVSS score: 9.8), the vulnerability concerns an OGNL (Object-Graph Navigation Language) injection flaw that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8IopGOimhFY:CD2SGHr_7XY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8IopGOimhFY:CD2SGHr_7XY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8IopGOimhFY:CD2SGHr_7XY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8IopGOimhFY:CD2SGHr_7XY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8IopGOimhFY:CD2SGHr_7XY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8IopGOimhFY:CD2SGHr_7XY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8IopGOimhFY:CD2SGHr_7XY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8IopGOimhFY:CD2SGHr_7XY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4168220879388227796
title: New FinSpy Malware Variant Infects Windows Systems With UEFI Bootkit
uri: New-FinSpy-Malware-Variant-Infects-Windows-Systems-With-UEFI-Bootkit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4168220879388227796
content:
Commercially developed FinFisher surveillanceware has been upgraded to infect Windows devices using a UEFI (Unified Extensible Firmware Interface) bootkit using a trojanized Windows Boot Manager, marking a shift in infection vectors that allow it to elude discovery and analysis.
Detected in the wild since 2011, FinFisher (aka FinSpy or Wingbird) is a spyware toolset for Windows, macOS, and Linux<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F3qIQhPCctQ:AovAqxLr9hk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F3qIQhPCctQ:AovAqxLr9hk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F3qIQhPCctQ:AovAqxLr9hk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F3qIQhPCctQ:AovAqxLr9hk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F3qIQhPCctQ:AovAqxLr9hk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F3qIQhPCctQ:AovAqxLr9hk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F3qIQhPCctQ:AovAqxLr9hk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F3qIQhPCctQ:AovAqxLr9hk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4018681138358997756
title: Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts
uri: Hackers-Targeting-Brazil-s-PIX-Payment-System-to-Drain-Users-Bank-Acc
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4018681138358997756
content:
Two newly discovered malicious Android applications on Google Play Store have been used to target users of Brazil's instant payment ecosystem in a likely attempt to lure victims into fraudulently transferring their entire account balances into another bank account under cybercriminals' control.
"The attackers distributed two different variants of banking malware, named PixStealer and MalRhino, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OCkGPFmfiCg:41ccPVL3h84:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OCkGPFmfiCg:41ccPVL3h84:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OCkGPFmfiCg:41ccPVL3h84:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OCkGPFmfiCg:41ccPVL3h84:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OCkGPFmfiCg:41ccPVL3h84:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OCkGPFmfiCg:41ccPVL3h84:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OCkGPFmfiCg:41ccPVL3h84:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OCkGPFmfiCg:41ccPVL3h84:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5661847268031882949
title: Beware! This Android Trojan Stole Millions of Dollars from Over 10 Million Users
uri: Beware-This-Android-Trojan-Stole-Millions-of-Dollars-from-Over-10-Mil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5661847268031882949
content:
A newly discovered "aggressive" mobile campaign has infected north of 10 million users from over 70 countries via seemingly innocuous Android apps that subscribe the individuals to premium services costing €36 (~$42) per month without their knowledge.
Zimperium zLabs dubbed the malicious trojan "GriftHorse." The money-making scheme is believed to have been under active development starting from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b3GTN46Tr84:a_hdNvO7mms:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b3GTN46Tr84:a_hdNvO7mms:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b3GTN46Tr84:a_hdNvO7mms:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b3GTN46Tr84:a_hdNvO7mms:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b3GTN46Tr84:a_hdNvO7mms:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b3GTN46Tr84:a_hdNvO7mms:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b3GTN46Tr84:a_hdNvO7mms:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b3GTN46Tr84:a_hdNvO7mms:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8674096974455785542
title: [eBook] Your First 90 Days as CISO — 9 Steps to Success
uri: eBook-Your-First-90-Days-as-CISO-9-Steps-to-Success
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8674096974455785542
content:
Chief Information Security Officers (CISOs) are an essential pillar of an organization’s defense, and they must account for a lot. Especially for new CISOs, this can be a daunting task. The first 90 days for a new CISO are crucial in setting up their security team, so there is little time to waste, and much to accomplish. 
Fortunately. A new guide by XDR provider Cynet (download here) looks to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8jRtMCzLBOk:4R4pjlK_uAI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8jRtMCzLBOk:4R4pjlK_uAI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8jRtMCzLBOk:4R4pjlK_uAI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8jRtMCzLBOk:4R4pjlK_uAI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8jRtMCzLBOk:4R4pjlK_uAI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8jRtMCzLBOk:4R4pjlK_uAI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8jRtMCzLBOk:4R4pjlK_uAI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8jRtMCzLBOk:4R4pjlK_uAI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4334862721368474722
title: Facebook Releases New Tool That Finds Security and Privacy Bugs in Android Apps
uri: Facebook-Releases-New-Tool-That-Finds-Security-and-Privacy-Bugs-in-And
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4334862721368474722
content:
Facebook on Wednesday announced it's open-sourcing Mariana Trench, an Android-focused static analysis platform the company uses to detect and prevent security and privacy bugs in applications created for the mobile operating system at scale.
"[Mariana Trench] is designed to be able to scan large mobile codebases and flag potential issues on pull requests before they make it into production," the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dHA0TPs5P64:sWbGmxrTeXg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dHA0TPs5P64:sWbGmxrTeXg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dHA0TPs5P64:sWbGmxrTeXg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dHA0TPs5P64:sWbGmxrTeXg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dHA0TPs5P64:sWbGmxrTeXg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dHA0TPs5P64:sWbGmxrTeXg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dHA0TPs5P64:sWbGmxrTeXg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dHA0TPs5P64:sWbGmxrTeXg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5272472096669348552
title: Cybersecurity Firm Group-IB's CEO Arrested Over Treason Charges in Russia
uri: Cybersecurity-Firm-Group-IB-s-CEO-Arrested-Over-Treason-Charges-in-Rus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5272472096669348552
content:
Russian authorities on Wednesday arrested and detained Ilya Sachkov, the founder of cybersecurity firm Group-IB, for two months in Moscow on charges of state treason following a search of its office on September 28.
The Russian company, which is headquartered in Singapore, confirmed the development but noted the "reason for the search was not yet clear," adding "The decentralized infrastructure <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mnu9AvEX94:CcZQIiBfdik:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mnu9AvEX94:CcZQIiBfdik:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mnu9AvEX94:CcZQIiBfdik:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mnu9AvEX94:CcZQIiBfdik:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mnu9AvEX94:CcZQIiBfdik:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mnu9AvEX94:CcZQIiBfdik:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mnu9AvEX94:CcZQIiBfdik:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mnu9AvEX94:CcZQIiBfdik:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3666980890060491029
title: ImmuniWeb Launches Free Cloud Security Test to Detect Unprotected Storage
uri: ImmuniWeb-Launches-Free-Cloud-Security-Test-to-Detect-Unprotected-Stor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3666980890060491029
content:
The IDC cloud security survey 2021 states that as many as 98% of companies were victims of a cloud data breach within the past 18 months.
Fostered by the pandemic, small and large organizations from all over the world are migrating their data and infrastructure into a public cloud, while often underestimating novel and cloud-specific security or privacy issues. 
Nearly every morning, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-oYMaqQhJCo:hwAljSOOC7o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-oYMaqQhJCo:hwAljSOOC7o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-oYMaqQhJCo:hwAljSOOC7o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-oYMaqQhJCo:hwAljSOOC7o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-oYMaqQhJCo:hwAljSOOC7o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-oYMaqQhJCo:hwAljSOOC7o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-oYMaqQhJCo:hwAljSOOC7o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-oYMaqQhJCo:hwAljSOOC7o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-571376316403137946
title: New Tomiris Backdoor Found Linked to Hackers Behind SolarWinds Cyberattack
uri: New-Tomiris-Backdoor-Found-Linked-to-Hackers-Behind-SolarWinds-Cyberat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/571376316403137946
content:
Cybersecurity researchers on Wednesday disclosed a previously undocumented backdoor likely designed and developed by the Nobelium advanced persistent threat (APT) behind last year's SolarWinds supply chain attack, joining the threat actor's ever-expanding arsenal of hacking tools.
Moscow-headquartered firm Kaspersky codenamed the malware "Tomiris," calling out its similarities to another <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aF7dlv3ZIuw:ifAPigKkC1w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aF7dlv3ZIuw:ifAPigKkC1w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aF7dlv3ZIuw:ifAPigKkC1w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aF7dlv3ZIuw:ifAPigKkC1w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aF7dlv3ZIuw:ifAPigKkC1w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aF7dlv3ZIuw:ifAPigKkC1w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aF7dlv3ZIuw:ifAPigKkC1w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aF7dlv3ZIuw:ifAPigKkC1w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2358003819197459756
title: New Azure AD Bug Lets Hackers Brute-Force Passwords Without Getting Caught
uri: New-Azure-AD-Bug-Lets-Hackers-Brute-Force-Passwords-Without-Getting-Ca
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2358003819197459756
content:
Cybersecurity researchers have disclosed an unpatched security vulnerability in the protocol used by Microsoft Azure Active Directory that potential adversaries could abuse to stage undetected brute-force attacks.
"This flaw allows threat actors to perform single-factor brute-force attacks against Azure Active Directory (Azure AD) without generating sign-in events in the targeted organization's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl8ybx4eMNQ:utnsnBO3fTU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl8ybx4eMNQ:utnsnBO3fTU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl8ybx4eMNQ:utnsnBO3fTU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jl8ybx4eMNQ:utnsnBO3fTU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl8ybx4eMNQ:utnsnBO3fTU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jl8ybx4eMNQ:utnsnBO3fTU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jl8ybx4eMNQ:utnsnBO3fTU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jl8ybx4eMNQ:utnsnBO3fTU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5213209603857102836
title: Incentivizing Developers is the Key to Better Security Practices
uri: Incentivizing-Developers-is-the-Key-to-Better-Security-Practices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5213209603857102836
content:
Professional developers want to embrace DevSecOps and write secure code, but their organizations need to support this seachange if they want that effort to grow.
The cyber threat landscape is becoming more complex by the day. Attackers are constantly scanning networks for vulnerable applications, programs, cloud instances, and the latest flavor of the month is APIs, widely considered an easy win<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zZ7T82tKAM:pjn_dWsBVbk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zZ7T82tKAM:pjn_dWsBVbk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zZ7T82tKAM:pjn_dWsBVbk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5zZ7T82tKAM:pjn_dWsBVbk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zZ7T82tKAM:pjn_dWsBVbk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5zZ7T82tKAM:pjn_dWsBVbk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5zZ7T82tKAM:pjn_dWsBVbk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5zZ7T82tKAM:pjn_dWsBVbk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-213257199809501090
title: Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws
uri: Update-Google-Chrome-ASAP-to-Patch-2-New-Actively-Exploited-Zero-Day-F
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/213257199809501090
content:
Google on Thursday pushed urgent security fixes for its Chrome browser, including a pair of new security weaknesses that the company said are being exploited in the wild, making them the fourth and fifth actively zero-days plugged this month alone.
The issues, designated as CVE-2021-37975 and CVE-2021-37976, are part of a total of four patches, and concern a use-after-free flaw in V8 JavaScript <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iq41tGIQ0Qk:KcjuKeMf6ws:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iq41tGIQ0Qk:KcjuKeMf6ws:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iq41tGIQ0Qk:KcjuKeMf6ws:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iq41tGIQ0Qk:KcjuKeMf6ws:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iq41tGIQ0Qk:KcjuKeMf6ws:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iq41tGIQ0Qk:KcjuKeMf6ws:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Iq41tGIQ0Qk:KcjuKeMf6ws:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Iq41tGIQ0Qk:KcjuKeMf6ws:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6483073195108488384
title: Beware of Fake Amnesty International Antivirus for Pegasus that Hacks PCs with Malware
uri: Beware-of-Fake-Amnesty-International-Antivirus-for-Pegasus-that-Hacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6483073195108488384
content:
In yet another indicator of how hacking groups are quick to capitalize on world events and improvise their attack campaigns for maximum impact, threat actors have been discovered impersonating Amnesty International to distribute malware that purports to be security software designed to safeguard against NSO Group's Pegasus surveillanceware. 
"Adversaries have set up a phony website that looks <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEAHRDfL7Cc:KFMGBVr7C-o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEAHRDfL7Cc:KFMGBVr7C-o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEAHRDfL7Cc:KFMGBVr7C-o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CEAHRDfL7Cc:KFMGBVr7C-o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEAHRDfL7Cc:KFMGBVr7C-o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CEAHRDfL7Cc:KFMGBVr7C-o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CEAHRDfL7Cc:KFMGBVr7C-o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CEAHRDfL7Cc:KFMGBVr7C-o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3354433910406179009
title: Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones
uri: Apple-Pay-Can-be-Abused-to-Make-Contactless-Payments-From-Locked-iPhon
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3354433910406179009
content:
Cybersecurity researchers have disclosed an unpatched flaw in Apple Pay that attackers could abuse to make an unauthorized Visa payment with a locked iPhone by taking advantage of the Express Travel mode set up in the device's wallet.
"An attacker only needs a stolen, powered on iPhone. The transactions could also be relayed from an iPhone inside someone's bag, without their knowledge," a group <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk8KgeyQBv0:PuAF51UurvI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk8KgeyQBv0:PuAF51UurvI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk8KgeyQBv0:PuAF51UurvI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nk8KgeyQBv0:PuAF51UurvI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk8KgeyQBv0:PuAF51UurvI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nk8KgeyQBv0:PuAF51UurvI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nk8KgeyQBv0:PuAF51UurvI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nk8KgeyQBv0:PuAF51UurvI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6197050523407728366
title: Chinese Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users
uri: Chinese-Hackers-Used-a-New-Rootkit-to-Spy-on-Targeted-Windows-10-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6197050523407728366
content:
A formerly unknown Chinese-speaking threat actor has been linked to a long-standing evasive operation aimed at South East Asian targets as far back as July 2020 to deploy a kernel-mode rootkit on compromised Windows systems.
Attacks mounted by the hacking group, dubbed GhostEmperor by Kaspersky, are also said to have used a "sophisticated multi-stage malware framework" that allows for providing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWO3v3Txb7M:1AqegSCXz1k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWO3v3Txb7M:1AqegSCXz1k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWO3v3Txb7M:1AqegSCXz1k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iWO3v3Txb7M:1AqegSCXz1k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWO3v3Txb7M:1AqegSCXz1k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iWO3v3Txb7M:1AqegSCXz1k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWO3v3Txb7M:1AqegSCXz1k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iWO3v3Txb7M:1AqegSCXz1k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9162295459488562662
title: A New APT Hacking Group Targeting Fuel, Energy, and Aviation Industries
uri: A-New-APT-Hacking-Group-Targeting-Fuel-Energy-and-Aviation-Industrie
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9162295459488562662
content:
A previously undocumented threat actor has been identified as behind a string of attacks targeting fuel, energy, and aviation production industries in Russia, the U.S., India, Nepal, Taiwan, and Japan with the goal of stealing data from compromised networks.
Cybersecurity company Positive Technologies dubbed the advanced persistent threat (APT) group ChamelGang — referring to their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gnqAEGGs4IM:jdbIO2lHXoU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gnqAEGGs4IM:jdbIO2lHXoU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gnqAEGGs4IM:jdbIO2lHXoU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gnqAEGGs4IM:jdbIO2lHXoU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gnqAEGGs4IM:jdbIO2lHXoU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gnqAEGGs4IM:jdbIO2lHXoU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gnqAEGGs4IM:jdbIO2lHXoU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gnqAEGGs4IM:jdbIO2lHXoU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2904513837259109877
title: The Shortfalls of Mean Time Metrics in Cybersecurity
uri: The-Shortfalls-of-Mean-Time-Metrics-in-Cybersecurity
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2904513837259109877
content:
Security teams at mid-sized organizations are constantly faced with the question of "what does success look like?". At ActZero, their continued data-driven approach to cybersecurity invites them to grapple daily with measuring, evaluating, and validating the work they do on behalf of their customers. 
Like most, they initially turned toward the standard metrics used in cybersecurity, built <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T1hyXfzc_FU:UMpSb46R9Ds:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T1hyXfzc_FU:UMpSb46R9Ds:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T1hyXfzc_FU:UMpSb46R9Ds:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T1hyXfzc_FU:UMpSb46R9Ds:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T1hyXfzc_FU:UMpSb46R9Ds:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T1hyXfzc_FU:UMpSb46R9Ds:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=T1hyXfzc_FU:UMpSb46R9Ds:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=T1hyXfzc_FU:UMpSb46R9Ds:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2230362453188038941
title: Creating Wireless Signals with Ethernet Cable to Steal Data from Air-Gapped Systems
uri: Creating-Wireless-Signals-with-Ethernet-Cable-to-Steal-Data-from-Air-G
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2230362453188038941
content:
A newly discovered data exfiltration mechanism employs Ethernet cables as a "transmitting antenna" to stealthily siphon highly-sensitive data from air-gapped systems, according to the latest research.
"It's interesting that the wires that came to protect the air-gap become the vulnerability of the air gap in this attack," Dr. Mordechai Guri, the head of R&amp;D in the Cyber Security Research Center <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xUCEPgmL0Qo:U5XYrHSULeg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xUCEPgmL0Qo:U5XYrHSULeg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xUCEPgmL0Qo:U5XYrHSULeg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xUCEPgmL0Qo:U5XYrHSULeg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xUCEPgmL0Qo:U5XYrHSULeg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xUCEPgmL0Qo:U5XYrHSULeg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xUCEPgmL0Qo:U5XYrHSULeg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xUCEPgmL0Qo:U5XYrHSULeg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7259180495434633605
title: Poorly Configured Apache Airflow Instances Leak Credentials for Popular Services
uri: Poorly-Configured-Apache-Airflow-Instances-Leak-Credentials-for-Popula
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7259180495434633605
content:
Cybersecurity researchers on Monday discovered misconfigurations across older versions of Apache Airflow instances belonging to a number of high-profile companies across various sectors, resulting in the exposure of sensitive credentials for popular platforms and services such as Amazon Web Services (AWS), Binance, Google Cloud Platform (GCP), PayPal, Slack, and Stripe.
"These unsecured <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u66NJxSUooY:PbQ3xNpY_Jg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u66NJxSUooY:PbQ3xNpY_Jg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u66NJxSUooY:PbQ3xNpY_Jg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=u66NJxSUooY:PbQ3xNpY_Jg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u66NJxSUooY:PbQ3xNpY_Jg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=u66NJxSUooY:PbQ3xNpY_Jg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u66NJxSUooY:PbQ3xNpY_Jg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=u66NJxSUooY:PbQ3xNpY_Jg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6022345697636241061
title: Ransomware Hackers Who Attacked Over 100 Companies Arrested in Ukraine
uri: Ransomware-Hackers-Who-Attacked-Over-100-Companies-Arrested-in-Ukraine
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6022345697636241061
content:
Law enforcement agencies have announced the arrest of two "prolific ransomware operators" in Ukraine who allegedly conducted a string of targeted attacks against large industrial entities in Europe and North America since at least April 2020, marking the latest step in combating ransomware incidents.
The joint exercise was undertaken on September 28 by officials from the French National <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WBZ_jR-ABhU:ZFP1p2BfbJM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WBZ_jR-ABhU:ZFP1p2BfbJM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WBZ_jR-ABhU:ZFP1p2BfbJM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WBZ_jR-ABhU:ZFP1p2BfbJM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WBZ_jR-ABhU:ZFP1p2BfbJM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WBZ_jR-ABhU:ZFP1p2BfbJM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WBZ_jR-ABhU:ZFP1p2BfbJM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WBZ_jR-ABhU:ZFP1p2BfbJM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1207183796679735421
title: Apache Warns of Zero-Day Exploit in the Wild — Patch You Web Servers Now!
uri: Apache-Warns-of-Zero-Day-Exploit-in-the-Wild-Patch-You-Web-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1207183796679735421
content:
Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild.
"A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the expected document root," the open-source<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cp0U2eKjQ30:_3RqXXsCqoc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cp0U2eKjQ30:_3RqXXsCqoc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cp0U2eKjQ30:_3RqXXsCqoc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cp0U2eKjQ30:_3RqXXsCqoc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cp0U2eKjQ30:_3RqXXsCqoc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cp0U2eKjQ30:_3RqXXsCqoc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cp0U2eKjQ30:_3RqXXsCqoc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cp0U2eKjQ30:_3RqXXsCqoc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5597839329749057438
title: New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers
uri: New-Study-Links-Seemingly-Disparate-Malware-Attacks-to-Chinese-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5597839329749057438
content:
Chinese cyber espionage group APT41 has been linked to seemingly disparate malware campaigns, according to fresh research that has mapped together additional parts of the group's network infrastructure to hit upon a state-sponsored campaign that takes advantage of COVID-themed phishing lures to target victims in India. 
"The image we uncovered was that of a state-sponsored campaign that plays on<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wFMqRw3SpeE:WgPA_5YCPf8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wFMqRw3SpeE:WgPA_5YCPf8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wFMqRw3SpeE:WgPA_5YCPf8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wFMqRw3SpeE:WgPA_5YCPf8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wFMqRw3SpeE:WgPA_5YCPf8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wFMqRw3SpeE:WgPA_5YCPf8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wFMqRw3SpeE:WgPA_5YCPf8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wFMqRw3SpeE:WgPA_5YCPf8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1798942426690377053
title: Researchers Discover UEFI Bootkit Targeting Windows Computers Since 2012
uri: Researchers-Discover-UEFI-Bootkit-Targeting-Windows-Computers-Since-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1798942426690377053
content:
Cybersecurity researchers on Tuesday revealed details of a previously undocumented UEFI (Unified Extensible Firmware Interface) bootkit that has been put to use by threat actors to backdoor Windows systems as early as 2012 by modifying a legitimate Windows Boot Manager binary to achieve persistence, once again demonstrating how technology meant to secure the environment prior to loading the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Az0020v418M:ixJe9PPCD9U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Az0020v418M:ixJe9PPCD9U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Az0020v418M:ixJe9PPCD9U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Az0020v418M:ixJe9PPCD9U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Az0020v418M:ixJe9PPCD9U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Az0020v418M:ixJe9PPCD9U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Az0020v418M:ixJe9PPCD9U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Az0020v418M:ixJe9PPCD9U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3128801807335323458
title: Multiple Critical Flaws Discovered in Honeywell Experion PKS and ACE Controllers
uri: Multiple-Critical-Flaws-Discovered-in-Honeywell-Experion-PKS-and-ACE-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3128801807335323458
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday released an advisory regarding multiple security vulnerabilities affecting all versions of Honeywell Experion Process Knowledge System C200, C200E, C300, and ACE controllers that could be exploited to achieve remote code execution and denial-of-service (DoS) conditions.
"A Control Component Library (CCL) may be modified <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6ZlWyf37CQ:Y7gqFuMYIAQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6ZlWyf37CQ:Y7gqFuMYIAQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6ZlWyf37CQ:Y7gqFuMYIAQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c6ZlWyf37CQ:Y7gqFuMYIAQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6ZlWyf37CQ:Y7gqFuMYIAQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c6ZlWyf37CQ:Y7gqFuMYIAQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6ZlWyf37CQ:Y7gqFuMYIAQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c6ZlWyf37CQ:Y7gqFuMYIAQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-306454416657930179
title: Google to turn on 2-factor authentication by default for 150 million users
uri: Google-to-turn-on-2-factor-authentication-by-default-for-150-million-u
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/306454416657930179
content:
Google has announced plans to automatically enroll about 150 million users into its two-factor authentication scheme by the end of the year as part of its ongoing efforts to prevent unauthorized access to accounts and improve security.
In addition, the internet giant said it also intends to require 2 million YouTube creators to switch on the setting, which it calls two-step verification (2SV), <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9VYztXhBx_8:gr9jt2LRovA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9VYztXhBx_8:gr9jt2LRovA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9VYztXhBx_8:gr9jt2LRovA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9VYztXhBx_8:gr9jt2LRovA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9VYztXhBx_8:gr9jt2LRovA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9VYztXhBx_8:gr9jt2LRovA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9VYztXhBx_8:gr9jt2LRovA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9VYztXhBx_8:gr9jt2LRovA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1104450171511583419
title: Iranian Hackers Abuse Dropbox in Cyberattacks Against Aerospace and Telecom Firms
uri: Iranian-Hackers-Abuse-Dropbox-in-Cyberattacks-Against-Aerospace-and-Te
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1104450171511583419
content:
Details have emerged about a new cyber espionage campaign directed against the aerospace and telecommunications industries, primarily in the Middle East, with the goal of stealing sensitive information about critical assets, organizations' infrastructure, and technology while remaining in the dark and successfully evading security solutions.
Boston-based cybersecurity company Cybereason dubbed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWLIwnoeDJI:qC4Xc8Eo-mQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWLIwnoeDJI:qC4Xc8Eo-mQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWLIwnoeDJI:qC4Xc8Eo-mQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CWLIwnoeDJI:qC4Xc8Eo-mQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWLIwnoeDJI:qC4Xc8Eo-mQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CWLIwnoeDJI:qC4Xc8Eo-mQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CWLIwnoeDJI:qC4Xc8Eo-mQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CWLIwnoeDJI:qC4Xc8Eo-mQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3675953503791286185
title: Twitch Suffers Massive 125GB Data and Source Code Leak Due to Server Misconfiguration
uri: Twitch-Suffers-Massive-125GB-Data-and-Source-Code-Leak-Due-to-Server-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3675953503791286185
content:
Interactive livestreaming platform Twitch acknowledged a "breach" after an anonymous poster on the 4chan messaging board leaked its source code, an unreleased Steam competitor from Amazon Game Studios, details of creator payouts, proprietary software development kits, and other internal tools.
The Amazon-owned service said it's "working with urgency to understand the extent of this," adding the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4XuwtoygqKk:WlUG6Z-JgE0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4XuwtoygqKk:WlUG6Z-JgE0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4XuwtoygqKk:WlUG6Z-JgE0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4XuwtoygqKk:WlUG6Z-JgE0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4XuwtoygqKk:WlUG6Z-JgE0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4XuwtoygqKk:WlUG6Z-JgE0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4XuwtoygqKk:WlUG6Z-JgE0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4XuwtoygqKk:WlUG6Z-JgE0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1441862404294702917
title: Cyber Security WEBINAR — How to Ace Your InfoSec Board Deck
uri: Cyber-Security-WEBINAR-How-to-Ace-Your-InfoSec-Board-Deck
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1441862404294702917
content:
Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident response plans, and security policies. On the other, they must be able to communicate the importance of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SSgu3N1TmJ4:XFQf9ivRbLY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SSgu3N1TmJ4:XFQf9ivRbLY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SSgu3N1TmJ4:XFQf9ivRbLY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SSgu3N1TmJ4:XFQf9ivRbLY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SSgu3N1TmJ4:XFQf9ivRbLY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SSgu3N1TmJ4:XFQf9ivRbLY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SSgu3N1TmJ4:XFQf9ivRbLY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SSgu3N1TmJ4:XFQf9ivRbLY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1840963401222974029
title: Apple now requires all apps to make it easy for users to delete their accounts
uri: Apple-now-requires-all-apps-to-make-it-easy-for-users-to-delete-their
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1840963401222974029
content:
All third-party iOS, iPadOS, and macOS apps that allow users to create an account should also provide a method for terminating their accounts from within the apps beginning next year, Apple said on Wednesday.
"This requirement applies to all app submissions starting January 31, 2022," the iPhone maker said, urging developers to "review any laws that may require you to maintain certain types of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oj_bIASd1os:5CWi3M7knns:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oj_bIASd1os:5CWi3M7knns:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oj_bIASd1os:5CWi3M7knns:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oj_bIASd1os:5CWi3M7knns:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oj_bIASd1os:5CWi3M7knns:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oj_bIASd1os:5CWi3M7knns:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oj_bIASd1os:5CWi3M7knns:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oj_bIASd1os:5CWi3M7knns:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5659472393744385893
title: Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects
uri: Code-Execution-Bug-Affects-Yamale-Python-Package-Used-by-Over-200
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5659472393744385893
content:
A high-severity code injection vulnerability has been disclosed in 23andMe's Yamale, a schema and validator for YAML, that could be trivially exploited by adversaries to execute arbitrary Python code.
The flaw, tracked as CVE-2021-38305 (CVSS score: 7.8), involves manipulating the schema file provided as input to the tool to circumvent protections and achieve code execution. Particularly, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1YJIDrqCq8:lFRwzfCwUhE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1YJIDrqCq8:lFRwzfCwUhE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1YJIDrqCq8:lFRwzfCwUhE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k1YJIDrqCq8:lFRwzfCwUhE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1YJIDrqCq8:lFRwzfCwUhE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k1YJIDrqCq8:lFRwzfCwUhE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k1YJIDrqCq8:lFRwzfCwUhE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k1YJIDrqCq8:lFRwzfCwUhE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4184064564856175973
title: Penetration Testing Your AWS Environment - A CTO's Guide
uri: Penetration-Testing-Your-AWS-Environment-A-CTO-s-Guide
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4184064564856175973
content:
So, you've been thinking about getting a Penetration Test done on your Amazon Web Services (AWS) environment. Great! What should that involve exactly? 
There are many options available, and knowing what you need will help you make your often limited security budget go as far as possible. Broadly, the key focus areas for most penetration tests involving AWS:

Your externally accessible cloud <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYXlRMMHWG4:hkTiFcm9bV4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYXlRMMHWG4:hkTiFcm9bV4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYXlRMMHWG4:hkTiFcm9bV4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zYXlRMMHWG4:hkTiFcm9bV4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYXlRMMHWG4:hkTiFcm9bV4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zYXlRMMHWG4:hkTiFcm9bV4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zYXlRMMHWG4:hkTiFcm9bV4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zYXlRMMHWG4:hkTiFcm9bV4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2023945620998387713
title: New U.S. Government Initiative Holds Contractors Accountable for Cybersecurity
uri: New-U-S-Government-Initiative-Holds-Contractors-Accountable-for-Cyber
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2023945620998387713
content:
The U.S. government on Wednesday announced the formation of a new Civil Cyber-Fraud Initiative that aims to hold contractors accountable for failing to meet required cybersecurity requirements in order to safeguard public sector information and infrastructure.
"For too long, companies have chosen silence under the mistaken belief that it is less risky to hide a breach than to bring it forward <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=THeVOCy3tHs:8V8zJxfpp08:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=THeVOCy3tHs:8V8zJxfpp08:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=THeVOCy3tHs:8V8zJxfpp08:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=THeVOCy3tHs:8V8zJxfpp08:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=THeVOCy3tHs:8V8zJxfpp08:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=THeVOCy3tHs:8V8zJxfpp08:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=THeVOCy3tHs:8V8zJxfpp08:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=THeVOCy3tHs:8V8zJxfpp08:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7860480690792265762
title: New Patch Released for Actively Exploited 0-Day Apache Path Traversal to RCE Attacks
uri: New-Patch-Released-for-Actively-Exploited-0-Day-Apache-Path-Traversal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7860480690792265762
content:
The Apache Software Foundation on Thursday released additional security updates for its HTTP Server product to remediate what it says is an "incomplete fix" for an actively exploited path traversal and remote code execution flaw that it patched earlier this week.
CVE-2021-42013, as the new vulnerability is identified as, builds upon CVE-2021-41773, a flaw that impacted Apache web servers running<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6XEDAQCD1K4:HzEAbGwbP18:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6XEDAQCD1K4:HzEAbGwbP18:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6XEDAQCD1K4:HzEAbGwbP18:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6XEDAQCD1K4:HzEAbGwbP18:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6XEDAQCD1K4:HzEAbGwbP18:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6XEDAQCD1K4:HzEAbGwbP18:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6XEDAQCD1K4:HzEAbGwbP18:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6XEDAQCD1K4:HzEAbGwbP18:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4168642706459198969
title: Researchers Warn of FontOnLake Rootkit Malware Targeting Linux Systems
uri: Researchers-Warn-of-FontOnLake-Rootkit-Malware-Targeting-Linux-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4168642706459198969
content:
Cybersecurity researchers have detailed a new campaign that likely targets entities in Southeast Asia with a previously unrecognized Linux malware that's engineered to enable remote access to its operators, in addition to amassing credentials and function as a proxy server.
The malware family, dubbed "FontOnLake" by Slovak cybersecurity firm ESET, is said to feature "well-designed modules" that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmdg4qKSkpQ:kS0ix4f0kzI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmdg4qKSkpQ:kS0ix4f0kzI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmdg4qKSkpQ:kS0ix4f0kzI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jmdg4qKSkpQ:kS0ix4f0kzI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmdg4qKSkpQ:kS0ix4f0kzI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jmdg4qKSkpQ:kS0ix4f0kzI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmdg4qKSkpQ:kS0ix4f0kzI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jmdg4qKSkpQ:kS0ix4f0kzI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9223270760622781328
title: Ransomware Group FIN12 Aggressively Going After Healthcare Targets
uri: Ransomware-Group-FIN12-Aggressively-Going-After-Healthcare-Targets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9223270760622781328
content:
An "aggressive" financially motivated threat actor has been identified as linked to a string of RYUK ransomware attacks since October 2018, while maintaining close partnerships with TrickBot-affiliated threat actors and using a publicly available arsenal of tools such as Cobalt Strike Beacon payloads to interact with victim networks.
Cybersecurity firm Mandiant attributed the intrusions to a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oV2piYrGs-Y:ntq0bJqJunU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oV2piYrGs-Y:ntq0bJqJunU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oV2piYrGs-Y:ntq0bJqJunU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oV2piYrGs-Y:ntq0bJqJunU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oV2piYrGs-Y:ntq0bJqJunU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oV2piYrGs-Y:ntq0bJqJunU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oV2piYrGs-Y:ntq0bJqJunU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oV2piYrGs-Y:ntq0bJqJunU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-300250145367028178
title: Indian-Made Mobile Spyware Targeted Human Rights Activist in Togo
uri: Indian-Made-Mobile-Spyware-Targeted-Human-Rights-Activist-in-Togo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/300250145367028178
content:
A prominent Togolese human rights defender has been targeted with spyware by a threat actor known for striking victims in South Asia, marking the hacking group's first foray into digital surveillance in Africa.
Amnesty International tied the covert attack campaign to a collective tracked as "Donot Team" (aka APT-C-35), which has been linked to cyber offensives in India and Pakistan, while also <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=McrPMXkDez8:PAdx0q2FLkM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=McrPMXkDez8:PAdx0q2FLkM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=McrPMXkDez8:PAdx0q2FLkM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=McrPMXkDez8:PAdx0q2FLkM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=McrPMXkDez8:PAdx0q2FLkM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=McrPMXkDez8:PAdx0q2FLkM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=McrPMXkDez8:PAdx0q2FLkM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=McrPMXkDez8:PAdx0q2FLkM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7834373548512355304
title: Verify End-Users at the Helpdesk to Prevent Social Engineering Cyber Attack
uri: Verify-End-Users-at-the-Helpdesk-to-Prevent-Social-Engineering-Cyber-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7834373548512355304
content:
Although organizations commonly go to great lengths to address security vulnerabilities that may exist within their IT infrastructure, an organization's helpdesk might pose a bigger threat due to social engineering attacks.
Social engineering is "the art of manipulating people so they give up confidential information," according to Webroot. There are many different types of social engineering <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aJj0rfFJh_E:jgszojWsHWY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aJj0rfFJh_E:jgszojWsHWY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aJj0rfFJh_E:jgszojWsHWY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aJj0rfFJh_E:jgszojWsHWY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aJj0rfFJh_E:jgszojWsHWY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aJj0rfFJh_E:jgszojWsHWY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aJj0rfFJh_E:jgszojWsHWY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aJj0rfFJh_E:jgszojWsHWY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2686290996306197446
title: Ukraine Arrests Operator of DDoS Botnet with 100,000 Compromised Devices
uri: Ukraine-Arrests-Operator-of-DDoS-Botnet-with-100-000-Compromised-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2686290996306197446
content:
Ukrainian law enforcement authorities on Monday disclosed the arrest of a hacker responsible for the creation and management of a "powerful botnet" consisting of over 100,000 enslaved devices that was used to carry out distributed denial-of-service (DDoS) and spam attacks on behalf of paid customers.
The unnamed individual, from the Ivano-Frankivsk region of the country, is also said to have <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BjvD8hXvd0:55FYtmVe9ZY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BjvD8hXvd0:55FYtmVe9ZY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BjvD8hXvd0:55FYtmVe9ZY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0BjvD8hXvd0:55FYtmVe9ZY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BjvD8hXvd0:55FYtmVe9ZY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0BjvD8hXvd0:55FYtmVe9ZY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0BjvD8hXvd0:55FYtmVe9ZY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0BjvD8hXvd0:55FYtmVe9ZY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2124668648044234034
title: Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability
uri: Apple-Releases-Urgent-iPhone-and-iPad-Updates-to-Patch-New-Zero-Day-Vu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2124668648044234034
content:
Apple on Monday released a security update for iOS and iPad to address a critical vulnerability that it says is being exploited in the wild, making it the 17th zero-day flaw the company has addressed in its products since the start of the year.'
The weakness, assigned the identifier CVE-2021-30883, concerns a memory corruption issue in the "IOMobileFrameBuffer" component that could allow an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elwYiDkfEBM:lfXJEuvviT8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elwYiDkfEBM:lfXJEuvviT8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elwYiDkfEBM:lfXJEuvviT8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=elwYiDkfEBM:lfXJEuvviT8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elwYiDkfEBM:lfXJEuvviT8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=elwYiDkfEBM:lfXJEuvviT8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elwYiDkfEBM:lfXJEuvviT8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=elwYiDkfEBM:lfXJEuvviT8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7958134880261802547
title: GitHub Revoked Insecure SSH Keys Generated by a Popular git Client
uri: GitHub-Revoked-Insecure-SSH-Keys-Generated-by-a-Popular-git-Client
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7958134880261802547
content:
Code hosting platform GitHub has revoked weak SSH authentication keys that were generated via the GitKraken git GUI client due to a vulnerability in a third-party library that increased the likelihood of duplicated SSH keys.
As an added precautionary measure, the Microsoft-owned company also said it's building safeguards to prevent vulnerable versions of GitKraken from adding newly generated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rCjndod2Mc:zcxEjxgrdAc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rCjndod2Mc:zcxEjxgrdAc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rCjndod2Mc:zcxEjxgrdAc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1rCjndod2Mc:zcxEjxgrdAc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rCjndod2Mc:zcxEjxgrdAc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1rCjndod2Mc:zcxEjxgrdAc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1rCjndod2Mc:zcxEjxgrdAc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1rCjndod2Mc:zcxEjxgrdAc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2367536510673933958
title: Microsoft Fended Off a Record 2.4 Tbps DDoS Attack Targeting Azure Customers
uri: Microsoft-Fended-Off-a-Record-2-4-Tbps-DDoS-Attack-Targeting-Azure-Cus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2367536510673933958
content:
Microsoft on Monday revealed that its Azure cloud platform mitigated a 2.4 Tbps distributed denial-of-service (DDoS) attack in the last week of August targeting an unnamed customer in Europe, surpassing a 2.3 Tbps attack stopped by Amazon Web Services in February 2020.
"This is 140 percent higher than 2020's 1 Tbps attack and higher than any network volumetric event previously detected on Azure,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ws0ovd_KIJI:3B2vw7YM87k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ws0ovd_KIJI:3B2vw7YM87k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ws0ovd_KIJI:3B2vw7YM87k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ws0ovd_KIJI:3B2vw7YM87k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ws0ovd_KIJI:3B2vw7YM87k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ws0ovd_KIJI:3B2vw7YM87k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ws0ovd_KIJI:3B2vw7YM87k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ws0ovd_KIJI:3B2vw7YM87k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5182346988302387957
title: Microsoft Warns of Iran-Linked Hackers Targeting US and Israeli Defense Firms
uri: Microsoft-Warns-of-Iran-Linked-Hackers-Targeting-US-and-Israeli-Defens
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5182346988302387957
content:
An emerging threat actor likely supporting Iranian national interests has been behind a password spraying campaign targeting US, EU, and Israeli defense technology companies, with additional activity observed against regional ports of entry in the Persian Gulf as well as maritime and cargo transportation companies focused in the Middle East.
Microsoft is tracking the hacking crew under the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bXrODvFRVH8:oQtEoY7hNV8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bXrODvFRVH8:oQtEoY7hNV8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bXrODvFRVH8:oQtEoY7hNV8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bXrODvFRVH8:oQtEoY7hNV8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bXrODvFRVH8:oQtEoY7hNV8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bXrODvFRVH8:oQtEoY7hNV8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bXrODvFRVH8:oQtEoY7hNV8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bXrODvFRVH8:oQtEoY7hNV8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2814274356126698974
title: Digital Signature Spoofing Flaws Uncovered in OpenOffice and LibreOffice
uri: Digital-Signature-Spoofing-Flaws-Uncovered-in-OpenOffice-and-LibreOffi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2814274356126698974
content:
The maintainers of LibreOffice and OpenOffice have shipped security updates to their productivity software to remediate multiple vulnerabilities that could be weaponized by malicious actors to alter documents to make them appear as if they are digitally signed by a trusted source.
The list of the three flaws is as follows —

CVE-2021-41830 / CVE-2021-25633 - Content and Macro Manipulation with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g9JSslFw9Bc:uc0Dni64-DA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g9JSslFw9Bc:uc0Dni64-DA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g9JSslFw9Bc:uc0Dni64-DA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g9JSslFw9Bc:uc0Dni64-DA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g9JSslFw9Bc:uc0Dni64-DA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g9JSslFw9Bc:uc0Dni64-DA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g9JSslFw9Bc:uc0Dni64-DA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g9JSslFw9Bc:uc0Dni64-DA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6961434555407752057
title: Update Your Windows PCs Immediately to Patch New 0-Day Under Active Attack
uri: Update-Your-Windows-PCs-Immediately-to-Patch-New-0-Day-Under-Active-At
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6961434555407752057
content:
Microsoft on Tuesday rolled out security patches to contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an actively exploited privilege escalation vulnerability that could be exploited in conjunction with remote code execution bugs to take control over vulnerable systems.
Two of the addressed security flaws are rated Critical, 68 are rated Important<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BebhJBNol84:S1p8ady1hB4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BebhJBNol84:S1p8ady1hB4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BebhJBNol84:S1p8ady1hB4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BebhJBNol84:S1p8ady1hB4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BebhJBNol84:S1p8ady1hB4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BebhJBNol84:S1p8ady1hB4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BebhJBNol84:S1p8ady1hB4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BebhJBNol84:S1p8ady1hB4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8478751751437339343
title: [eBook] The Guide for Reducing SaaS Applications Risk for Lean IT Security Teams
uri: eBook-The-Guide-for-Reducing-SaaS-Applications-Risk-for-Lean-IT-Secu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8478751751437339343
content:
The Software-as-a-service (SaaS) industry has gone from novelty to an integral part of today’s business world in just a few years. While the benefits to most organizations are clear – more efficiency, greater productivity, and accessibility – the risks that the SaaS model poses are starting to become visible. It’s not an overstatement to say that most companies today run on SaaS. This poses an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6IGygNRU_Y:SKjGJXzo1Is:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6IGygNRU_Y:SKjGJXzo1Is:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6IGygNRU_Y:SKjGJXzo1Is:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a6IGygNRU_Y:SKjGJXzo1Is:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6IGygNRU_Y:SKjGJXzo1Is:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a6IGygNRU_Y:SKjGJXzo1Is:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6IGygNRU_Y:SKjGJXzo1Is:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a6IGygNRU_Y:SKjGJXzo1Is:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5765658210099266257
title: Critical Flaw in OpenSea Could Have Let Hackers Steal Cryptocurrency From Wallets
uri: Critical-Flaw-in-OpenSea-Could-Have-Let-Hackers-Steal-Cryptocurrency-F
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5765658210099266257
content:
A now-patched critical vulnerability in OpenSea, the world's largest non-fungible token (NFT) marketplace, could've been abused by malicious actors to drain cryptocurrency funds from a victim by sending a specially-crafted token, opening a new attack vector for exploitation.
The findings come from cybersecurity firm Check Point Research, which began an investigation into the platform following <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zCBXkYj2_yA:iTlM_qmYvig:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zCBXkYj2_yA:iTlM_qmYvig:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zCBXkYj2_yA:iTlM_qmYvig:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zCBXkYj2_yA:iTlM_qmYvig:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zCBXkYj2_yA:iTlM_qmYvig:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zCBXkYj2_yA:iTlM_qmYvig:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zCBXkYj2_yA:iTlM_qmYvig:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zCBXkYj2_yA:iTlM_qmYvig:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3118114849872884296
title: Google: We're Tracking 270 State-Sponsored Hacker Groups From Over 50 Countries
uri: Google-We-re-Tracking-270-State-Sponsored-Hacker-Groups-From-Over-50
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3118114849872884296
content:
Google's Threat Analysis Group (TAG) on Thursday said it's tracking more than 270 government-backed threat actors from more than 50 countries, adding it has approximately sent 50,000 alerts of state-sponsored phishing or malware attempts to customers since the start of 2021.
The warnings mark a 33% increase from 2020, the internet giant said, with the spike largely stemming from "blocking an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgKmNXMlZiI:nMPUmInl-fw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgKmNXMlZiI:nMPUmInl-fw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgKmNXMlZiI:nMPUmInl-fw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JgKmNXMlZiI:nMPUmInl-fw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgKmNXMlZiI:nMPUmInl-fw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JgKmNXMlZiI:nMPUmInl-fw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgKmNXMlZiI:nMPUmInl-fw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JgKmNXMlZiI:nMPUmInl-fw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5836021680651966253
title: The Ultimate SaaS Security Posture Management (SSPM) Checklist
uri: The-Ultimate-SaaS-Security-Posture-Management-(SSPM)-Checklist
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5836021680651966253
content:
Cloud security is the umbrella that holds within it: IaaS, PaaS and SaaS. Gartner created the SaaS Security Posture Management (SSPM) category for solutions that continuously assess security risk and manage the SaaS applications’ security posture. With enterprises having 1,000 or more employees relying on dozens to hundreds of apps, the need for deep visibility and remediation for SaaS security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N2XECtZqn_o:_1KU2jdK5kk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N2XECtZqn_o:_1KU2jdK5kk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N2XECtZqn_o:_1KU2jdK5kk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N2XECtZqn_o:_1KU2jdK5kk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N2XECtZqn_o:_1KU2jdK5kk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N2XECtZqn_o:_1KU2jdK5kk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N2XECtZqn_o:_1KU2jdK5kk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N2XECtZqn_o:_1KU2jdK5kk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-941676836624434031
title: Critical Remote Hacking Flaws Disclosed in Linphone and MicroSIP Softphones
uri: Critical-Remote-Hacking-Flaws-Disclosed-in-Linphone-and-MicroSIP-Softp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/941676836624434031
content:
Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adversary to crash the client and even extract sensitive information like password hashes by simply making a malicious call.
The vulnerabilities, which were discovered by Moritz Abrell of German pen-testing firm SySS GmbH, have since been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N4vkCzH5jzc:-wbnQ69E62w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N4vkCzH5jzc:-wbnQ69E62w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N4vkCzH5jzc:-wbnQ69E62w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N4vkCzH5jzc:-wbnQ69E62w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N4vkCzH5jzc:-wbnQ69E62w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N4vkCzH5jzc:-wbnQ69E62w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N4vkCzH5jzc:-wbnQ69E62w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N4vkCzH5jzc:-wbnQ69E62w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-169502738781006916
title: VirusTotal Releases Ransomware Report Based on Analysis of 80 Million Samples
uri: VirusTotal-Releases-Ransomware-Report-Based-on-Analysis-of-80-Million
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/169502738781006916
content:
As many as 130 different ransomware families have been found to be active in 2020 and the first half of 2021, with Israel, South Korea, Vietnam, China, Singapore, India, Kazakhstan, Philippines, Iran, and the U.K. emerging as the most affected territories, a comprehensive analysis of 80 million ransomware-related samples has revealed.
Google's cybersecurity arm VirusTotal attributed a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBHKVsDkht4:zoJz4ltb7oI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBHKVsDkht4:zoJz4ltb7oI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBHKVsDkht4:zoJz4ltb7oI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zBHKVsDkht4:zoJz4ltb7oI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBHKVsDkht4:zoJz4ltb7oI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zBHKVsDkht4:zoJz4ltb7oI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zBHKVsDkht4:zoJz4ltb7oI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zBHKVsDkht4:zoJz4ltb7oI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6048688634842812288
title: Experts Warn of Unprotected Prometheus Endpoints Exposing Sensitive Information
uri: Experts-Warn-of-Unprotected-Prometheus-Endpoints-Exposing-Sensitive-In
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6048688634842812288
content:
A large-scale unauthenticated scraping of publicly available and non-secured endpoints from older versions of Prometheus event monitoring and alerting solution could be leveraged to inadvertently leak sensitive information, according to the latest research.
"Due to the fact that authentication and encryption support is relatively new, many organizations that use Prometheus haven't yet enabled <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XydqEZRPL7k:6WkJwTz0G4w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XydqEZRPL7k:6WkJwTz0G4w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XydqEZRPL7k:6WkJwTz0G4w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XydqEZRPL7k:6WkJwTz0G4w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XydqEZRPL7k:6WkJwTz0G4w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XydqEZRPL7k:6WkJwTz0G4w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XydqEZRPL7k:6WkJwTz0G4w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XydqEZRPL7k:6WkJwTz0G4w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8655055076843913106
title: CISA Issues Warning On Cyber Threats Targeting Water and Wastewater Systems
uri: CISA-Issues-Warning-On-Cyber-Threats-Targeting-Water-and-Wastewater-Sy
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8655055076843913106
content:
The U.S. Cybersecurity Infrastructure and Security Agency (CISA) on Thursday warned of continued ransomware attacks aimed at disrupting water and wastewater facilities (WWS), highlighting five incidents that occurred between March 2019 and August 2021.
"This activity—which includes attempts to compromise system integrity via unauthorized access—threatens the ability of WWS facilities to provide <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1_PDcihUT_E:yQIeUzR9SZk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1_PDcihUT_E:yQIeUzR9SZk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1_PDcihUT_E:yQIeUzR9SZk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1_PDcihUT_E:yQIeUzR9SZk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1_PDcihUT_E:yQIeUzR9SZk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1_PDcihUT_E:yQIeUzR9SZk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1_PDcihUT_E:yQIeUzR9SZk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1_PDcihUT_E:yQIeUzR9SZk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9032584794608629129
title: Attackers Behind Trickbot Expanding Malware Distribution Channels
uri: Attackers-Behind-Trickbot-Expanding-Malware-Distribution-Channels
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9032584794608629129
content:
The operators behind the pernicious TrickBot malware have resurfaced with new tricks that aim to increase its foothold by expanding its distribution channels, ultimately leading to the deployment of ransomware such as Conti.
The threat actor, tracked under the monikers ITG23 and Wizard Spider, has been found to partner with other cybercrime gangs known Hive0105, Hive0106 (aka TA551 or Shathak), <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GBTuomhYFns:1Uroc4ol7VQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GBTuomhYFns:1Uroc4ol7VQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GBTuomhYFns:1Uroc4ol7VQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GBTuomhYFns:1Uroc4ol7VQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GBTuomhYFns:1Uroc4ol7VQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GBTuomhYFns:1Uroc4ol7VQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GBTuomhYFns:1Uroc4ol7VQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GBTuomhYFns:1Uroc4ol7VQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7844655577511203710
title: Ad-Blocking Chrome Extension Caught Injecting Ads in Google Search Pages
uri: Ad-Blocking-Chrome-Extension-Caught-Injecting-Ads-in-Google-Search-Pag
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7844655577511203710
content:
A new deceptive ad injection campaign has been found leveraging an ad blocker extension for Google Chrome and Opera web browsers to sneakily insert ads and affiliate codes on websites, according to new research from cybersecurity firm Imperva.
The findings come following the discovery of rogue domains distributing an ad injection script in late August 2021 that the researchers connected to an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mHodx6X5ew:s1ydb0xA7gM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mHodx6X5ew:s1ydb0xA7gM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mHodx6X5ew:s1ydb0xA7gM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mHodx6X5ew:s1ydb0xA7gM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mHodx6X5ew:s1ydb0xA7gM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mHodx6X5ew:s1ydb0xA7gM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3mHodx6X5ew:s1ydb0xA7gM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3mHodx6X5ew:s1ydb0xA7gM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5037921588927295221
title: REvil Ransomware Gang Goes Underground After Tor Sites Were Compromised
uri: REvil-Ransomware-Gang-Goes-Underground-After-Tor-Sites-Were-Compromise
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5037921588927295221
content:
REvil, the notorious ransomware gang behind a string of cyberattacks in recent years, appears to have gone off the radar once again, a little over a month after the cybercrime group staged a surprise return following a two-month-long hiatus.
The development, first spotted by Recorded Future's Dmitry Smilyanets, comes after a member affiliated with the REvil operation posted on the XSS hacking <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3xttL9Ypv8:D6CIsZxwXOs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3xttL9Ypv8:D6CIsZxwXOs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3xttL9Ypv8:D6CIsZxwXOs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a3xttL9Ypv8:D6CIsZxwXOs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3xttL9Ypv8:D6CIsZxwXOs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a3xttL9Ypv8:D6CIsZxwXOs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a3xttL9Ypv8:D6CIsZxwXOs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a3xttL9Ypv8:D6CIsZxwXOs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-708544136028783357
title: Windows 10, Linux, iOS, Chrome and Many Others at Hacked Tianfu Cup 2021
uri: Windows-10-Linux-iOS-Chrome-and-Many-Others-at-Hacked-Tianfu-Cup-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/708544136028783357
content:
Windows 10, iOS 15, Google Chrome, Apple Safari, Microsoft Exchange Server, and Ubuntu 20 were successfully broken into using original, never-before-seen exploits at the Tianfu Cup 2021, the fourth edition of the international cybersecurity contest held in the city of Chengdu, China.
Targets this year included Google Chrome running on Windows 10 21H1, Apple Safari running on Macbook Pro, Adobe <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IK9X57r4XG8:zolmglMWRJQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IK9X57r4XG8:zolmglMWRJQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IK9X57r4XG8:zolmglMWRJQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IK9X57r4XG8:zolmglMWRJQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IK9X57r4XG8:zolmglMWRJQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IK9X57r4XG8:zolmglMWRJQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IK9X57r4XG8:zolmglMWRJQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IK9X57r4XG8:zolmglMWRJQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6303812691566506131
title: Over 30 Countries Pledge to Fight Ransomware Attacks in US-led Global Meeting
uri: Over-30-Countries-Pledge-to-Fight-Ransomware-Attacks-in-US-led-Global
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6303812691566506131
content:
Representatives from the U.S., the European Union, and 30 other countries pledged to mitigate the risk of ransomware and harden the financial system from exploitation with the goal of disrupting the ecosystem, calling it an "escalating global security threat with serious economic and security consequences." 
"From malign operations against local health providers that endanger patient care, to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nj4Exk0NzHU:60ClAWbwWew:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nj4Exk0NzHU:60ClAWbwWew:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nj4Exk0NzHU:60ClAWbwWew:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nj4Exk0NzHU:60ClAWbwWew:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nj4Exk0NzHU:60ClAWbwWew:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nj4Exk0NzHU:60ClAWbwWew:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nj4Exk0NzHU:60ClAWbwWew:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nj4Exk0NzHU:60ClAWbwWew:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8724353689761537325
title: Is Your Data Safe? Check Out Some Cybersecurity Master Classes
uri: Is-Your-Data-Safe-Check-Out-Some-Cybersecurity-Master-Classes
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8724353689761537325
content:
Since cybersecurity is definitely an issue that’s here to stay, I’ve just checked out the recently released first episodes of Cato Networks Cybersecurity Master Class Series. 
According to Cato, the series aims to teach and demonstrate cybersecurity tools and best practices; provide research and real-world case studies on cybersecurity; and bring the voices and opinions of top cybersecurity <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7WUQ3X57JQQ:E9vFefOD2vE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7WUQ3X57JQQ:E9vFefOD2vE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7WUQ3X57JQQ:E9vFefOD2vE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7WUQ3X57JQQ:E9vFefOD2vE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7WUQ3X57JQQ:E9vFefOD2vE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7WUQ3X57JQQ:E9vFefOD2vE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7WUQ3X57JQQ:E9vFefOD2vE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7WUQ3X57JQQ:E9vFefOD2vE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1539662856926775477
title: Why Database Patching Best Practice Just Doesn't Work and How to Fix It
uri: Why-Database-Patching-Best-Practice-Just-Doesn-t-Work-and-How-to-Fix-I
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1539662856926775477
content:
Patching really, really matters – patching is what keeps technology solutions from becoming like big blocks of Swiss cheese, with endless security vulnerabilities punching hole after hole into critical solutions.
But anyone who's spent any amount of time maintaining systems will know that patching is often easier said than done.
Yes, in some instances, you can just run a command line to install <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKgN5eUgEqg:JsDNH9q_P6Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKgN5eUgEqg:JsDNH9q_P6Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKgN5eUgEqg:JsDNH9q_P6Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hKgN5eUgEqg:JsDNH9q_P6Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKgN5eUgEqg:JsDNH9q_P6Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hKgN5eUgEqg:JsDNH9q_P6Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKgN5eUgEqg:JsDNH9q_P6Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hKgN5eUgEqg:JsDNH9q_P6Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5667267018183806096
title: Cybersecurity Experts Warn of a Rise in Lyceum Hacker Group Activities in Tunisia
uri: Cybersecurity-Experts-Warn-of-a-Rise-in-Lyceum-Hacker-Group-Activities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5667267018183806096
content:
A threat actor, previously known for striking organizations in the energy and telecommunications sectors across the Middle East as early as April 2018, has evolved its malware arsenal to strike two entities in Tunisia.
Security researchers at Kaspersky, who presented their findings at the VirusBulletin VB2021 conference earlier this month, attributed the attacks to a group tracked as Lyceum (aka<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b53p-F96_F0:B38DvgvK8CA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b53p-F96_F0:B38DvgvK8CA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b53p-F96_F0:B38DvgvK8CA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b53p-F96_F0:B38DvgvK8CA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b53p-F96_F0:B38DvgvK8CA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b53p-F96_F0:B38DvgvK8CA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b53p-F96_F0:B38DvgvK8CA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b53p-F96_F0:B38DvgvK8CA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6263104498914356552
title: A New Variant of FlawedGrace Spreading Through Mass Email Campaigns
uri: A-New-Variant-of-FlawedGrace-Spreading-Through-Mass-Email-Campaigns
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6263104498914356552
content:
Cybersecurity researchers on Tuesday took the wraps off a mass volume email attack staged by a prolific cybercriminal gang affecting a wide range of industries, with one of its region-specific operations notably targeting Germany and Austria.
Enterprise security firm Proofpoint tied the malware campaign with high confidence to TA505, which is the name assigned to the financially motivated threat<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CTB4FK5-AQg:6_DOfFHd55o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CTB4FK5-AQg:6_DOfFHd55o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CTB4FK5-AQg:6_DOfFHd55o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CTB4FK5-AQg:6_DOfFHd55o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CTB4FK5-AQg:6_DOfFHd55o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CTB4FK5-AQg:6_DOfFHd55o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CTB4FK5-AQg:6_DOfFHd55o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CTB4FK5-AQg:6_DOfFHd55o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1427693981483592712
title: Squirrel Engine Bug Could Let Attackers Hack Games and Cloud Services
uri: Squirrel-Engine-Bug-Could-Let-Attackers-Hack-Games-and-Cloud-Services
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1427693981483592712
content:
Researchers have disclosed an out-of-bounds read vulnerability in the Squirrel programming language that can be abused by attackers to break out of the sandbox restrictions and execute arbitrary code within a SquirrelVM, thus giving a malicious actor complete access to the underlying machine. 
Tracked as CVE-2021-41556, the issue occurs when a game library referred to as Squirrel Engine is used <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CCW2377bzIY:L1VE66LeLJU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CCW2377bzIY:L1VE66LeLJU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CCW2377bzIY:L1VE66LeLJU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CCW2377bzIY:L1VE66LeLJU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CCW2377bzIY:L1VE66LeLJU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CCW2377bzIY:L1VE66LeLJU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CCW2377bzIY:L1VE66LeLJU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CCW2377bzIY:L1VE66LeLJU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1871993030802624456
title: OWASP's 2021 List Shuffle: A New Battle Plan and Primary Foe
uri: OWASP-s-2021-List-Shuffle-A-New-Battle-Plan-and-Primary-Foe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1871993030802624456
content:
Code injection attacks, the infamous king of vulnerabilities, have lost the top spot to broken access control as the worst of the worst, and developers need to take notice.
In this increasingly chaotic world, there have always been a few constants that people could reliably count on: The sun will rise in the morning and set again at night, Mario will always be cooler than Sonic the Hedgehog, and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmqfDUsFhaw:UvlRCUp6c7Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmqfDUsFhaw:UvlRCUp6c7Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmqfDUsFhaw:UvlRCUp6c7Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QmqfDUsFhaw:UvlRCUp6c7Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmqfDUsFhaw:UvlRCUp6c7Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QmqfDUsFhaw:UvlRCUp6c7Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QmqfDUsFhaw:UvlRCUp6c7Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QmqfDUsFhaw:UvlRCUp6c7Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6786477177436833281
title: LightBasin Hackers Breach at Least 13 Telecom Service Providers Since 2019
uri: LightBasin-Hackers-Breach-at-Least-13-Telecom-Service-Providers-Since
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6786477177436833281
content:
A highly sophisticated adversary named LightBasin has been identified as behind a string of attacks targeting the telecom sector with the goal of collecting "highly specific information" from mobile communication infrastructure, such as subscriber information and call metadata. 
"The nature of the data targeted by the actor aligns with information likely to be of significant interest to signals <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wgFFxk2ihOI:fnNzr0KjRoE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wgFFxk2ihOI:fnNzr0KjRoE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wgFFxk2ihOI:fnNzr0KjRoE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wgFFxk2ihOI:fnNzr0KjRoE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wgFFxk2ihOI:fnNzr0KjRoE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wgFFxk2ihOI:fnNzr0KjRoE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wgFFxk2ihOI:fnNzr0KjRoE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wgFFxk2ihOI:fnNzr0KjRoE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7524846980884870970
title: Microsoft Warns of New Security Flaw Affecting Surface Pro 3 Devices
uri: Microsoft-Warns-of-New-Security-Flaw-Affecting-Surface-Pro-3-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7524846980884870970
content:
Microsoft has published a new advisory warning of a security bypass vulnerability affecting Surface Pro 3 convertible laptops that could be exploited by an adversary to introduce malicious devices within enterprise networks and defeat the device attestation mechanism.
Tracked as CVE-2021-42299 (CVSS score: 5.6), the issue has been codenamed "TPM Carte Blanche" by Google software engineer Chris <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O9IASHVuEKQ:RIAkMEGmbZ8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O9IASHVuEKQ:RIAkMEGmbZ8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O9IASHVuEKQ:RIAkMEGmbZ8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O9IASHVuEKQ:RIAkMEGmbZ8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O9IASHVuEKQ:RIAkMEGmbZ8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O9IASHVuEKQ:RIAkMEGmbZ8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=O9IASHVuEKQ:RIAkMEGmbZ8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=O9IASHVuEKQ:RIAkMEGmbZ8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7969814238284381747
title: Researchers Break Intel SGX With New 'SmashEx' CPU Attack Technique
uri: Researchers-Break-Intel-SGX-With-New-SmashEx-CPU-Attack-Technique
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7969814238284381747
content:
A newly disclosed vulnerability affecting Intel processors could be abused by an adversary to gain access to sensitive information stored within enclaves and even run arbitrary code on vulnerable systems.
The vulnerability (CVE-2021-0186, CVSS score: 8.2) was discovered by a group of academics from ETH Zurich, the National University of Singapore, and the Chinese National University of Defense <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rn-3kfwXIT0:gSvgqzLyd5s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rn-3kfwXIT0:gSvgqzLyd5s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rn-3kfwXIT0:gSvgqzLyd5s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rn-3kfwXIT0:gSvgqzLyd5s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rn-3kfwXIT0:gSvgqzLyd5s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rn-3kfwXIT0:gSvgqzLyd5s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rn-3kfwXIT0:gSvgqzLyd5s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rn-3kfwXIT0:gSvgqzLyd5s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1242373632230722150
title: Two Eastern Europeans Sentenced for Providing Bulletproof Hosting to Cyber Criminals
uri: Two-Eastern-Europeans-Sentenced-for-Providing-Bulletproof-Hosting-to-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1242373632230722150
content:
Two Eastern European nationals have been sentenced in the U.S. for offering "bulletproof hosting" services to cybercriminals, who used the technical infrastructure to distribute malware and attack financial institutions across the country between 2009 to 2015.
Pavel Stassi, 30, of Estonia, and Aleksandr Shorodumov, 33, of Lithuania, have been each sentenced to 24 months and 48 months in prison, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYqDz6I1NrE:ojd5xwHiGqw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYqDz6I1NrE:ojd5xwHiGqw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYqDz6I1NrE:ojd5xwHiGqw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lYqDz6I1NrE:ojd5xwHiGqw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYqDz6I1NrE:ojd5xwHiGqw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lYqDz6I1NrE:ojd5xwHiGqw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lYqDz6I1NrE:ojd5xwHiGqw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lYqDz6I1NrE:ojd5xwHiGqw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6368557780971828781
title: U.S. Government Bans Sale of Hacking Tools to Authoritarian Regimes
uri: U-S-Government-Bans-Sale-of-Hacking-Tools-to-Authoritarian-Regimes
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6368557780971828781
content:
The U.S. Commerce Department on Wednesday announced new rules barring the sales of hacking software and equipment to authoritarian regimes and potentially facilitate human rights abuse for national security (NS) and anti-terrorism (AT) reasons.
The mandate, which is set to go into effect in 90 days, will forbid the export, reexport and transfer of "cybersecurity items" to countries of "national <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rb2K8GbxPXk:k15gZy-1bv4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rb2K8GbxPXk:k15gZy-1bv4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rb2K8GbxPXk:k15gZy-1bv4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rb2K8GbxPXk:k15gZy-1bv4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rb2K8GbxPXk:k15gZy-1bv4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rb2K8GbxPXk:k15gZy-1bv4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rb2K8GbxPXk:k15gZy-1bv4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rb2K8GbxPXk:k15gZy-1bv4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8092085125880345447
title: Hackers Stealing Browser Cookies to Hijack High-Profile YouTube Accounts
uri: Hackers-Stealing-Browser-Cookies-to-Hijack-High-Profile-YouTube-Accoun
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8092085125880345447
content:
Since at least late 2019, a network of hackers-for-hire have been hijacking the channels of YouTube creators, luring them with bogus collaboration opportunities to broadcast cryptocurrency scams or sell the accounts to the highest bidder.
That's according to a new report published by Google's Threat Analysis Group (TAG), which said it disrupted financially motivated phishing campaigns targeting <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-360A4XB0aQ:BIA9al2N0Co:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-360A4XB0aQ:BIA9al2N0Co:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-360A4XB0aQ:BIA9al2N0Co:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-360A4XB0aQ:BIA9al2N0Co:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-360A4XB0aQ:BIA9al2N0Co:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-360A4XB0aQ:BIA9al2N0Co:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-360A4XB0aQ:BIA9al2N0Co:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-360A4XB0aQ:BIA9al2N0Co:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6060388232061933698
title: Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices
uri: Malicious-NPM-Packages-Caught-Running-Cryptominer-On-Windows-Linux-m
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6060388232061933698
content:
Three JavaScript libraries uploaded to the official NPM package repository have been unmasked as crypto-mining malware, once again demonstrating how open-source software package repositories are becoming a lucrative target for executing an array of attacks on Windows, macOS, and Linux systems.
The malicious packages in question — named okhsa, klow, and klown — were published by the same <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XzqjJtgOz6s:maKjKzxPhbA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XzqjJtgOz6s:maKjKzxPhbA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XzqjJtgOz6s:maKjKzxPhbA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XzqjJtgOz6s:maKjKzxPhbA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XzqjJtgOz6s:maKjKzxPhbA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XzqjJtgOz6s:maKjKzxPhbA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XzqjJtgOz6s:maKjKzxPhbA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XzqjJtgOz6s:maKjKzxPhbA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4682781948542586672
title: Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer
uri: Bug-in-Popular-WinRAR-Software-Could-Let-Attackers-Hack-Your-Computer
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4682781948542586672
content:
A new security weakness has been disclosed in the WinRAR trialware file archiver utility for Windows that could be abused by a remote attacker to execute arbitrary code on targeted systems, underscoring how vulnerabilities in such software could beсome a gateway for a roster of attacks.
Tracked as CVE-2021-35052, the bug impacts the trial version of the software running version 5.70. "This <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqcipixgtEg:lRk_qfSRpUI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqcipixgtEg:lRk_qfSRpUI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqcipixgtEg:lRk_qfSRpUI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KqcipixgtEg:lRk_qfSRpUI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqcipixgtEg:lRk_qfSRpUI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KqcipixgtEg:lRk_qfSRpUI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqcipixgtEg:lRk_qfSRpUI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KqcipixgtEg:lRk_qfSRpUI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6174292455416913358
title: Product Overview: Cynet SaaS Security Posture Management (SSPM)
uri: Product-Overview-Cynet-SaaS-Security-Posture-Management-(SSPM)
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6174292455416913358
content:
Software-as-a-service (SaaS) applications have gone from novelty to business necessity in a few short years, and its positive impact on organizations is clear. It’s safe to say that most industries today run on SaaS applications, which is undoubtedly positive, but it does introduce some critical new challenges to organizations. 
As SaaS application use expands, as well as the number of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gxIrpKfRzg:IvP2JwK3oso:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gxIrpKfRzg:IvP2JwK3oso:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gxIrpKfRzg:IvP2JwK3oso:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9gxIrpKfRzg:IvP2JwK3oso:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gxIrpKfRzg:IvP2JwK3oso:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9gxIrpKfRzg:IvP2JwK3oso:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gxIrpKfRzg:IvP2JwK3oso:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9gxIrpKfRzg:IvP2JwK3oso:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6317262481522674919
title: Before and After a Pen Test: Steps to Get Through It
uri: Before-and-After-a-Pen-Test-Steps-to-Get-Through-It
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6317262481522674919
content:
An effective cybersecurity strategy can be challenging to implement correctly and often involves many layers of security. Part of a robust security strategy involves performing what is known as a penetration test (pen test). The penetration test helps to discover vulnerabilities and weaknesses in your security defenses before the bad guys discover these. They can also help validate remedial <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EFFZ0GKSm-w:qibzMzFOw9M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EFFZ0GKSm-w:qibzMzFOw9M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EFFZ0GKSm-w:qibzMzFOw9M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EFFZ0GKSm-w:qibzMzFOw9M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EFFZ0GKSm-w:qibzMzFOw9M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EFFZ0GKSm-w:qibzMzFOw9M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EFFZ0GKSm-w:qibzMzFOw9M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EFFZ0GKSm-w:qibzMzFOw9M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-63170192851917457
title: Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks
uri: Hackers-Set-Up-Fake-Company-to-Get-IT-Experts-to-Launch-Ransomware-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/63170192851917457
content:
The financially motivated FIN7 cybercrime gang has masqueraded as yet another fictitious cybersecurity company called "Bastion Secure" to recruit unwitting software engineers under the guise of penetration testing in a likely lead-up to a ransomware scheme.
"With FIN7's latest fake company, the criminal group leveraged true, publicly available information from various legitimate cybersecurity <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q-LvqwrT0ZY:_6OEFQlyglM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q-LvqwrT0ZY:_6OEFQlyglM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q-LvqwrT0ZY:_6OEFQlyglM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q-LvqwrT0ZY:_6OEFQlyglM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q-LvqwrT0ZY:_6OEFQlyglM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q-LvqwrT0ZY:_6OEFQlyglM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q-LvqwrT0ZY:_6OEFQlyglM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q-LvqwrT0ZY:_6OEFQlyglM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2091696531675430291
title: Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild
uri: Researchers-Discover-Microsoft-Signed-FiveSys-Rootkit-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2091696531675430291
content:
A newly identified rootkit has been found with a valid digital signature issued by Microsoft that's used to proxy traffic to internet addresses of interest to the attackers for over a year targeting online gamers in China.
Bucharest-headquartered cybersecurity technology company Bitdefender named the malware "FiveSys," calling out its possible credential theft and in-game-purchase hijacking <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7Q2K1hl6t4:frpm4d-gJeg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7Q2K1hl6t4:frpm4d-gJeg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7Q2K1hl6t4:frpm4d-gJeg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l7Q2K1hl6t4:frpm4d-gJeg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7Q2K1hl6t4:frpm4d-gJeg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l7Q2K1hl6t4:frpm4d-gJeg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7Q2K1hl6t4:frpm4d-gJeg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l7Q2K1hl6t4:frpm4d-gJeg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5484963132176086287
title: 'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs
uri: Lone-Wolf-Hacker-Group-Targeting-Afghanistan-and-India-with-Commodit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5484963132176086287
content:
A new malware campaign targeting Afghanistan and India is exploiting a now-patched, 20-year-old flaw affecting Microsoft Office to deploy an array of commodity remote access trojans (RATs) that allow the adversary to gain complete control over the compromised endpoints.
Cisco Talos attributed the cyber campaign to a "lone wolf" threat actor operating a Lahore-based fake IT company called Bunse <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6Rp-gw4_o8:Rw3rlL1CsEg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6Rp-gw4_o8:Rw3rlL1CsEg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6Rp-gw4_o8:Rw3rlL1CsEg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a6Rp-gw4_o8:Rw3rlL1CsEg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6Rp-gw4_o8:Rw3rlL1CsEg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a6Rp-gw4_o8:Rw3rlL1CsEg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=a6Rp-gw4_o8:Rw3rlL1CsEg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=a6Rp-gw4_o8:Rw3rlL1CsEg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8911955197595556818
title: Popular NPM Package Hijacked to Publish Crypto-mining Malware
uri: Popular-NPM-Package-Hijacked-to-Publish-Crypto-mining-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8911955197595556818
content:
The U.S. Cybersecurity and Infrastructure Security Agency on Friday warned of crypto-mining malware embedded in "UAParser.js," a popular JavaScript NPM library with over 6 million weekly downloads, days after the NPM repository moved to remove three rogue packages that were found to mimic the same library.
&lt;!--adsense--&gt;
The supply-chain attack targeting the open-source library saw three <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hNiiNa96-s:AHTt804c5gk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hNiiNa96-s:AHTt804c5gk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hNiiNa96-s:AHTt804c5gk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5hNiiNa96-s:AHTt804c5gk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hNiiNa96-s:AHTt804c5gk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5hNiiNa96-s:AHTt804c5gk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5hNiiNa96-s:AHTt804c5gk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5hNiiNa96-s:AHTt804c5gk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5691893741233657909
title: Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline
uri: Feds-Reportedly-Hacked-REvil-Ransomware-Group-and-Forced-it-Offline
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5691893741233657909
content:
The Russian-led REvil ransomware gang was felled by an active multi-country law enforcement operation that resulted in its infrastructure being hacked and taken offline for a second time earlier this week, in what's the latest action taken by governments to disrupt the lucrative ecosystem.
The takedown was first reported by Reuters, quoting multiple private-sector cyber experts working with the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ixozMrWLTZQ:LG5TRsusUJE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ixozMrWLTZQ:LG5TRsusUJE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ixozMrWLTZQ:LG5TRsusUJE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ixozMrWLTZQ:LG5TRsusUJE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ixozMrWLTZQ:LG5TRsusUJE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ixozMrWLTZQ:LG5TRsusUJE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ixozMrWLTZQ:LG5TRsusUJE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ixozMrWLTZQ:LG5TRsusUJE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1945938947806429759
title: Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks
uri: Microsoft-Warns-of-TodayZoo-Phishing-Kit-Used-in-Extensive-Credential
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1945938947806429759
content:
Microsoft on Thursday disclosed an "extensive series of credential phishing campaigns" that takes advantage of a custom phishing kit that stitched together components from at least five different widely circulated ones with the goal of siphoning user login information.
The tech giant's Microsoft 365 Defender Threat Intelligence Team, which detected the first instances of the tool in the wild in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F_Qonprj3Po:0A9o7nvLpOU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F_Qonprj3Po:0A9o7nvLpOU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F_Qonprj3Po:0A9o7nvLpOU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F_Qonprj3Po:0A9o7nvLpOU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F_Qonprj3Po:0A9o7nvLpOU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F_Qonprj3Po:0A9o7nvLpOU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F_Qonprj3Po:0A9o7nvLpOU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F_Qonprj3Po:0A9o7nvLpOU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4344174759295636214
title: Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware
uri: Hackers-Exploited-Popular-BillQuick-Billing-Software-to-Deploy-Ransomw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4344174759295636214
content:
Cybersecurity researchers on Friday disclosed a now-patched critical vulnerability in multiple versions of a time and billing system called BillQuick that's being actively exploited by threat actors to deploy ransomware on vulnerable systems.
CVE-2021-42258, as the flaw is being tracked as, concerns an SQL-based injection attack that allows for remote code execution and was successfully <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=58qR9l4jlls:789wEvzR8_A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=58qR9l4jlls:789wEvzR8_A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=58qR9l4jlls:789wEvzR8_A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=58qR9l4jlls:789wEvzR8_A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=58qR9l4jlls:789wEvzR8_A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=58qR9l4jlls:789wEvzR8_A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=58qR9l4jlls:789wEvzR8_A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=58qR9l4jlls:789wEvzR8_A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1360645836611281874
title: NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia
uri: NYT-Journalist-Repeatedly-Hacked-with-Pegasus-after-Reporting-on-Saudi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1360645836611281874
content:
The iPhone of New York Times journalist Ben Hubbard was repeatedly hacked with NSO Group's Pegasus spyware tool over a three-year period stretching between June 2018 to June 2021, resulting in infections twice in July 2020 and June 2021.
The University of Toronto's Citizen Lab, which publicized the findings on Sunday, said the "targeting took place while he was reporting on Saudi Arabia, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PEktBZLHMg8:sh-Q3Ykv6ao:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PEktBZLHMg8:sh-Q3Ykv6ao:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PEktBZLHMg8:sh-Q3Ykv6ao:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PEktBZLHMg8:sh-Q3Ykv6ao:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PEktBZLHMg8:sh-Q3Ykv6ao:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PEktBZLHMg8:sh-Q3Ykv6ao:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PEktBZLHMg8:sh-Q3Ykv6ao:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PEktBZLHMg8:sh-Q3Ykv6ao:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8397565475676720163
title: Microsoft Warns of Continued Supply-Chain Attacks by the Nobelium Hacker Group
uri: Microsoft-Warns-of-Continued-Supply-Chain-Attacks-by-the-Nobelium-Hack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8397565475676720163
content:
Nobelium, the threat actor behind the SolarWinds compromise in December 2020, has been behind a new wave of attacks that compromised 14 downstream customers of multiple cloud service providers (CSP), managed service providers (MSP), and other IT services organizations, illustrating the adversary's continuing interest in targeting the supply chain via the "compromise-one-to-compromise-many" <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WmX11thAeA:asrJYdM9iwQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WmX11thAeA:asrJYdM9iwQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WmX11thAeA:asrJYdM9iwQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8WmX11thAeA:asrJYdM9iwQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WmX11thAeA:asrJYdM9iwQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8WmX11thAeA:asrJYdM9iwQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8WmX11thAeA:asrJYdM9iwQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8WmX11thAeA:asrJYdM9iwQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8554515688622730634
title: Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM
uri: Hardware-grade-enterprise-authentication-without-hardware-new-SIM-sec
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8554515688622730634
content:
The average cost of a data breach, according to the latest research by IBM, now stands at USD 4.24 million, the highest reported. The leading cause? Compromised credentials, often caused by human error. Although these findings continue to show an upward trend in the wrong direction, the challenge itself is not new. What is new is the unprecedented and accelerated complexity of securing the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6mFDDnmaZrI:JrsDU_LBPrI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6mFDDnmaZrI:JrsDU_LBPrI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6mFDDnmaZrI:JrsDU_LBPrI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6mFDDnmaZrI:JrsDU_LBPrI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6mFDDnmaZrI:JrsDU_LBPrI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6mFDDnmaZrI:JrsDU_LBPrI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6mFDDnmaZrI:JrsDU_LBPrI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6mFDDnmaZrI:JrsDU_LBPrI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5566287051447685288
title: New Attack Let Attacker Collect and Spoof Browser's Digital Fingerprints
uri: New-Attack-Let-Attacker-Collect-and-Spoof-Browser-s-Digital-Fingerprin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5566287051447685288
content:
A "potentially devastating and hard-to-detect threat" could be abused by attackers to collect users' browser fingerprinting information with the goal of spoofing the victims without their knowledge, thus effectively compromising their privacy.
Academics from Texas A&amp;M University dubbed the attack system "Gummy Browsers," likening it to a nearly 20-year-old "Gummy Fingers" technique that can <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gWxpvTuPg1M:jp_tFAcGu9M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gWxpvTuPg1M:jp_tFAcGu9M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gWxpvTuPg1M:jp_tFAcGu9M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gWxpvTuPg1M:jp_tFAcGu9M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gWxpvTuPg1M:jp_tFAcGu9M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gWxpvTuPg1M:jp_tFAcGu9M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gWxpvTuPg1M:jp_tFAcGu9M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gWxpvTuPg1M:jp_tFAcGu9M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1716779536204807375
title: Malicious Firefox Add-ons Block Browser From Downloading Security Updates
uri: Malicious-Firefox-Add-ons-Block-Browser-From-Downloading-Security-Upda
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1716779536204807375
content:
Mozilla on Monday disclosed it blocked two malicious Firefox add-ons installed by 455,000 users that were found misusing the Proxy API to impede downloading updates to the browser.
The two extensions in question, named Bypass and Bypass XM, "interfered with Firefox in a way that prevented users who had installed them from downloading updates, accessing updated blocklists, and updating remotely <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tVwZvTSo89M:IUpbMvdFfH0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tVwZvTSo89M:IUpbMvdFfH0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tVwZvTSo89M:IUpbMvdFfH0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tVwZvTSo89M:IUpbMvdFfH0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tVwZvTSo89M:IUpbMvdFfH0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tVwZvTSo89M:IUpbMvdFfH0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tVwZvTSo89M:IUpbMvdFfH0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tVwZvTSo89M:IUpbMvdFfH0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7767338626884311659
title: Over 10 Million Android Users Targeted With Premium SMS Scam Apps
uri: Over-10-Million-Android-Users-Targeted-With-Premium-SMS-Scam-Apps
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7767338626884311659
content:
A global fraud campaign has been found leveraging 151 malicious Android apps with 10.5 million downloads to rope users into premium subscription services without their consent and knowledge.
The premium SMS scam campaign — dubbed "UltimaSMS" — is believed to commenced in May 2021 and involved apps that cover a wide range of categories, including keyboards, QR code scanners, video and photo <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i0ZBZ5Rpq3M:SuOLH5RXteA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i0ZBZ5Rpq3M:SuOLH5RXteA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i0ZBZ5Rpq3M:SuOLH5RXteA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i0ZBZ5Rpq3M:SuOLH5RXteA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i0ZBZ5Rpq3M:SuOLH5RXteA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i0ZBZ5Rpq3M:SuOLH5RXteA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i0ZBZ5Rpq3M:SuOLH5RXteA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i0ZBZ5Rpq3M:SuOLH5RXteA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3801535433623079695
title: Latest Report Uncovers Supply Chain Attacks by North Korean Hackers
uri: Latest-Report-Uncovers-Supply-Chain-Attacks-by-North-Korean-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3801535433623079695
content:
Lazarus Group, the advanced persistent threat (APT) group attributed to the North Korean government, has been observed waging two separate supply chain attack campaigns as a means to gain a foothold into corporate networks and target a wide range of downstream entities.
The latest intelligence-gathering operation involved the use of MATA malware framework as well as backdoors dubbed BLINDINGCAN <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nYK8fTcVuRM:7QKRI8OFZEo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nYK8fTcVuRM:7QKRI8OFZEo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nYK8fTcVuRM:7QKRI8OFZEo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nYK8fTcVuRM:7QKRI8OFZEo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nYK8fTcVuRM:7QKRI8OFZEo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nYK8fTcVuRM:7QKRI8OFZEo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nYK8fTcVuRM:7QKRI8OFZEo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nYK8fTcVuRM:7QKRI8OFZEo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3748815629975967497
title: Cyber Attack in Iran Reportedly Cripples Gas Stations Across the Country
uri: Cyber-Attack-in-Iran-Reportedly-Cripples-Gas-Stations-Across-the-Count
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3748815629975967497
content:
A cyber attack in Iran left petrol stations across the country crippled, disrupting fuel sales and defacing electronic billboards to display messages challenging the regime's ability to distribute gasoline.
Posts and videos circulated on social media showed messages that said, "Khamenei! Where is our gas?" — a reference to the country's supreme leader Ayatollah Ali Khamenei. Other signs read, "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Na46XWKZUaA:Emg5d27NCGY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Na46XWKZUaA:Emg5d27NCGY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Na46XWKZUaA:Emg5d27NCGY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Na46XWKZUaA:Emg5d27NCGY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Na46XWKZUaA:Emg5d27NCGY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Na46XWKZUaA:Emg5d27NCGY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Na46XWKZUaA:Emg5d27NCGY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Na46XWKZUaA:Emg5d27NCGY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5090433808678297673
title: Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike
uri: Hackers-Using-Squirrelwaffle-Loader-to-Deploy-Qakbot-and-Cobalt-Strike
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5090433808678297673
content:
A new spam email campaign has emerged as a conduit for a previously undocumented malware loader that enables the attackers to gain an initial foothold into enterprise networks and drop malicious payloads on compromised systems.
"These infections are also used to facilitate the delivery of additional malware such as Qakbot and Cobalt Strike, two of the most common threats regularly observed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pmeezPR0KMA:AnVRXKZCo9o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pmeezPR0KMA:AnVRXKZCo9o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pmeezPR0KMA:AnVRXKZCo9o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pmeezPR0KMA:AnVRXKZCo9o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pmeezPR0KMA:AnVRXKZCo9o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pmeezPR0KMA:AnVRXKZCo9o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pmeezPR0KMA:AnVRXKZCo9o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pmeezPR0KMA:AnVRXKZCo9o:F7zBnMyn0Lo" border="0"></img></a>
</div>


