# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6419047977572839335
title: Cybercriminals Hold $115,000-Prize Contest to Find New Cryptocurrency Hacks
uri: Cybercriminals-Hold-115-000-Prize-Contest-to-Find-New-Cryptocurrency
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6419047977572839335
content:
A top Russian-language underground forum has been running a "contest" for the past month, calling on its community to submit "unorthodox" ways to conduct cryptocurrency attacks.
The forum's administrator, in an announcement made on April 20, 2021, invited members to submit papers that assess the possibility of targeting cryptocurrency-related technology, including the theft of private keys and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uKxx7K81px8:_SyMc_vA5nk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uKxx7K81px8:_SyMc_vA5nk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uKxx7K81px8:_SyMc_vA5nk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uKxx7K81px8:_SyMc_vA5nk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uKxx7K81px8:_SyMc_vA5nk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uKxx7K81px8:_SyMc_vA5nk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uKxx7K81px8:_SyMc_vA5nk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uKxx7K81px8:_SyMc_vA5nk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3133557414749856543
title: Researchers Uncover Hacking Operations Targeting Government Entities in South Korea
uri: Researchers-Uncover-Hacking-Operations-Targeting-Government-Entities-i
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3133557414749856543
content:
A North Korean threat actor active since 2012 has been behind a new espionage campaign targeting high-profile government officials associated with its southern counterpart to install an Android and Windows backdoor for collecting sensitive information.
Cybersecurity firm Malwarebytes attributed the activity to a threat actor tracked as Kimsuky, with the targeted entities comprising of the Korea <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=smjaYPN-lGg:5tDHljOFlcA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=smjaYPN-lGg:5tDHljOFlcA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=smjaYPN-lGg:5tDHljOFlcA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=smjaYPN-lGg:5tDHljOFlcA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=smjaYPN-lGg:5tDHljOFlcA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=smjaYPN-lGg:5tDHljOFlcA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=smjaYPN-lGg:5tDHljOFlcA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=smjaYPN-lGg:5tDHljOFlcA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8461246997467956962
title: The Incident Response Plan - Preparing for a Rainy Day
uri: The-Incident-Response-Plan-Preparing-for-a-Rainy-Day
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8461246997467956962
content:
The unfortunate truth is that while companies are investing more in cyber defenses and taking cybersecurity more seriously than ever, successful breaches and ransomware attacks are on the rise. While a successful breach is not inevitable, it is becoming more likely despite best efforts to prevent it from happening. 
Just as it wasn’t raining when Noah built the ark, companies must face the fact <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x3un344vCa0:qGlkMpoXTT8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x3un344vCa0:qGlkMpoXTT8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x3un344vCa0:qGlkMpoXTT8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x3un344vCa0:qGlkMpoXTT8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x3un344vCa0:qGlkMpoXTT8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x3un344vCa0:qGlkMpoXTT8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x3un344vCa0:qGlkMpoXTT8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x3un344vCa0:qGlkMpoXTT8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4834495280668251136
title: Experts Uncover Yet Another Chinese Spying Campaign Aimed at Southeast Asia
uri: Experts-Uncover-Yet-Another-Chinese-Spying-Campaign-Aimed-at-Southeast
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4834495280668251136
content:
An ongoing cyber-espionage operation with suspected ties to China has been found targeting a Southeast Asian government to deploy spyware on Windows systems while staying under the radar for more than three years.
"In this campaign, the attackers utilized the set of Microsoft Office exploits and loaders with anti-analysis and anti-debugging techniques to install a previously unknown backdoor on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jUZ6h9BARRM:vxkVnZhjX94:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jUZ6h9BARRM:vxkVnZhjX94:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jUZ6h9BARRM:vxkVnZhjX94:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jUZ6h9BARRM:vxkVnZhjX94:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jUZ6h9BARRM:vxkVnZhjX94:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jUZ6h9BARRM:vxkVnZhjX94:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jUZ6h9BARRM:vxkVnZhjX94:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jUZ6h9BARRM:vxkVnZhjX94:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8113043193950136057
title: Researchers Warn of Critical Bugs Affecting Realtek Wi-Fi Module
uri: Researchers-Warn-of-Critical-Bugs-Affecting-Realtek-Wi-Fi-Module
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8113043193950136057
content:
A new set of critical vulnerabilities has been disclosed in the Realtek RTL8170C Wi-Fi module that an adversary could abuse to gain elevated privileges on a device and hijack wireless communications.
"Successful exploitation would lead to complete control of the Wi-Fi module and potential root access on the OS (such as Linux or Android) of the embedded device that uses this module," researchers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4HEXvl33VRQ:zZVWy12_5YU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4HEXvl33VRQ:zZVWy12_5YU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4HEXvl33VRQ:zZVWy12_5YU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4HEXvl33VRQ:zZVWy12_5YU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4HEXvl33VRQ:zZVWy12_5YU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4HEXvl33VRQ:zZVWy12_5YU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4HEXvl33VRQ:zZVWy12_5YU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4HEXvl33VRQ:zZVWy12_5YU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5070317286457595801
title: The Vulnerabilities of the Past Are the Vulnerabilities of the Future
uri: The-Vulnerabilities-of-the-Past-Are-the-Vulnerabilities-of-the-Future
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5070317286457595801
content:
Major software vulnerabilities are a fact of life, as illustrated by the fact that Microsoft has patched between 55 and 110 vulnerabilities each month this year – with 7% to 17% of those vulnerabilities being critical.
May had the fewest vulnerabilities, with a total of 55 and only four considered critical. The problem is that the critical vulnerabilities are things we have seen for many years, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m4Ovjx6kkPk:7LtHyikHF24:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m4Ovjx6kkPk:7LtHyikHF24:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m4Ovjx6kkPk:7LtHyikHF24:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m4Ovjx6kkPk:7LtHyikHF24:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m4Ovjx6kkPk:7LtHyikHF24:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m4Ovjx6kkPk:7LtHyikHF24:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m4Ovjx6kkPk:7LtHyikHF24:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m4Ovjx6kkPk:7LtHyikHF24:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-477910354892211082
title: Necro Python Malware Upgrades With New Exploits and Crypto Mining Capabilities
uri: Necro-Python-Malware-Upgrades-With-New-Exploits-and-Crypto-Mining-Capa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/477910354892211082
content:
New upgrades have been made to a Python-based "self-replicating, polymorphic bot" called Necro in what's seen as an attempt to improve its chances of infecting vulnerable systems and evading detection.
"Although the bot was originally discovered earlier this year, the latest activity shows numerous changes to the bot, ranging from different command-and-control (C2) communications and the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HpxyIy1MKEE:45TxlcfRrSs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HpxyIy1MKEE:45TxlcfRrSs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HpxyIy1MKEE:45TxlcfRrSs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HpxyIy1MKEE:45TxlcfRrSs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HpxyIy1MKEE:45TxlcfRrSs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HpxyIy1MKEE:45TxlcfRrSs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HpxyIy1MKEE:45TxlcfRrSs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HpxyIy1MKEE:45TxlcfRrSs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2002672099581915913
title: Google Chrome to Help Users Identify Untrusted Extensions Before Installation
uri: Google-Chrome-to-Help-Users-Identify-Untrusted-Extensions-Before-Insta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2002672099581915913
content:
Google on Thursday said it's rolling new security features to Chrome browser aimed at detecting suspicious downloads and extensions via its Enhanced Safe Browsing feature, which it launched a year ago.
To this end, the search giant said it will now offer additional protections when users attempt to install a new extension from the Chrome Web Store, notifying if it can be considered "trusted."
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1YoQLDZ7AsA:UcDNSn2N0cw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1YoQLDZ7AsA:UcDNSn2N0cw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1YoQLDZ7AsA:UcDNSn2N0cw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1YoQLDZ7AsA:UcDNSn2N0cw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1YoQLDZ7AsA:UcDNSn2N0cw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1YoQLDZ7AsA:UcDNSn2N0cw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1YoQLDZ7AsA:UcDNSn2N0cw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1YoQLDZ7AsA:UcDNSn2N0cw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7377710886670643257
title: 10 Critical Flaws Found in CODESYS Industrial Automation Software
uri: 10-Critical-Flaws-Found-in-CODESYS-Industrial-Automation-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7377710886670643257
content:
Cybersecurity researchers on Thursday disclosed as many as ten critical vulnerabilities impacting CODESYS automation software that could be exploited to remote code execution on programmable logic controllers (PLCs).
"To exploit the vulnerabilities, an attacker does not need a username or password; having network access to the industrial controller is enough," researchers from Positive <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rD4npLdHEcw:fZeNm6jPd5w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rD4npLdHEcw:fZeNm6jPd5w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rD4npLdHEcw:fZeNm6jPd5w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rD4npLdHEcw:fZeNm6jPd5w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rD4npLdHEcw:fZeNm6jPd5w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rD4npLdHEcw:fZeNm6jPd5w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rD4npLdHEcw:fZeNm6jPd5w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rD4npLdHEcw:fZeNm6jPd5w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7779507618079347499
title: Google to Let Android Users Opt-Out to Stop Ads From Tracking Them
uri: Google-to-Let-Android-Users-Opt-Out-to-Stop-Ads-From-Tracking-Them
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7779507618079347499
content:
Google is tightening the privacy practices that could make it harder for apps on Android phones and tablets to track users who have opted out of receiving personalized interest-based ads. The change will go into effect sometime in late 2021.
The development, which mirrors Apple's move to enable iPhone and iPad users to opt-out of ad tracking, was first reported by the Financial Times. 
Once the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6jzgM8XxMs:c78eFxpzHrI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6jzgM8XxMs:c78eFxpzHrI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6jzgM8XxMs:c78eFxpzHrI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h6jzgM8XxMs:c78eFxpzHrI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6jzgM8XxMs:c78eFxpzHrI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h6jzgM8XxMs:c78eFxpzHrI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h6jzgM8XxMs:c78eFxpzHrI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h6jzgM8XxMs:c78eFxpzHrI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7902931825552456408
title: ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack
uri: ALERT-Critical-RCE-Bug-in-VMware-vCenter-Server-Under-Active-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7902931825552456408
content:
Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw, which the company addressed late last month.
The ongoing activity was detected by Bad Packets on June 3 and corroborated yesterday by security researcher Kevin Beaumont. "Mass scanning activity detected from 104.40.252.159 checking for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wWV17v49chM:F9Q54YxhtsE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wWV17v49chM:F9Q54YxhtsE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wWV17v49chM:F9Q54YxhtsE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wWV17v49chM:F9Q54YxhtsE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wWV17v49chM:F9Q54YxhtsE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wWV17v49chM:F9Q54YxhtsE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wWV17v49chM:F9Q54YxhtsE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wWV17v49chM:F9Q54YxhtsE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6969885422772843975
title: Break Into Ethical Hacking With 18 Training Courses For Just $42.99
uri: Break-Into-Ethical-Hacking-With-18-Training-Courses-For-Just-42-99
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6969885422772843975
content:
It is predicted that 3.5 million jobs will be unfilled in the field of cybersecurity by the end of this year. Several of these jobs pay very well, and in most cases, you don't even need a college degree to get hired.
The most important thing is to have the skills and certifications. The All-In-One 2021 Super-Sized Ethical Hacking Bundle helps you gain both, with 18 courses covering all aspects <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyOb6Z7X3i8:0INSj06Qv5A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyOb6Z7X3i8:0INSj06Qv5A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyOb6Z7X3i8:0INSj06Qv5A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SyOb6Z7X3i8:0INSj06Qv5A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyOb6Z7X3i8:0INSj06Qv5A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SyOb6Z7X3i8:0INSj06Qv5A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SyOb6Z7X3i8:0INSj06Qv5A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SyOb6Z7X3i8:0INSj06Qv5A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-523587410504431947
title: TikTok Quietly Updated Its Privacy Policy to Collect Users' Biometric Data
uri: TikTok-Quietly-Updated-Its-Privacy-Policy-to-Collect-Users-Biometric
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/523587410504431947
content:
Popular short-form video-sharing service TikTok quietly revised its privacy policy in the U.S., allowing it to automatically collect biometric information such as faceprints and voiceprints from the content its users post on the platform.
The policy change, first spotted by TechCrunch, went into effect on June 2. TikTok users who reside in the European Economic Area (EEA), the U.K., Switzerland,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYlFvJDwW7o:sZaQL3WJ4Fk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYlFvJDwW7o:sZaQL3WJ4Fk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYlFvJDwW7o:sZaQL3WJ4Fk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYlFvJDwW7o:sZaQL3WJ4Fk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYlFvJDwW7o:sZaQL3WJ4Fk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYlFvJDwW7o:sZaQL3WJ4Fk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYlFvJDwW7o:sZaQL3WJ4Fk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYlFvJDwW7o:sZaQL3WJ4Fk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9123296828795006772
title: GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks
uri: GitHub-Updates-Policy-to-Remove-Exploit-Code-When-Used-in-Active-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9123296828795006772
content:
Code-hosting platform GitHub Friday officially announced a series of updates to the site's policies that delve into how the company deals with malware and exploit code uploaded to its service.
"We explicitly permit dual-use security technologies and content related to research into vulnerabilities, malware, and exploits," the Microsoft-owned company said. "We understand that many security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1rwzySI_X0:YSzJiq5Jylc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1rwzySI_X0:YSzJiq5Jylc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1rwzySI_X0:YSzJiq5Jylc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F1rwzySI_X0:YSzJiq5Jylc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1rwzySI_X0:YSzJiq5Jylc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F1rwzySI_X0:YSzJiq5Jylc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1rwzySI_X0:YSzJiq5Jylc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F1rwzySI_X0:YSzJiq5Jylc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8019341384000759049
title: Latvian Woman Charged for Her Role in Creating Trickbot Banking Malware
uri: Latvian-Woman-Charged-for-Her-Role-in-Creating-Trickbot-Banking-Malwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8019341384000759049
content:
The U.S. Department of Justice (DoJ) on Friday charged a Latvian woman for her alleged role as a programmer in a cybercrime gang that helped develop TrickBot malware.
The woman in question, Alla Witte, aka Max, 55, who resided in Paramaribo, Suriname, was arrested in Miami, Florida on February 6. Witte has been charged with 19 counts, including conspiracy to commit computer fraud and aggravated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jYO5rHczJQw:ORBpOdvgBYg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jYO5rHczJQw:ORBpOdvgBYg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jYO5rHczJQw:ORBpOdvgBYg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jYO5rHczJQw:ORBpOdvgBYg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jYO5rHczJQw:ORBpOdvgBYg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jYO5rHczJQw:ORBpOdvgBYg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jYO5rHczJQw:ORBpOdvgBYg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jYO5rHczJQw:ORBpOdvgBYg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1922698668283244092
title: Hackers Breached Colonial Pipeline Using Compromised VPN Password
uri: Hackers-Breached-Colonial-Pipeline-Using-Compromised-VPN-Password
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1922698668283244092
content:
The ransomware cartel that masterminded the Colonial Pipeline attack early last month crippled the pipeline operator's network using a compromised virtual private network (VPN) account password, the latest investigation into the incident has revealed.
The development, which was reported by Bloomberg on Friday, involved gaining an initial foothold into the networks as early as April 29 through <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fP-z9gej5ZA:1JTuhtj3cjw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fP-z9gej5ZA:1JTuhtj3cjw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fP-z9gej5ZA:1JTuhtj3cjw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fP-z9gej5ZA:1JTuhtj3cjw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fP-z9gej5ZA:1JTuhtj3cjw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fP-z9gej5ZA:1JTuhtj3cjw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fP-z9gej5ZA:1JTuhtj3cjw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fP-z9gej5ZA:1JTuhtj3cjw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6473143532354318088
title: Researchers Discover First Known Malware Targeting Windows Containers
uri: Researchers-Discover-First-Known-Malware-Targeting-Windows-Containers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6473143532354318088
content:
Security researchers have discovered the first known malware, dubbed "Siloscope," targeting Windows Server containers to infect Kubernetes clusters in cloud environments.
"Siloscape is heavily obfuscated malware targeting Kubernetes clusters through Windows containers," said Unit 42 researcher Daniel Prizmant. "Its main purpose is to open a backdoor into poorly configured Kubernetes clusters in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=26A21V2RALs:8rPUdlpr5M0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=26A21V2RALs:8rPUdlpr5M0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=26A21V2RALs:8rPUdlpr5M0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=26A21V2RALs:8rPUdlpr5M0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=26A21V2RALs:8rPUdlpr5M0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=26A21V2RALs:8rPUdlpr5M0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=26A21V2RALs:8rPUdlpr5M0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=26A21V2RALs:8rPUdlpr5M0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5502158190635454196
title: Shifting the focus from reactive to proactive, with human-led secure coding
uri: Shifting-the-focus-from-reactive-to-proactive-with-human-led-secure-c
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5502158190635454196
content:
The same 10 software vulnerabilities have caused more security breaches in the last 20+ years than any others. And yet, many businesses still opt for post-breach, post-event remediation, muddling through the human and business ramifications of it all. But now, a new research study points to a new, human-led direction.
‍The following discusses insights derived from a study conducted by Secure <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-wU7wP-Gctc:X_nNKtef6N8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-wU7wP-Gctc:X_nNKtef6N8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-wU7wP-Gctc:X_nNKtef6N8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-wU7wP-Gctc:X_nNKtef6N8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-wU7wP-Gctc:X_nNKtef6N8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-wU7wP-Gctc:X_nNKtef6N8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-wU7wP-Gctc:X_nNKtef6N8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-wU7wP-Gctc:X_nNKtef6N8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8780050626882073501
title: U.S. Recovers $2.3 Million Ransom Paid to Colonial Pipeline Hackers
uri: U-S-Recovers-2-3-Million-Ransom-Paid-to-Colonial-Pipeline-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8780050626882073501
content:
In a major blow, the U.S. Department of Justice on Monday said it has recovered 63.7 bitcoins (currently valued at $2.3 million) paid by Colonial Pipeline to the DarkSide ransomware extortionists on May 8, pursuant to a seizure warrant that was authorized by the Northern District of California.
The ransomware attack also hobbled the pipeline company's fuel supply, prompting the government to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4p0m5SwalGg:nci_BWiJEqk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4p0m5SwalGg:nci_BWiJEqk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4p0m5SwalGg:nci_BWiJEqk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4p0m5SwalGg:nci_BWiJEqk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4p0m5SwalGg:nci_BWiJEqk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4p0m5SwalGg:nci_BWiJEqk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4p0m5SwalGg:nci_BWiJEqk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4p0m5SwalGg:nci_BWiJEqk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9212422603850276848
title: New UAF Vulnerability Affecting Microsoft Office to be Patched Today
uri: New-UAF-Vulnerability-Affecting-Microsoft-Office-to-be-Patched-Today
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9212422603850276848
content:
Four security vulnerabilities discovered in the Microsoft Office suite, including Excel and Office online, could be potentially abused by bad actors to deliver attack code via Word and Excel documents.
"Rooted from legacy code, the vulnerabilities could have granted an attacker the ability to execute code on targets via malicious Office documents, such as Word, Excel and Outlook," researchers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zjewBl9vWEU:uh0C-Pp3GGU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zjewBl9vWEU:uh0C-Pp3GGU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zjewBl9vWEU:uh0C-Pp3GGU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zjewBl9vWEU:uh0C-Pp3GGU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zjewBl9vWEU:uh0C-Pp3GGU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zjewBl9vWEU:uh0C-Pp3GGU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zjewBl9vWEU:uh0C-Pp3GGU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zjewBl9vWEU:uh0C-Pp3GGU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7084729813902073114
title: Top 10 Privacy and Security Features Apple Announced at WWDC 2021
uri: Top-10-Privacy-and-Security-Features-Apple-Announced-at-WWDC-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7084729813902073114
content:
Apple on Monday announced a number of privacy and security-centric features to its upcoming versions of iOS and macOS at its all-online Worldwide Developers Conference.
Here is a quick look at some of the big-ticket changes that are expected to debut later this fall:
1 — Just Patches, Not Entire OS Update Every Time: As rumored before, users now have a choice between two software update versions<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLvVUcpytB4:lWtJxHbtdcY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLvVUcpytB4:lWtJxHbtdcY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLvVUcpytB4:lWtJxHbtdcY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YLvVUcpytB4:lWtJxHbtdcY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLvVUcpytB4:lWtJxHbtdcY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YLvVUcpytB4:lWtJxHbtdcY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLvVUcpytB4:lWtJxHbtdcY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YLvVUcpytB4:lWtJxHbtdcY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9072944179380496347
title: Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals
uri: Feds-Secretly-Ran-a-Fake-Encrypted-Chat-App-and-Busted-Over-800-Crimin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9072944179380496347
content:
In a huge sting operation, the U.S. Federal Bureau of Investigation (FBI) and Australian Federal Police (AFP) ran an "encrypted chat" service called ANoM for almost 3 years to intercept 27 million messages between criminal gang members globally.
Dubbed Operation Ironside (AFP), Operation Greenlight (Europol), and Operation Trojan Shield (FBI), the long-term covert probe into transnational and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IWiZhpH1N6U:XMTunEI0V8Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IWiZhpH1N6U:XMTunEI0V8Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IWiZhpH1N6U:XMTunEI0V8Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IWiZhpH1N6U:XMTunEI0V8Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IWiZhpH1N6U:XMTunEI0V8Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IWiZhpH1N6U:XMTunEI0V8Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IWiZhpH1N6U:XMTunEI0V8Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IWiZhpH1N6U:XMTunEI0V8Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6567229845234928925
title: Update Your Windows Computers to Patch 6 New In-the-Wind Zero-Day Bugs
uri: Update-Your-Windows-Computers-to-Patch-6-New-In-the-Wind-Zero-Day-Bugs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6567229845234928925
content:
Microsoft on Tuesday released another round of security updates for Windows operating systems and other supported software, squashing 50 vulnerabilities, including 6 zero-days that are said to be under active attack.
The flaws were identified and resolved in Microsoft Windows, .NET Core and Visual Studio, Microsoft Office, Microsoft Edge (Chromium-based and EdgeHTML), SharePoint Server, Hyper-V,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XnXwnFdCFN8:hp4T8z_ybdY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XnXwnFdCFN8:hp4T8z_ybdY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XnXwnFdCFN8:hp4T8z_ybdY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XnXwnFdCFN8:hp4T8z_ybdY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XnXwnFdCFN8:hp4T8z_ybdY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XnXwnFdCFN8:hp4T8z_ybdY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XnXwnFdCFN8:hp4T8z_ybdY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XnXwnFdCFN8:hp4T8z_ybdY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7134255282318822916
title: EBook – Creating a Large Company Security Stack on a Lean Company Budget
uri: EBook-Creating-a-Large-Company-Security-Stack-on-a-Lean-Company-Bu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7134255282318822916
content:
The speed at which malicious actors have improved their attack tactics and continue to penetrate security systems has made going bigger the major trend in cybersecurity.
Facing an evolving threat landscape, organizations have responded by building bigger security stacks, adding more tools and platforms, and making their defenses more complex—a new eBook from XDR provider Cynet (read it here).
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7MNTVeoO3w:ukImEXA9Mvc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7MNTVeoO3w:ukImEXA9Mvc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7MNTVeoO3w:ukImEXA9Mvc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7MNTVeoO3w:ukImEXA9Mvc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7MNTVeoO3w:ukImEXA9Mvc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7MNTVeoO3w:ukImEXA9Mvc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7MNTVeoO3w:ukImEXA9Mvc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7MNTVeoO3w:ukImEXA9Mvc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-180237517527113266
title: Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow Instances
uri: Crypto-Mining-Attacks-Targeting-Kubernetes-Clusters-via-Kubeflow-Insta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/180237517527113266
content:
Cybersecurity researchers on Tuesday disclosed a new large-scale campaign targeting Kubeflow deployments to run malicious cryptocurrency mining containers.
The campaign involved deploying TensorFlow pods on Kubernetes clusters, with the pods running legitimate TensorFlow images from the official Docker Hub account. However, the container images were configured to execute rogue commands that mine<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dhqyoGbKN48:faTTQDb0ORI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dhqyoGbKN48:faTTQDb0ORI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dhqyoGbKN48:faTTQDb0ORI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dhqyoGbKN48:faTTQDb0ORI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dhqyoGbKN48:faTTQDb0ORI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dhqyoGbKN48:faTTQDb0ORI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dhqyoGbKN48:faTTQDb0ORI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dhqyoGbKN48:faTTQDb0ORI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3406575571669246880
title: New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites
uri: New-TLS-Attack-Lets-Attackers-Launch-Cross-Protocol-Attacks-Against-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3406575571669246880
content:
Researchers have disclosed a new type of attack that exploits misconfigurations in transport layer security (TLS) servers to redirect HTTPS traffic from a victim's web browser to a different TLS service endpoint located on another IP address to steal sensitive information.
The attacks have been dubbed ALPACA, short for "Application Layer Protocol Confusion - Analyzing and mitigating Cracks in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OVXOWjLoSwU:_F2ai7kv9SU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OVXOWjLoSwU:_F2ai7kv9SU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OVXOWjLoSwU:_F2ai7kv9SU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OVXOWjLoSwU:_F2ai7kv9SU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OVXOWjLoSwU:_F2ai7kv9SU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OVXOWjLoSwU:_F2ai7kv9SU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OVXOWjLoSwU:_F2ai7kv9SU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OVXOWjLoSwU:_F2ai7kv9SU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-397521957492187254
title: New Chrome 0-Day Bug Under Active Attacks – Update Your Browser ASAP!
uri: New-Chrome-0-Day-Bug-Under-Active-Attacks-Update-Your-Browser-ASAP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/397521957492187254
content:
Attention readers, if you are using Google Chrome browser on your Windows, Mac, or Linux computers, you need to update it immediately to the latest version Google released earlier today.
Google on Wednesday rolled out an urgent update for Chrome browser to address 14 newly discovered security issues, including a zero-day flaw that it says is being actively exploited in the wild.
Tracked as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SQiAlMayhYg:e0MlKw723Jc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SQiAlMayhYg:e0MlKw723Jc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SQiAlMayhYg:e0MlKw723Jc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SQiAlMayhYg:e0MlKw723Jc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SQiAlMayhYg:e0MlKw723Jc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SQiAlMayhYg:e0MlKw723Jc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SQiAlMayhYg:e0MlKw723Jc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SQiAlMayhYg:e0MlKw723Jc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4796395390635303723
title: Beef Supplier JBS Paid Hackers $11 Million Ransom After Cyberattack
uri: Beef-Supplier-JBS-Paid-Hackers-11-Million-Ransom-After-Cyberattack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4796395390635303723
content:
Meat processing company JBS on Wednesday confirmed it paid extortionists $11 million in bitcoins to regain access to its systems following a destructive ransomware attack late last month.
"In consultation with internal IT professionals and third-party cybersecurity experts, the company made the decision to mitigate any unforeseen issues related to the attack and ensure no data was exfiltrated," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1MDhg0pYgZk:G7cOz8t7LQ0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1MDhg0pYgZk:G7cOz8t7LQ0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1MDhg0pYgZk:G7cOz8t7LQ0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1MDhg0pYgZk:G7cOz8t7LQ0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1MDhg0pYgZk:G7cOz8t7LQ0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1MDhg0pYgZk:G7cOz8t7LQ0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1MDhg0pYgZk:G7cOz8t7LQ0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1MDhg0pYgZk:G7cOz8t7LQ0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1521230205751373379
title: Using Breached Password Detection Services to Prevent Cyberattack
uri: Using-Breached-Password-Detection-Services-to-Prevent-Cyberattack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1521230205751373379
content:
Bolstering password policies in your organization is an important part of a robust cybersecurity strategy. Cybercriminals are using compromised accounts as one of their favorite tactics to infiltrate business-critical environments; as we've seen in recent news, these attacks can be dangerous and financially impactful.
Unfortunately, account compromise is a very successful attack method and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9kyiXACgOkU:fe69goyOgxg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9kyiXACgOkU:fe69goyOgxg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9kyiXACgOkU:fe69goyOgxg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9kyiXACgOkU:fe69goyOgxg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9kyiXACgOkU:fe69goyOgxg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9kyiXACgOkU:fe69goyOgxg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9kyiXACgOkU:fe69goyOgxg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9kyiXACgOkU:fe69goyOgxg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7162703636541835599
title: Emerging Ransomware Targets Dozens of Businesses Worldwide
uri: Emerging-Ransomware-Targets-Dozens-of-Businesses-Worldwide
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7162703636541835599
content:
An emerging ransomware strain in the threat landscape claims to have breached 30 organizations in just four months since it went operational, riding on the coattails of a notorious ransomware syndicate.
First observed in February 2021, "Prometheus" is an offshoot of another well-known ransomware variant called Thanos, which was previously deployed against state-run organizations in the Middle <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HwHITA8jxmM:TuGmZx64RA0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HwHITA8jxmM:TuGmZx64RA0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HwHITA8jxmM:TuGmZx64RA0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HwHITA8jxmM:TuGmZx64RA0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HwHITA8jxmM:TuGmZx64RA0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HwHITA8jxmM:TuGmZx64RA0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HwHITA8jxmM:TuGmZx64RA0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HwHITA8jxmM:TuGmZx64RA0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5344959966339500518
title: U.S. Authorities Shut Down Slilpp—Largest Marketplace for Stolen Logins
uri: U-S-Authorities-Shut-Down-Slilpp-Largest-Marketplace-for-Stolen-Log
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5344959966339500518
content:
The U.S. Department of Justice (DoJ) Thursday said it disrupted and took down the infrastructure of an underground marketplace known as "Slilpp" that specialized in trading stolen login credentials as part of an international law enforcement operation.
Over a dozen individuals have been charged or arrested in connection with the illegal marketplace. The cyber crackdown, which involved the joint <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bbuXry54VYo:jCnkNxpCK0s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bbuXry54VYo:jCnkNxpCK0s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bbuXry54VYo:jCnkNxpCK0s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bbuXry54VYo:jCnkNxpCK0s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bbuXry54VYo:jCnkNxpCK0s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bbuXry54VYo:jCnkNxpCK0s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bbuXry54VYo:jCnkNxpCK0s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bbuXry54VYo:jCnkNxpCK0s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7113944989741475019
title: New Cyber Espionage Group Targeting Ministries of Foreign Affairs
uri: New-Cyber-Espionage-Group-Targeting-Ministries-of-Foreign-Affairs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7113944989741475019
content:
Cybersecurity researchers on Thursday took the wraps off a new cyberespionage group that has been behind a series of targeted attacks against diplomatic entities and telecommunication companies in Africa and the Middle East since at least 2017.
Dubbed "BackdoorDiplomacy," the campaign involves targeting weak points in internet-exposed devices such as web servers to perform a panoply of cyber <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QIHoKnHtLmM:sY8p0Ca7L2Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QIHoKnHtLmM:sY8p0Ca7L2Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QIHoKnHtLmM:sY8p0Ca7L2Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QIHoKnHtLmM:sY8p0Ca7L2Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QIHoKnHtLmM:sY8p0Ca7L2Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QIHoKnHtLmM:sY8p0Ca7L2Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QIHoKnHtLmM:sY8p0Ca7L2Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QIHoKnHtLmM:sY8p0Ca7L2Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4682976463958654149
title: 7-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
uri: 7-Year-Old-Polkit-Flaw-Lets-Unprivileged-Linux-Users-Gain-Root-Access
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4682976463958654149
content:
A seven-year-old privilege escalation vulnerability discovered in the polkit system service could be exploited by a malicious unprivileged local attacker to bypass authorization and escalate permissions to the root user.
Tracked as CVE-2021-3560 (CVSS score: 7.8), the flaw affects polkit versions between 0.113 and 0.118 and was discovered by GitHub security researcher Kevin Backhouse, who said <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdKTvjR3iVI:zyoOZEIvBKE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdKTvjR3iVI:zyoOZEIvBKE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdKTvjR3iVI:zyoOZEIvBKE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xdKTvjR3iVI:zyoOZEIvBKE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdKTvjR3iVI:zyoOZEIvBKE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xdKTvjR3iVI:zyoOZEIvBKE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xdKTvjR3iVI:zyoOZEIvBKE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xdKTvjR3iVI:zyoOZEIvBKE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1262484685752484978
title: Live Cybersecurity Webinar — Deconstructing Cobalt Strike
uri: Live-Cybersecurity-Webinar-Deconstructing-Cobalt-Strike
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1262484685752484978
content:
Organizations' cybersecurity capabilities have improved over the past decade, mostly out of necessity. As their defenses get better, so do the methods, tactics, and techniques malicious actors devise to penetrate their environments.
Instead of the standard virus or trojan, attackers today will deploy a variety of tools and methods to infiltrate an organization’s environment and attack it from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnRBl4Gn87A:gfpH6nPfs3M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnRBl4Gn87A:gfpH6nPfs3M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnRBl4Gn87A:gfpH6nPfs3M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cnRBl4Gn87A:gfpH6nPfs3M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnRBl4Gn87A:gfpH6nPfs3M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cnRBl4Gn87A:gfpH6nPfs3M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnRBl4Gn87A:gfpH6nPfs3M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cnRBl4Gn87A:gfpH6nPfs3M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8351361566597087829
title: Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users
uri: Hackers-Can-Exploit-Samsung-Pre-Installed-Apps-to-Spy-On-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8351361566597087829
content:
Multiple critical security flaws have been disclosed in Samsung's pre-installed Android apps, which, if successfully exploited, could have allowed adversaries access to personal data without users' consent and take control of the devices. 
"The impact of these bugs could have allowed an attacker to access and edit the victim's contacts, calls, SMS/MMS, install arbitrary apps with device <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLv1d8FYQKQ:xXIrq97Zmrk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLv1d8FYQKQ:xXIrq97Zmrk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLv1d8FYQKQ:xXIrq97Zmrk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vLv1d8FYQKQ:xXIrq97Zmrk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLv1d8FYQKQ:xXIrq97Zmrk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vLv1d8FYQKQ:xXIrq97Zmrk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLv1d8FYQKQ:xXIrq97Zmrk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vLv1d8FYQKQ:xXIrq97Zmrk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4839823944457487386
title: Mozilla Says Google's New Ad Tech—FLoC—Doesn't Protect User Privacy
uri: Mozilla-Says-Google-s-New-Ad-Tech-FLoC-Doesn-t-Protect-User-Privac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4839823944457487386
content:
Google's upcoming plans to replace third-party cookies with a less invasive ad targeted mechanism have a number of issues that could defeat its privacy objectives and allow for significant linkability of user behavior, possibly even identifying individual users.
"FLoC is premised on a compelling idea: enable ad targeting without exposing users to risk," said Eric Rescorla, author of TLS standard<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KChC0ET19HA:kWphn_OZ_EM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KChC0ET19HA:kWphn_OZ_EM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KChC0ET19HA:kWphn_OZ_EM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KChC0ET19HA:kWphn_OZ_EM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KChC0ET19HA:kWphn_OZ_EM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KChC0ET19HA:kWphn_OZ_EM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KChC0ET19HA:kWphn_OZ_EM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KChC0ET19HA:kWphn_OZ_EM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2974194737608919402
title: Chinese Hackers Believed to be Behind SITA, Air India Data Breach
uri: Chinese-Hackers-Believed-to-be-Behind-SITA-Air-India-Data-Breach
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2974194737608919402
content:
The cyber assault on Air India that came to light last month lasted for a period of at least two months and 26 days, new research has revealed, which attributed the incident with moderate confidence to a Chinese nation-state threat actor called APT41.
Group-IB dubbed the campaign "ColunmTK" based on the names of the command-and-control (C2) server domains that were used for communications. "The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9QvjajTV9k:PmoUtSqN94o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9QvjajTV9k:PmoUtSqN94o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9QvjajTV9k:PmoUtSqN94o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H9QvjajTV9k:PmoUtSqN94o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9QvjajTV9k:PmoUtSqN94o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H9QvjajTV9k:PmoUtSqN94o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9QvjajTV9k:PmoUtSqN94o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H9QvjajTV9k:PmoUtSqN94o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5859240982899764997
title: Cybersecurity Executive Order 2021: What It Means for Cloud and SaaS Security
uri: Cybersecurity-Executive-Order-2021-What-It-Means-for-Cloud-and-SaaS-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5859240982899764997
content:
In response to malicious actors targeting US federal IT systems and their supply chain, the President released the "Executive Order on Improving the Nation’s Cybersecurity (Executive Order)."
Although directed at Federal departments and agencies, the Executive Order will likely have a ripple effect through the Federal technology supply stream. Private companies and enterprises will look to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4iSCZo3dyuI:GYFoMlmYzT4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4iSCZo3dyuI:GYFoMlmYzT4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4iSCZo3dyuI:GYFoMlmYzT4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4iSCZo3dyuI:GYFoMlmYzT4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4iSCZo3dyuI:GYFoMlmYzT4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4iSCZo3dyuI:GYFoMlmYzT4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4iSCZo3dyuI:GYFoMlmYzT4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4iSCZo3dyuI:GYFoMlmYzT4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7129896761619238299
title: NoxPlayer Supply-Chain Attack is Likely the Work of Gelsemium Hackers
uri: NoxPlayer-Supply-Chain-Attack-is-Likely-the-Work-of-Gelsemium-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7129896761619238299
content:
A new cyber espionage group named Gelsemium has been linked to a supply chain attack targeting the NoxPlayer Android emulator that was disclosed earlier this year.
The findings come from a systematic analysis of multiple campaigns undertaken by the APT crew, with evidence of the earliest attack dating back all the way to 2014 under the codename Operation TooHash based on malware payloads <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3CBti2aP20:aR3MJiZMzCs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3CBti2aP20:aR3MJiZMzCs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3CBti2aP20:aR3MJiZMzCs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c3CBti2aP20:aR3MJiZMzCs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3CBti2aP20:aR3MJiZMzCs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c3CBti2aP20:aR3MJiZMzCs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c3CBti2aP20:aR3MJiZMzCs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c3CBti2aP20:aR3MJiZMzCs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9055760182102186887
title: Google Workspace Now Offers Client-side Encryption For Drive and Docs
uri: Google-Workspace-Now-Offers-Client-side-Encryption-For-Drive-and-Docs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9055760182102186887
content:
Google on Monday announced that it's rolling out client-side encryption to Google Workspace (formerly G Suite), thereby giving its enterprise customers direct control of encryption keys and the identity service they choose to access those keys.
"With client-side encryption, customer data is indecipherable to Google, while users can continue to take advantage of Google's native web-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UwuzfhAWCvE:86j6yos8vFQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UwuzfhAWCvE:86j6yos8vFQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UwuzfhAWCvE:86j6yos8vFQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UwuzfhAWCvE:86j6yos8vFQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UwuzfhAWCvE:86j6yos8vFQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UwuzfhAWCvE:86j6yos8vFQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UwuzfhAWCvE:86j6yos8vFQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UwuzfhAWCvE:86j6yos8vFQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5106410721932537186
title: Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild
uri: Apple-Issues-Urgent-Patches-for-2-Zero-Day-Flaws-Exploited-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5106410721932537186
content:
Apple on Monday shipped out-of-band security patches to address two zero-day vulnerabilities in iOS 12.5.3 that it says are being actively exploited in the wild.
&lt;!--adsense--&gt;
The latest update, iOS 12.5.4, comes with three security fixes, including a memory corruption issue in the ASN.1 decoder (CVE-2021-30737) and two flaws concerning the WebKit browser engine that could be abused to achieve <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eKzhIwJnEks:6ZrJF-MmVgM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eKzhIwJnEks:6ZrJF-MmVgM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eKzhIwJnEks:6ZrJF-MmVgM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eKzhIwJnEks:6ZrJF-MmVgM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eKzhIwJnEks:6ZrJF-MmVgM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eKzhIwJnEks:6ZrJF-MmVgM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eKzhIwJnEks:6ZrJF-MmVgM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eKzhIwJnEks:6ZrJF-MmVgM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7457158275730461156
title: Instagram‌ ‌Bug Allowed Anyone to View Private Accounts Without Following Them
uri: Instagram-Bug-Allowed-Anyone-to-View-Private-Accounts-Without-Fo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7457158275730461156
content:
Instagram has patched a new flaw that allowed anyone to view archived posts and stories posted by private accounts without having to follow them.
"This bug could have allowed a malicious user to view targeted media on Instagram," Mayur Fartade said in a Medium post today. "An attacker could have been able to see details of private/archived posts, stories, reels, IGTV without following the user <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YOhWjchJZhw:WExYS2FCwHc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YOhWjchJZhw:WExYS2FCwHc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YOhWjchJZhw:WExYS2FCwHc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YOhWjchJZhw:WExYS2FCwHc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YOhWjchJZhw:WExYS2FCwHc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YOhWjchJZhw:WExYS2FCwHc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YOhWjchJZhw:WExYS2FCwHc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YOhWjchJZhw:WExYS2FCwHc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3204007766716621630
title: Experts Shed Light On Distinctive Tactics Used by Hades Ransomware
uri: Experts-Shed-Light-On-Distinctive-Tactics-Used-by-Hades-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3204007766716621630
content:
Cybersecurity researchers on Tuesday disclosed "distinctive" tactics, techniques, and procedures (TTPs) adopted by operators of Hades ransomware that set it apart from the rest of the pack, attributing it to a financially motivated threat group called GOLD WINTER.
"In many ways, the GOLD WINTER threat group is a typical post-intrusion ransomware threat group that pursues high-value targets to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4w0Wtf8xco:FS8lUfvBt5U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4w0Wtf8xco:FS8lUfvBt5U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4w0Wtf8xco:FS8lUfvBt5U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4w0Wtf8xco:FS8lUfvBt5U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4w0Wtf8xco:FS8lUfvBt5U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4w0Wtf8xco:FS8lUfvBt5U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W4w0Wtf8xco:FS8lUfvBt5U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W4w0Wtf8xco:FS8lUfvBt5U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5741349538903176209
title: Critical ThroughTek Flaw Opens Millions of Connected Cameras to Eavesdropping
uri: Critical-ThroughTek-Flaw-Opens-Millions-of-Connected-Cameras-to-Eavesd
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5741349538903176209
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday issued an advisory regarding a critical software supply-chain flaw impacting ThroughTek's software development kit (SDK) that could be abused by an adversary to gain improper access to audio and video streams.
"Successful exploitation of this vulnerability could permit unauthorized access to sensitive information, such <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vb-MVnQLJk4:5jlacGyYOpI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vb-MVnQLJk4:5jlacGyYOpI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vb-MVnQLJk4:5jlacGyYOpI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vb-MVnQLJk4:5jlacGyYOpI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vb-MVnQLJk4:5jlacGyYOpI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vb-MVnQLJk4:5jlacGyYOpI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vb-MVnQLJk4:5jlacGyYOpI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vb-MVnQLJk4:5jlacGyYOpI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5907539941726324979
title: Ransomware Attackers Partnering With Cybercrime Groups to Hack High-Profile Targets
uri: Ransomware-Attackers-Partnering-With-Cybercrime-Groups-to-Hack-High-Pr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5907539941726324979
content:
As ransomware attacks against critical infrastructure skyrocket, new research shows that threat actors behind such disruptions are increasingly shifting from using email messages as an intrusion route to purchasing access from cybercriminal enterprises that have already infiltrated major targets.
"Ransomware operators often buy access from independent cybercriminal groups who infiltrate major <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PG7p8DstpHc:zfSGbRUKCj8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PG7p8DstpHc:zfSGbRUKCj8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PG7p8DstpHc:zfSGbRUKCj8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PG7p8DstpHc:zfSGbRUKCj8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PG7p8DstpHc:zfSGbRUKCj8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PG7p8DstpHc:zfSGbRUKCj8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PG7p8DstpHc:zfSGbRUKCj8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PG7p8DstpHc:zfSGbRUKCj8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4441161471180137858
title: Malware Attack on South Korean Entities Was Work of Andariel Group
uri: Malware-Attack-on-South-Korean-Entities-Was-Work-of-Andariel-Group
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4441161471180137858
content:
A malware campaign targeting South Korean entities that came to light earlier this year has been attributed to a North Korean nation-state hacking group called Andariel, once again indicating that Lazarus attackers are following the trends and their arsenal is in constant development.
"The way Windows commands and their options were used in this campaign is almost identical to previous Andariel <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Pj15o6lVbTE:DjQfZ7RzxOM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Pj15o6lVbTE:DjQfZ7RzxOM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Pj15o6lVbTE:DjQfZ7RzxOM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Pj15o6lVbTE:DjQfZ7RzxOM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Pj15o6lVbTE:DjQfZ7RzxOM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Pj15o6lVbTE:DjQfZ7RzxOM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Pj15o6lVbTE:DjQfZ7RzxOM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Pj15o6lVbTE:DjQfZ7RzxOM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5794008817300145126
title: Ukraine Police Arrest Cyber Criminals Behind Clop Ransomware Attacks
uri: Ukraine-Police-Arrest-Cyber-Criminals-Behind-Clop-Ransomware-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5794008817300145126
content:
Ukrainian law enforcement officials on Wednesday announced the arrest of the Clop ransomware gang, adding it disrupted the infrastructure employed in attacks targeting victims worldwide since at least 2019.
As part of a joint operation between the National Police of Ukraine and authorities from the Republic of Korea and the U.S., six defendants have been accused of running a double extortion <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YdPZLynuZ7I:k3y0os2mODQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YdPZLynuZ7I:k3y0os2mODQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YdPZLynuZ7I:k3y0os2mODQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YdPZLynuZ7I:k3y0os2mODQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YdPZLynuZ7I:k3y0os2mODQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YdPZLynuZ7I:k3y0os2mODQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YdPZLynuZ7I:k3y0os2mODQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YdPZLynuZ7I:k3y0os2mODQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4514795579400299713
title: Strengthen Your Password Policy With GDPR Compliance
uri: Strengthen-Your-Password-Policy-With-GDPR-Compliance
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4514795579400299713
content:
A solid password policy is the first line of defense for your corporate network. Protecting your systems from unauthorized users may sound easy on the surface, but it can actually be quite complicated. You have to balance password security with usability, while also following various regulatory requirements.
Companies in the EU must have password policies that are compliant with the General Data<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XidV21SJvqo:DPNY24snwIQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XidV21SJvqo:DPNY24snwIQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XidV21SJvqo:DPNY24snwIQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XidV21SJvqo:DPNY24snwIQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XidV21SJvqo:DPNY24snwIQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XidV21SJvqo:DPNY24snwIQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XidV21SJvqo:DPNY24snwIQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XidV21SJvqo:DPNY24snwIQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1660964999305527762
title: Researchers Uncover 'Process Ghosting' — A New Malware Evasion Technique
uri: Researchers-Uncover-Process-Ghosting-A-New-Malware-Evasion-Techn
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1660964999305527762
content:
Cybersecurity researchers have disclosed a new executable image tampering attack dubbed "Process Ghosting" that could be potentially abused by an attacker to circumvent protections and stealthily run malicious code on a Windows system.
"With this technique, an attacker can write a piece of malware to disk in such a way that it's difficult to scan or delete it — and where it then executes the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xuQ-8DTmGS0:PyYMEMW-kKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xuQ-8DTmGS0:PyYMEMW-kKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xuQ-8DTmGS0:PyYMEMW-kKo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xuQ-8DTmGS0:PyYMEMW-kKo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xuQ-8DTmGS0:PyYMEMW-kKo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xuQ-8DTmGS0:PyYMEMW-kKo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xuQ-8DTmGS0:PyYMEMW-kKo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xuQ-8DTmGS0:PyYMEMW-kKo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1754707837010038106
title: A New Spyware is Targeting Telegram and Psiphon VPN Users in Iran
uri: A-New-Spyware-is-Targeting-Telegram-and-Psiphon-VPN-Users-in-Iran
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1754707837010038106
content:
Threat actors with suspected ties to Iran have been found to leverage instant messaging and VPN apps like Telegram and Psiphon to install a Windows remote access trojan (RAT) capable of stealing sensitive information from targets' devices since at least 2015.
Russian cybersecurity firm Kaspersky, which pieced together the activity, attributed the campaign to an advanced persistent threat (APT) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ze4ALVHRLmo:x0JCIjjTJfw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ze4ALVHRLmo:x0JCIjjTJfw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ze4ALVHRLmo:x0JCIjjTJfw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ze4ALVHRLmo:x0JCIjjTJfw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ze4ALVHRLmo:x0JCIjjTJfw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ze4ALVHRLmo:x0JCIjjTJfw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ze4ALVHRLmo:x0JCIjjTJfw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ze4ALVHRLmo:x0JCIjjTJfw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8425655905126089343
title: Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments
uri: Molerats-Hackers-Return-With-New-Attacks-Targeting-Middle-Eastern-Gove
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8425655905126089343
content:
A Middle Eastern advanced persistent threat (APT) group has resurfaced after a two-month hiatus to target government institutions in the Middle East and global government entities associated with geopolitics in the region in a rash of new campaigns observed earlier this month.
Sunnyvale-based enterprise security firm Proofpoint attributed the activity to a politically motivated threat actor it <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZOPUT5vBMeU:ut91zHaykVc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZOPUT5vBMeU:ut91zHaykVc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZOPUT5vBMeU:ut91zHaykVc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZOPUT5vBMeU:ut91zHaykVc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZOPUT5vBMeU:ut91zHaykVc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZOPUT5vBMeU:ut91zHaykVc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZOPUT5vBMeU:ut91zHaykVc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZOPUT5vBMeU:ut91zHaykVc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3061386431565281237
title: Update‌ ‌Your Chrome Browser to Patch Yet Another 0-Day Exploit‌ ‌in‌-the‌-Wild
uri: Update-Your-Chrome-Browser-to-Patch-Yet-Another-0-Day-Exploit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3061386431565281237
content:
Google has rolled out yet another update to Chrome browser for Windows, Mac, and Linux to fix four security vulnerabilities, including one zero-day flaw that's being exploited in the wild.
Tracked as CVE-2021-30554, the high severity flaw concerns a use after free vulnerability in WebGL (aka Web Graphics Library), a JavaScript API for rendering interactive 2D and 3D graphics within the browser.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6YKGzalLHAY:8iGe2vFgJa8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6YKGzalLHAY:8iGe2vFgJa8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6YKGzalLHAY:8iGe2vFgJa8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6YKGzalLHAY:8iGe2vFgJa8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6YKGzalLHAY:8iGe2vFgJa8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6YKGzalLHAY:8iGe2vFgJa8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6YKGzalLHAY:8iGe2vFgJa8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6YKGzalLHAY:8iGe2vFgJa8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7964962915127437851
title: [eBook] 7 Signs You Might Need a New Detection and Response Tool
uri: eBook-7-Signs-You-Might-Need-a-New-Detection-and-Response-Tool
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7964962915127437851
content:
It's natural to get complacent with the status quo when things seem to be working. The familiar is comfortable, and even if something better comes along, it brings with it many unknowns.
In cybersecurity, this tendency is countered by the fast pace of innovation and how quickly technology becomes obsolete, often overnight.
This combination usually results in one of two things – organizations <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MVJNnrjDcmQ:XWRn9aFL7yU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MVJNnrjDcmQ:XWRn9aFL7yU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MVJNnrjDcmQ:XWRn9aFL7yU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MVJNnrjDcmQ:XWRn9aFL7yU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MVJNnrjDcmQ:XWRn9aFL7yU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MVJNnrjDcmQ:XWRn9aFL7yU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MVJNnrjDcmQ:XWRn9aFL7yU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MVJNnrjDcmQ:XWRn9aFL7yU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-480129616381904704
title: Google Releases New Framework to Prevent Software Supply Chain Attacks
uri: Google-Releases-New-Framework-to-Prevent-Software-Supply-Chain-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/480129616381904704
content:
As software supply chain attacks emerge as a point of concern in the wake of SolarWinds and Codecov security incidents, Google is proposing a solution to ensure the integrity of software packages and prevent unauthorized modifications. 
Called "Supply chain Levels for Software Artifacts" (SLSA, and pronounced "salsa"), the end-to-end framework aims to secure the software development and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wObvIrqchyE:qrPMa5rvgWE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wObvIrqchyE:qrPMa5rvgWE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wObvIrqchyE:qrPMa5rvgWE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wObvIrqchyE:qrPMa5rvgWE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wObvIrqchyE:qrPMa5rvgWE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wObvIrqchyE:qrPMa5rvgWE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wObvIrqchyE:qrPMa5rvgWE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wObvIrqchyE:qrPMa5rvgWE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3858829952802385959
title: Russia bans VyprVPN, Opera VPN services for not complying with blacklist request
uri: Russia-bans-VyprVPN-Opera-VPN-services-for-not-complying-with-blackli
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3858829952802385959
content:
Russia's telecommunications and media regulator Roskomnadzor (RKN) on Thursday introduced restrictions on the operation of VyprVPN and Opera VPN services in the country.
"In accordance with the regulation on responding to threats to circumvent restrictions on access to child pornography, suicidal, pro-narcotic and other prohibited content, restrictions on the use of VPN services VyprVPN and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5gSmaxd0mFs:Z_9N78eU5I0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5gSmaxd0mFs:Z_9N78eU5I0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5gSmaxd0mFs:Z_9N78eU5I0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5gSmaxd0mFs:Z_9N78eU5I0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5gSmaxd0mFs:Z_9N78eU5I0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5gSmaxd0mFs:Z_9N78eU5I0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5gSmaxd0mFs:Z_9N78eU5I0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5gSmaxd0mFs:Z_9N78eU5I0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4392588761316610668
title: North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute
uri: North-Korea-Exploited-VPN-Flaw-to-Hack-South-s-Nuclear-Research-Instit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4392588761316610668
content:
South Korea's state-run Korea Atomic Energy Research Institute (KAERI) on Friday disclosed that its internal network was infiltrated by suspected attackers operating out of its northern counterpart.
The intrusion is said to have taken place on May 14 through a vulnerability in an unnamed virtual private network (VPN) vendor and involved a total of 13 IP addresses, one of which — "27.102.114[.]89<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnOrX2c4UI0:pHPtE17gGdg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnOrX2c4UI0:pHPtE17gGdg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnOrX2c4UI0:pHPtE17gGdg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VnOrX2c4UI0:pHPtE17gGdg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnOrX2c4UI0:pHPtE17gGdg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VnOrX2c4UI0:pHPtE17gGdg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnOrX2c4UI0:pHPtE17gGdg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VnOrX2c4UI0:pHPtE17gGdg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3663480724755985576
title: Cyber espionage by Chinese hackers in neighbouring nations is on the rise
uri: Cyber-espionage-by-Chinese-hackers-in-neighbouring-nations-is-on-the-r
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3663480724755985576
content:
A string of cyber espionage campaigns dating all the way back to 2014 and focused on gathering military intelligence from neighbouring countries have been linked to a Chinese military-intelligence apparatus.
In a wide-ranging report published by Massachusetts-headquartered Recorded Future this week, the cybersecurity firm's Insikt Group said it identified ties between a group it tracks as "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jAxIS7YDvhc:Ay5uyMEP6So:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jAxIS7YDvhc:Ay5uyMEP6So:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jAxIS7YDvhc:Ay5uyMEP6So:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jAxIS7YDvhc:Ay5uyMEP6So:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jAxIS7YDvhc:Ay5uyMEP6So:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jAxIS7YDvhc:Ay5uyMEP6So:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jAxIS7YDvhc:Ay5uyMEP6So:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jAxIS7YDvhc:Ay5uyMEP6So:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3772875944154643061
title: Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature
uri: Beware-Connecting-to-This-Wireless-Network-Can-Break-Your-iPhone-s-Wi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3772875944154643061
content:
A wireless network naming bug has been discovered in Apple's iOS operating system that effectively disables an iPhone's ability to connect to a Wi-Fi network.
The issue was spotted by security researcher Carl Schou, who found that the phone's Wi-Fi functionality gets permanently disabled after joining a Wi-Fi network with the unusual name "%p%s%s%s%s%n" even after rebooting the phone or changing<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ckeuY76VGk:u8NrAZuLEGQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ckeuY76VGk:u8NrAZuLEGQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ckeuY76VGk:u8NrAZuLEGQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6ckeuY76VGk:u8NrAZuLEGQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ckeuY76VGk:u8NrAZuLEGQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6ckeuY76VGk:u8NrAZuLEGQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6ckeuY76VGk:u8NrAZuLEGQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6ckeuY76VGk:u8NrAZuLEGQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-225356455012120007
title: DroidMorph Shows Popular Android Antivirus Fail to Detect Cloned Malicious Apps
uri: DroidMorph-Shows-Popular-Android-Antivirus-Fail-to-Detect-Cloned-Malic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/225356455012120007
content:
A new research published by a group of academics has found that anti-virus programs for Android continue to remain vulnerable against different permutations of malware, in what could pose a serious risk as malicious actors evolve their toolsets to better evade analysis.
"Malware writers use stealthy mutations (morphing/obfuscations) to continuously develop malware clones, thwarting detection by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PKnbtFCCNiA:3EHz6vIDpXA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PKnbtFCCNiA:3EHz6vIDpXA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PKnbtFCCNiA:3EHz6vIDpXA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PKnbtFCCNiA:3EHz6vIDpXA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PKnbtFCCNiA:3EHz6vIDpXA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PKnbtFCCNiA:3EHz6vIDpXA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PKnbtFCCNiA:3EHz6vIDpXA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PKnbtFCCNiA:3EHz6vIDpXA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-310853557248619946
title: 5 Critical Steps to Recovering From a Ransomware Attack
uri: 5-Critical-Steps-to-Recovering-From-a-Ransomware-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/310853557248619946
content:
Hackers are increasingly using ransomware as an effective tool to disrupt businesses and fund malicious activities.
A recent analysis by cybersecurity company Group-IB revealed ransomware attacks doubled in 2020, while Cybersecurity Venture predicts that a ransomware attack will occur every 11 seconds in 2021.
Businesses must prepare for the possibility of a ransomware attack affecting their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-tjvA5tFhus:hFrFPhcxEvQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-tjvA5tFhus:hFrFPhcxEvQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-tjvA5tFhus:hFrFPhcxEvQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-tjvA5tFhus:hFrFPhcxEvQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-tjvA5tFhus:hFrFPhcxEvQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-tjvA5tFhus:hFrFPhcxEvQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-tjvA5tFhus:hFrFPhcxEvQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-tjvA5tFhus:hFrFPhcxEvQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8495879788367188171
title: NVIDIA Jetson Chipsets Found Vulnerable to High-severity Flaws
uri: NVIDIA-Jetson-Chipsets-Found-Vulnerable-to-High-severity-Flaws
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8495879788367188171
content:
U.S. graphics chip specialist NVIDIA has released software updates to address a total of 26 vulnerabilities impacting its Jetson system-on-module (SOM) series that could be abused by adversaries to escalate privileges and even lead to denial-of-service and information disclosure.
&lt;!--adsense--&gt;
Tracked from CVE‑2021‑34372 through CVE‑2021‑34397, the flaws affect products Jetson TX1, TX2 series, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7PfxJ-O6agI:me_vjtKligg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7PfxJ-O6agI:me_vjtKligg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7PfxJ-O6agI:me_vjtKligg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7PfxJ-O6agI:me_vjtKligg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7PfxJ-O6agI:me_vjtKligg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7PfxJ-O6agI:me_vjtKligg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7PfxJ-O6agI:me_vjtKligg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7PfxJ-O6agI:me_vjtKligg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5531546104295212179
title: Wormable DarkRadiation Ransomware Targets Linux and Docker Instances
uri: Wormable-DarkRadiation-Ransomware-Targets-Linux-and-Docker-Instances
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5531546104295212179
content:
Cybersecurity researchers have disclosed a new ransomware strain called "DarkRadiation" that's implemented entirely in Bash and targets Linux and Docker cloud containers, while banking on messaging service Telegram for command-and-control (C2) communications.
"The ransomware is written in Bash script and targets Red Hat/CentOS and Debian Linux distributions," researchers from Trend Micro said in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzof9nFh_AE:KBuRWZEck_0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzof9nFh_AE:KBuRWZEck_0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzof9nFh_AE:KBuRWZEck_0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mzof9nFh_AE:KBuRWZEck_0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzof9nFh_AE:KBuRWZEck_0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mzof9nFh_AE:KBuRWZEck_0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mzof9nFh_AE:KBuRWZEck_0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mzof9nFh_AE:KBuRWZEck_0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8386448134769348747
title: Unpatched Supply-Chain Flaw Affects 'Pling Store' Platforms for Linux Users
uri: Unpatched-Supply-Chain-Flaw-Affects-Pling-Store-Platforms-for-Linux
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8386448134769348747
content:
Cybersecurity researchers have disclosed a critical unpatched vulnerability affecting Pling-based free and open-source software (FOSS) marketplaces for Linux platform that could be potentially abused to stage supply chain attacks and achieve remote code execution (RCE).
"Linux marketplaces that are based on the Pling platform are vulnerable to a wormable [cross-site scripting] with potential for<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pcTU1Yp2gWI:g1hFvsmT1bQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pcTU1Yp2gWI:g1hFvsmT1bQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pcTU1Yp2gWI:g1hFvsmT1bQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pcTU1Yp2gWI:g1hFvsmT1bQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pcTU1Yp2gWI:g1hFvsmT1bQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pcTU1Yp2gWI:g1hFvsmT1bQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pcTU1Yp2gWI:g1hFvsmT1bQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pcTU1Yp2gWI:g1hFvsmT1bQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7949118865987630675
title: SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day Attacks
uri: SonicWall-Left-a-VPN-Flaw-Partially-Unpatched-Amidst-0-Day-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7949118865987630675
content:
A critical vulnerability in SonicWall VPN appliances that was believed to have been patched last year has been now found to be "botched," with the company leaving a memory leak flaw unaddressed, until now, that could permit a remote attacker to gain access to sensitive information.
The shortcoming was rectified in an update rolled out to SonicOS on June 22. 
Tracked as CVE-2021-20019 (CVSS score<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F-0UTEffuRc:tBhYP7OBZxQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F-0UTEffuRc:tBhYP7OBZxQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F-0UTEffuRc:tBhYP7OBZxQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F-0UTEffuRc:tBhYP7OBZxQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F-0UTEffuRc:tBhYP7OBZxQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F-0UTEffuRc:tBhYP7OBZxQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F-0UTEffuRc:tBhYP7OBZxQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F-0UTEffuRc:tBhYP7OBZxQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7141758387762317680
title: [Whitepaper] Automate Your Security with Cynet to Protect from Ransomware
uri: Whitepaper-Automate-Your-Security-with-Cynet-to-Protect-from-Ransomw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7141758387762317680
content:
It seems like every new day brings with it a new ransomware news item – new attacks, methods, horror stories, and data being leaked.
Ransomware attacks are on the rise, and they've become a major issue for organizations across industries. A recent report estimated that by 2031, ransomware attacks would cost the world over $260 billion.
A new whitepaper from XDR provider Cynet demonstrates how <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y8wxKt7_F1I:QWlphVOF8hQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y8wxKt7_F1I:QWlphVOF8hQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y8wxKt7_F1I:QWlphVOF8hQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y8wxKt7_F1I:QWlphVOF8hQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y8wxKt7_F1I:QWlphVOF8hQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y8wxKt7_F1I:QWlphVOF8hQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y8wxKt7_F1I:QWlphVOF8hQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y8wxKt7_F1I:QWlphVOF8hQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4485428948486709331
title: Patch Tor Browser Bug to Prevent Tracking of Your Online Activities
uri: Patch-Tor-Browser-Bug-to-Prevent-Tracking-of-Your-Online-Activities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4485428948486709331
content:
Open-source Tor browser has been updated to version 10.0.18 with fixes for multiple issues, including a privacy-defeating bug that could be used to uniquely fingerprint users across different browsers based on the apps installed on a computer.
In addition to updating Tor to 0.4.5.9, the browser's Android version has been upgraded to Firefox to version 89.1.1, alongside incorporating patches <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XKKC6PkSyXg:OF8Z-6Y52Ew:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XKKC6PkSyXg:OF8Z-6Y52Ew:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XKKC6PkSyXg:OF8Z-6Y52Ew:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XKKC6PkSyXg:OF8Z-6Y52Ew:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XKKC6PkSyXg:OF8Z-6Y52Ew:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XKKC6PkSyXg:OF8Z-6Y52Ew:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XKKC6PkSyXg:OF8Z-6Y52Ew:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XKKC6PkSyXg:OF8Z-6Y52Ew:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2629137566446569103
title: Pakistan-linked hackers targeted Indian power company with ReverseRat
uri: Pakistan-linked-hackers-targeted-Indian-power-company-with-ReverseRat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2629137566446569103
content:
A threat actor with suspected ties to Pakistan has been striking government and energy organizations in the South and Central Asia regions to deploy a remote access trojan on compromised Windows systems, according to new research.
"Most of the organizations that exhibited signs of compromise were in India, and a small number were in Afghanistan," Lumen's Black Lotus Labs said in a Tuesday <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HAZ19GSVGic:r3ngH5TDhKc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HAZ19GSVGic:r3ngH5TDhKc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HAZ19GSVGic:r3ngH5TDhKc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HAZ19GSVGic:r3ngH5TDhKc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HAZ19GSVGic:r3ngH5TDhKc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HAZ19GSVGic:r3ngH5TDhKc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HAZ19GSVGic:r3ngH5TDhKc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HAZ19GSVGic:r3ngH5TDhKc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3780947994725942243
title: Antivirus Pioneer John McAfee Found Dead in Spanish Jail
uri: Antivirus-Pioneer-John-McAfee-Found-Dead-in-Spanish-Jail
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3780947994725942243
content:
Controversial mogul and antivirus pioneer John McAfee on Wednesday died by suicide in a jail cell in Barcelona, hours after reports that he would be extradited to face federal charges in the U.S.
McAfee was 75. He is said to have died by hanging "as his nine months in prison brought him to despair," according to McAfee's lawyer Javier Villalba, Reuters reported. Security personnel at the Brians <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hV3y-KAKVBU:qYGzoMcQUhQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hV3y-KAKVBU:qYGzoMcQUhQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hV3y-KAKVBU:qYGzoMcQUhQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hV3y-KAKVBU:qYGzoMcQUhQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hV3y-KAKVBU:qYGzoMcQUhQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hV3y-KAKVBU:qYGzoMcQUhQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hV3y-KAKVBU:qYGzoMcQUhQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hV3y-KAKVBU:qYGzoMcQUhQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6421595604191452087
title: Critical Auth Bypass Bug Affects VMware Carbon Black App Control
uri: Critical-Auth-Bypass-Bug-Affects-VMware-Carbon-Black-App-Control
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6421595604191452087
content:
VMware has rolled out security updates to resolve a critical flaw affecting Carbon Black App Control that could be exploited to bypass authentication and take control of vulnerable systems.
The vulnerability, identified as CVE-2021-21998, is rated 9.4 out of 10 in severity by the industry-standard Common Vulnerability Scoring System (CVSS) and affects App Control (AppC) versions 8.0.x, 8.1.x, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R80klsvYNQg:5rsahUMWF8A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R80klsvYNQg:5rsahUMWF8A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R80klsvYNQg:5rsahUMWF8A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R80klsvYNQg:5rsahUMWF8A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R80klsvYNQg:5rsahUMWF8A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R80klsvYNQg:5rsahUMWF8A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R80klsvYNQg:5rsahUMWF8A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R80klsvYNQg:5rsahUMWF8A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3257952109140957970
title: BIOS Disconnect: New High-Severity Bugs Affect 128 Dell PC and Tablet Models
uri: BIOS-Disconnect-New-High-Severity-Bugs-Affect-128-Dell-PC-and-Tablet
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3257952109140957970
content:
Cybersecurity researchers on Thursday disclosed a chain of vulnerabilities affecting the BIOSConnect feature within Dell Client BIOS that could be abused by a privileged network adversary to gain arbitrary code execution at the BIOS/UEFI level of the affected device.
"As the attacker has the ability to remotely execute code in the pre-boot environment, this can be used to subvert the operating <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R4ianvi98CE:0vpnRkTf5s0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R4ianvi98CE:0vpnRkTf5s0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R4ianvi98CE:0vpnRkTf5s0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R4ianvi98CE:0vpnRkTf5s0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R4ianvi98CE:0vpnRkTf5s0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R4ianvi98CE:0vpnRkTf5s0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R4ianvi98CE:0vpnRkTf5s0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R4ianvi98CE:0vpnRkTf5s0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2370132304120934952
title: Reduce Business Risk By Fixing 3 Critical Endpoint-to-Cloud Security Requirements
uri: Reduce-Business-Risk-By-Fixing-3-Critical-Endpoint-to-Cloud-Security-R
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2370132304120934952
content:
Enterprise applications used to live securely in data centers and office employees connected to internal networks using company-managed laptops or desktops. And data was encircled by a walled perimeter to keep everything safe.
All that changed in the last 18 months. Businesses and employees had to adapt quickly to cloud technology and remote work. The cloud gave businesses the agility to respond<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zQELgH89Kf4:sv2b4j7oz7U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zQELgH89Kf4:sv2b4j7oz7U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zQELgH89Kf4:sv2b4j7oz7U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zQELgH89Kf4:sv2b4j7oz7U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zQELgH89Kf4:sv2b4j7oz7U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zQELgH89Kf4:sv2b4j7oz7U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zQELgH89Kf4:sv2b4j7oz7U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zQELgH89Kf4:sv2b4j7oz7U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8813443269655471036
title: One-Click Exploit Could Have Let Attackers Hijack Any Atlassian Account
uri: One-Click-Exploit-Could-Have-Let-Attackers-Hijack-Any-Atlassian-Accoun
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8813443269655471036
content:
Cybersecurity researchers on Wednesday disclosed critical flaws in the Atlassian project and software development platform that could be exploited to take over an account and control some of the apps connected through its single sign-on (SSO) capability.
"With just one click, an attacker could have used the flaws to get access to Atlassian's publish Jira system and get sensitive information, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fGaE9gtQbcQ:SLxEYVZ4zrw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fGaE9gtQbcQ:SLxEYVZ4zrw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fGaE9gtQbcQ:SLxEYVZ4zrw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fGaE9gtQbcQ:SLxEYVZ4zrw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fGaE9gtQbcQ:SLxEYVZ4zrw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fGaE9gtQbcQ:SLxEYVZ4zrw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fGaE9gtQbcQ:SLxEYVZ4zrw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fGaE9gtQbcQ:SLxEYVZ4zrw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-181556017841581069
title: Clop Gang Partners Laundered $500 Million in Ransomware Payments
uri: Clop-Gang-Partners-Laundered-500-Million-in-Ransomware-Payments
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/181556017841581069
content:
The cybercrime ring that was apprehended last week in connection with Clop (aka Cl0p) ransomware attacks against dozens of companies in the last few months helped launder money totaling $500 million for several malicious actors through a plethora of illegal activities.
"The group — also known as FANCYCAT — has been running multiple criminal activities: distributing cyber attacks; operating a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pFLd9vLR7eE:KxhoM-xAWp0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pFLd9vLR7eE:KxhoM-xAWp0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pFLd9vLR7eE:KxhoM-xAWp0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pFLd9vLR7eE:KxhoM-xAWp0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pFLd9vLR7eE:KxhoM-xAWp0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pFLd9vLR7eE:KxhoM-xAWp0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pFLd9vLR7eE:KxhoM-xAWp0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pFLd9vLR7eE:KxhoM-xAWp0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2389992161238285861
title: FIN7 Supervisor Gets 7-Year Jail Term for Stealing Millions of Credit Cards
uri: FIN7-Supervisor-Gets-7-Year-Jail-Term-for-Stealing-Millions-of-Credit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2389992161238285861
content:
A Ukrainian national and a mid-​level supervisor of the hacking group known as FIN7 has been sentenced to seven years in prison for his role as a "pen tester" and perpetuating a criminal scheme that enabled the gang to compromise millions of customers debit and credit cards.
Andrii Kolpakov, 33, was arrested in Spain on June 28, 2018, and subsequently extradited to the U.S. the following year on<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3-oXpt1iRpI:lnxrD7oyXaU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3-oXpt1iRpI:lnxrD7oyXaU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3-oXpt1iRpI:lnxrD7oyXaU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3-oXpt1iRpI:lnxrD7oyXaU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3-oXpt1iRpI:lnxrD7oyXaU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3-oXpt1iRpI:lnxrD7oyXaU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3-oXpt1iRpI:lnxrD7oyXaU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3-oXpt1iRpI:lnxrD7oyXaU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1209867136373315438
title: Watch Out! Zyxel Firewalls and VPNs Under Active Cyberattack
uri: Watch-Out-Zyxel-Firewalls-and-VPNs-Under-Active-Cyberattack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1209867136373315438
content:
Taiwanese networking equipment company Zyxel is warning customers of an ongoing attack targeting a "small subset" of its security products such as firewall and VPN servers.
Attributing the attacks to a "sophisticated threat actor," the firm noted that the attacks single out appliances that have remote management or SSL VPN enabled, namely in the USG/ZyWALL, USG FLEX, ATP, and VPN series running <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jqvQZ9eX3cQ:lMoKmhvq83U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jqvQZ9eX3cQ:lMoKmhvq83U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jqvQZ9eX3cQ:lMoKmhvq83U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jqvQZ9eX3cQ:lMoKmhvq83U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jqvQZ9eX3cQ:lMoKmhvq83U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jqvQZ9eX3cQ:lMoKmhvq83U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jqvQZ9eX3cQ:lMoKmhvq83U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jqvQZ9eX3cQ:lMoKmhvq83U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6970326141935476501
title: Crackonosh virus mined $2 million of Monero from 222,000 hacked computers
uri: Crackonosh-virus-mined-2-million-of-Monero-from-222-000-hacked-comput
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6970326141935476501
content:
A previously undocumented Windows malware has infected over 222,000 systems worldwide since at least June 2018, yielding its developer no less than 9,000 Moneros ($2 million) in illegal profits.
Dubbed "Crackonosh," the malware is distributed via illegal, cracked copies of popular software, only to disable antivirus programs installed in the machine and install a coin miner package called XMRig <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4hqh8kHyflI:uDg-5Kunp80:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4hqh8kHyflI:uDg-5Kunp80:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4hqh8kHyflI:uDg-5Kunp80:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4hqh8kHyflI:uDg-5Kunp80:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4hqh8kHyflI:uDg-5Kunp80:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4hqh8kHyflI:uDg-5Kunp80:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4hqh8kHyflI:uDg-5Kunp80:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4hqh8kHyflI:uDg-5Kunp80:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2453344844604279363
title: Google Extends Support for Tracking Party Cookies Until 2023
uri: Google-Extends-Support-for-Tracking-Party-Cookies-Until-2023
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2453344844604279363
content:
Google's sweeping proposals to deprecate third-party cookies in Chrome browser is going back to the drawing board after the company announced plans to delay the rollout from early 2022 to late 2023, pushing back the project by nearly two years.
"While there's considerable progress with this initiative, it's become clear that more time is needed across the ecosystem to get this right," Chrome's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N3LuOJKcAfA:ft3W47tdZ7c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N3LuOJKcAfA:ft3W47tdZ7c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N3LuOJKcAfA:ft3W47tdZ7c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N3LuOJKcAfA:ft3W47tdZ7c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N3LuOJKcAfA:ft3W47tdZ7c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N3LuOJKcAfA:ft3W47tdZ7c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N3LuOJKcAfA:ft3W47tdZ7c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N3LuOJKcAfA:ft3W47tdZ7c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-843593917224967157
title: SolarWinds Hackers Breach Microsoft Customer Support to Target its Customers
uri: SolarWinds-Hackers-Breach-Microsoft-Customer-Support-to-Target-its-Cus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/843593917224967157
content:
In yet another sign that the Russian hackers who breached SolarWinds network monitoring software to compromise a slew of entities never really went away, Microsoft said the threat actor behind the malicious cyber activities used password spraying and brute-force attacks in an attempt to guess passwords and gain access to its customer accounts.
"This recent activity was mostly unsuccessful, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WR3yUdOpMs:7C8SXhlGIrc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WR3yUdOpMs:7C8SXhlGIrc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WR3yUdOpMs:7C8SXhlGIrc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0WR3yUdOpMs:7C8SXhlGIrc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WR3yUdOpMs:7C8SXhlGIrc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0WR3yUdOpMs:7C8SXhlGIrc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0WR3yUdOpMs:7C8SXhlGIrc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0WR3yUdOpMs:7C8SXhlGIrc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8413672934005097210
title: DMARC: The First Line of Defense Against Ransomware
uri: DMARC-The-First-Line-of-Defense-Against-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8413672934005097210
content:
There has been a lot of buzz in the industry about ransomware lately. Almost every other day, it's making headlines. With businesses across the globe holding their breath, scared they might fall victim to the next major ransomware attack, it is now time to take action.
The FBI IC3 report of 2020 classified Ransomware as the most financially damaging cybercrime of the year, with no major <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0HlQTA3_BGY:Is9kYykSlrM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0HlQTA3_BGY:Is9kYykSlrM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0HlQTA3_BGY:Is9kYykSlrM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0HlQTA3_BGY:Is9kYykSlrM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0HlQTA3_BGY:Is9kYykSlrM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0HlQTA3_BGY:Is9kYykSlrM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0HlQTA3_BGY:Is9kYykSlrM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0HlQTA3_BGY:Is9kYykSlrM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4384579120151341653
title: Cisco ASA Flaw Under Active Attack After PoC Exploit Posted Online
uri: Cisco-ASA-Flaw-Under-Active-Attack-After-PoC-Exploit-Posted-Online
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4384579120151341653
content:
A security vulnerability in Cisco Adaptive Security Appliance (ASA) that was addressed by the company last October and again earlier this April, has been subjected to active in-the-wild attacks following the release of proof-of-concept (PoC) exploit code.
The PoC was published by researchers from cybersecurity firm Positive Technologies on June 24, following which reports emerged that attackers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WrluhSo0Pk:aAF-IJLtabM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WrluhSo0Pk:aAF-IJLtabM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WrluhSo0Pk:aAF-IJLtabM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1WrluhSo0Pk:aAF-IJLtabM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WrluhSo0Pk:aAF-IJLtabM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1WrluhSo0Pk:aAF-IJLtabM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WrluhSo0Pk:aAF-IJLtabM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1WrluhSo0Pk:aAF-IJLtabM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-163281206977478384
title: Hackers Trick Microsoft Into Signing Netfilter Driver Loaded With Rootkit Malware
uri: Hackers-Trick-Microsoft-Into-Signing-Netfilter-Driver-Loaded-With-Root
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/163281206977478384
content:
Microsoft on Friday said it's investigating an incident wherein a driver signed by the company turned out to be a malicious Windows rootkit that was observed communicating with command-and-control (C2) servers located in China.
The driver, called "Netfilter," is said to target gaming environments, specifically in the East Asian country, with the Redmond-based firm noting that "the actor's goal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WXmiiHIXaNo:dGf4U25Ta7A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WXmiiHIXaNo:dGf4U25Ta7A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WXmiiHIXaNo:dGf4U25Ta7A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WXmiiHIXaNo:dGf4U25Ta7A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WXmiiHIXaNo:dGf4U25Ta7A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WXmiiHIXaNo:dGf4U25Ta7A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WXmiiHIXaNo:dGf4U25Ta7A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WXmiiHIXaNo:dGf4U25Ta7A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6197445411915044851
title: Microsoft Edge Bug Could've Let Hackers Steal Your Secrets for Any Site
uri: Microsoft-Edge-Bug-Could-ve-Let-Hackers-Steal-Your-Secrets-for-Any-Sit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6197445411915044851
content:
Microsoft last week rolled out updates for the Edge browser with fixes for two security issues, one of which concerns a security bypass vulnerability that could be exploited to inject and execute arbitrary code in the context of any website.
Tracked as CVE-2021-34506 (CVSS score: 5.4), the weakness stems from a universal cross-site scripting (UXSS) issue that's triggered when automatically <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oAPglPB5YsI:biatwiFvT6A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oAPglPB5YsI:biatwiFvT6A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oAPglPB5YsI:biatwiFvT6A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oAPglPB5YsI:biatwiFvT6A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oAPglPB5YsI:biatwiFvT6A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oAPglPB5YsI:biatwiFvT6A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oAPglPB5YsI:biatwiFvT6A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oAPglPB5YsI:biatwiFvT6A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8894206314949684986
title: New API Lets App Developers Authenticate Users via SIM Cards
uri: New-API-Lets-App-Developers-Authenticate-Users-via-SIM-Cards
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8894206314949684986
content:
Online account creation poses a challenge for engineers and system architects: if you put up too many barriers, you risk turning away genuine users. Make it too easy, and you risk fraud or fake accounts.
The Problem with Identity Verification
The traditional model of online identity – username/email and password – has long outlived its usefulness. This is how multi-factor or two-factor <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wTmx1fRCu8M:jFxo57jKVzQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wTmx1fRCu8M:jFxo57jKVzQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wTmx1fRCu8M:jFxo57jKVzQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wTmx1fRCu8M:jFxo57jKVzQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wTmx1fRCu8M:jFxo57jKVzQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wTmx1fRCu8M:jFxo57jKVzQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wTmx1fRCu8M:jFxo57jKVzQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wTmx1fRCu8M:jFxo57jKVzQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6783447390014935984
title: Google now requires app developers to verify their address and use 2FA
uri: Google-now-requires-app-developers-to-verify-their-address-and-use-2FA
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6783447390014935984
content:
Google on Monday announced new measures for the Play Store, including requiring developer accounts to turn on 2-Step Verification (2SV), provide an address, and verify their contact details later this year.
The new identification and two-factor authentication requirements are a step towards strengthening account security and ensuring a safe and secure app marketplace, Google Play Trust and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oTv8xh6udfE:PknR_fwrswU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oTv8xh6udfE:PknR_fwrswU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oTv8xh6udfE:PknR_fwrswU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oTv8xh6udfE:PknR_fwrswU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oTv8xh6udfE:PknR_fwrswU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oTv8xh6udfE:PknR_fwrswU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oTv8xh6udfE:PknR_fwrswU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oTv8xh6udfE:PknR_fwrswU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6867517591710028130
title: Unpatched Virtual Machine Takeover Bug Affects Google Compute Engine
uri: Unpatched-Virtual-Machine-Takeover-Bug-Affects-Google-Compute-Engine
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6867517591710028130
content:
An unpatched security vulnerability affecting Google's Compute Engine platform could be abused by an attacker to take over virtual machines over the network.
"This is done by impersonating the metadata server from the targeted virtual machine's point of view," security researcher Imre Rad said in an analysis published Friday. "By mounting this exploit, the attacker can grant access to themselves<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2zMwEb1uzPQ:tRQ3TjC-l1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2zMwEb1uzPQ:tRQ3TjC-l1A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2zMwEb1uzPQ:tRQ3TjC-l1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2zMwEb1uzPQ:tRQ3TjC-l1A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2zMwEb1uzPQ:tRQ3TjC-l1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2zMwEb1uzPQ:tRQ3TjC-l1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2zMwEb1uzPQ:tRQ3TjC-l1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2zMwEb1uzPQ:tRQ3TjC-l1A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5671818324705479603
title: GitHub Launches 'Copilot' — AI-Powered Code Completion Tool
uri: GitHub-Launches-Copilot-AI-Powered-Code-Completion-Tool
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5671818324705479603
content:
GitHub on Tuesday launched a technical preview of a new AI-powered pair programming tool that aims to help software developers write better code across a variety of programming languages, including Python, JavaScript, TypeScript, Ruby, and Go.
Copilot, as the code synthesizer is called, has been developed in collaboration with OpenAI, and leverages Codex, a new AI system that's trained on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mb49bH2iA0o:4d98bLoEkR4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mb49bH2iA0o:4d98bLoEkR4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mb49bH2iA0o:4d98bLoEkR4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mb49bH2iA0o:4d98bLoEkR4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mb49bH2iA0o:4d98bLoEkR4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mb49bH2iA0o:4d98bLoEkR4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mb49bH2iA0o:4d98bLoEkR4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mb49bH2iA0o:4d98bLoEkR4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3982566013315559748
title: Researchers Leak PoC Exploit for a Critical Windows RCE Vulnerability
uri: Researchers-Leak-PoC-Exploit-for-a-Critical-Windows-RCE-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3982566013315559748
content:
A proof-of-concept (PoC) exploit related to a remote code execution vulnerability affecting Windows Print Spooler and patched by Microsoft earlier this month was briefly published online before being taken down.
Identified as CVE-2021-1675, the security issue could grant remote attackers full control of vulnerable systems. Print Spooler manages the printing process in Windows, including loading <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RiE4TN0RrSs:NnlxRrXsYJI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RiE4TN0RrSs:NnlxRrXsYJI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RiE4TN0RrSs:NnlxRrXsYJI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RiE4TN0RrSs:NnlxRrXsYJI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RiE4TN0RrSs:NnlxRrXsYJI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RiE4TN0RrSs:NnlxRrXsYJI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RiE4TN0RrSs:NnlxRrXsYJI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RiE4TN0RrSs:NnlxRrXsYJI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8868324128827760258
title: Authorities Seize DoubleVPN Service Used by Cybercriminals
uri: Authorities-Seize-DoubleVPN-Service-Used-by-Cybercriminals
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8868324128827760258
content:
A coordinated international law enforcement operation resulted in the takedown of a VPN service called DoubleVPN for providing a safe haven for cybercriminals to cover their tracks.
"On 29th of June 2021, law enforcement took down DoubleVPN," the agencies said in a seizure notice splashed on the now-defunct site. "Law enforcement gained access to the servers of DoubleVPN and seized personal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DQOf37zgLg:amSXdDTIG0I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DQOf37zgLg:amSXdDTIG0I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DQOf37zgLg:amSXdDTIG0I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4DQOf37zgLg:amSXdDTIG0I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DQOf37zgLg:amSXdDTIG0I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4DQOf37zgLg:amSXdDTIG0I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4DQOf37zgLg:amSXdDTIG0I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4DQOf37zgLg:amSXdDTIG0I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4810303697820790766
title: [Webinar] How Cyber Attack Groups Are Spinning a Larger Ransomware Web
uri: Webinar-How-Cyber-Attack-Groups-Are-Spinning-a-Larger-Ransomware-Web
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4810303697820790766
content:
Organizations today already have an overwhelming number of dangers and threats to look out for, from spam to phishing attempts to new infiltration and ransomware tactics. There is no chance to rest, since attack groups are constantly looking for more effective means of infiltrating and infecting systems.
Today, there are hundreds of groups devoted to infiltrating almost every industry, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdy-4NIh4jE:_WJfdymsItE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdy-4NIh4jE:_WJfdymsItE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdy-4NIh4jE:_WJfdymsItE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kdy-4NIh4jE:_WJfdymsItE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdy-4NIh4jE:_WJfdymsItE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kdy-4NIh4jE:_WJfdymsItE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kdy-4NIh4jE:_WJfdymsItE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kdy-4NIh4jE:_WJfdymsItE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4600023283484832425
title: Microsoft Discloses Critical Bugs Allowing Takeover of NETGEAR Routers
uri: Microsoft-Discloses-Critical-Bugs-Allowing-Takeover-of-NETGEAR-Routers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4600023283484832425
content:
Cybersecurity researchers have detailed critical security vulnerabilities affecting NETGEAR DGN2200v1 series routers, which they say could be reliably abused as a jumping-off point to compromise a network's security and gain unfettered access.
The three HTTPd authentication security weaknesses (CVSS scores: 7.1 – 9.4) impact routers running firmware versions prior to v1.0.0.60, and have since <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qWPy1Hqahc:Tm7s7dXJfy8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qWPy1Hqahc:Tm7s7dXJfy8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qWPy1Hqahc:Tm7s7dXJfy8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4qWPy1Hqahc:Tm7s7dXJfy8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qWPy1Hqahc:Tm7s7dXJfy8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4qWPy1Hqahc:Tm7s7dXJfy8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4qWPy1Hqahc:Tm7s7dXJfy8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4qWPy1Hqahc:Tm7s7dXJfy8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8234384617191916432
title: Hacker Wanted in the U.S. for Spreading Gozi Virus Arrested in Colombia
uri: Hacker-Wanted-in-the-U-S-for-Spreading-Gozi-Virus-Arrested-in-Colombi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8234384617191916432
content:
Colombian authorities on Wednesday said they have arrested a Romanian hacker who is wanted in the U.S. for distributing a virus that infected more than a million computers from 2007 to 2012.
Mihai Ionut Paunescu (aka "Virus"), the individual in question, was detained at the El Dorado airport in Bogotá, the Office of the Attorney General of Colombia said.
&lt;!--adsense--&gt;
Paunescu was previously <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qh9uhgl2l7U:s9F0B0JNqfE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qh9uhgl2l7U:s9F0B0JNqfE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qh9uhgl2l7U:s9F0B0JNqfE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qh9uhgl2l7U:s9F0B0JNqfE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qh9uhgl2l7U:s9F0B0JNqfE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qh9uhgl2l7U:s9F0B0JNqfE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qh9uhgl2l7U:s9F0B0JNqfE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qh9uhgl2l7U:s9F0B0JNqfE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6734760336763416425
title: IndigoZebra APT Hacking Campaign Targets the Afghan Government
uri: IndigoZebra-APT-Hacking-Campaign-Targets-the-Afghan-Government
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6734760336763416425
content:
Cybersecurity researchers are warning of ongoing attacks coordinated by a suspected Chinese-speaking threat actor targeting the Afghanistan government as part of an espionage campaign that may have had its provenance as far back as 2014.
Israeli cybersecurity firm Check Point Research attributed the intrusions to a hacking group tracked under the moniker "IndigoZebra," with past activity aimed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Y6MHBv-U8A:E4P8y-yCA7U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Y6MHBv-U8A:E4P8y-yCA7U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Y6MHBv-U8A:E4P8y-yCA7U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4Y6MHBv-U8A:E4P8y-yCA7U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Y6MHBv-U8A:E4P8y-yCA7U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4Y6MHBv-U8A:E4P8y-yCA7U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4Y6MHBv-U8A:E4P8y-yCA7U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4Y6MHBv-U8A:E4P8y-yCA7U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8522396809134999364
title: Rethinking Application Security in the API-First Era
uri: Rethinking-Application-Security-in-the-API-First-Era
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8522396809134999364
content:
Securing applications it the API-first era can be an uphill battle. As development accelerates, accountability becomes unclear, and getting controls to operate becomes a challenge in itself. It's time that we rethink our application security strategies to reflect new priorities, principles and processes in the API-first era. Securing tomorrow's applications begins with assessing the business <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvWXO_HSCMk:Xrz-g3xxC24:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvWXO_HSCMk:Xrz-g3xxC24:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvWXO_HSCMk:Xrz-g3xxC24:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fvWXO_HSCMk:Xrz-g3xxC24:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvWXO_HSCMk:Xrz-g3xxC24:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fvWXO_HSCMk:Xrz-g3xxC24:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvWXO_HSCMk:Xrz-g3xxC24:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fvWXO_HSCMk:Xrz-g3xxC24:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1338323274004780119
title: Facebook Sues 4 Vietnamese for Hacking Accounts and $36 Million Ad Fraud
uri: Facebook-Sues-4-Vietnamese-for-Hacking-Accounts-and-36-Million-Ad-Fra
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1338323274004780119
content:
Facebook on Tuesday revealed it filed two separate legal actions against perpetrators who abused its ad platform to run deceptive advertisements in violation of the company's Terms and Advertising Policies. 
"In the first case, the defendants are a California marketing company and its agents responsible for a bait-and-switch advertising scheme on Facebook," the social media giant's Director of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7_IwFYucRU:qXz-Q05nHg4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7_IwFYucRU:qXz-Q05nHg4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7_IwFYucRU:qXz-Q05nHg4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l7_IwFYucRU:qXz-Q05nHg4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7_IwFYucRU:qXz-Q05nHg4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l7_IwFYucRU:qXz-Q05nHg4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l7_IwFYucRU:qXz-Q05nHg4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l7_IwFYucRU:qXz-Q05nHg4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5969497766356595235
title: 3 Steps to Strengthen Your Ransomware Defenses
uri: 3-Steps-to-Strengthen-Your-Ransomware-Defenses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5969497766356595235
content:
The recent tsunami of ransomware has brought to life the fears of downtime and data loss cybersecurity pros have warned about, as attacks on the energy sector, food supply chain, healthcare industry, and other critical infrastructure have grabbed headlines.
For the industry experts who track the evolution of this threat, the increased frequency, sophistication, and destructiveness of ransomware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KawuIuCEbRM:NnOAHbb3brc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KawuIuCEbRM:NnOAHbb3brc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KawuIuCEbRM:NnOAHbb3brc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KawuIuCEbRM:NnOAHbb3brc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KawuIuCEbRM:NnOAHbb3brc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KawuIuCEbRM:NnOAHbb3brc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KawuIuCEbRM:NnOAHbb3brc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KawuIuCEbRM:NnOAHbb3brc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5581996617096906955
title: NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers
uri: NSA-FBI-Reveal-Hacking-Methods-Used-by-Russian-Military-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5581996617096906955
content:
An ongoing brute-force attack campaign targeting enterprise cloud environments has been spearheaded by the Russian military intelligence since mid-2019, according to a joint advisory published by intelligence agencies in the U.K. and U.S.
The National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and the U.K.'s National <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vZjbBFKgQdc:s1zOnEdqnag:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vZjbBFKgQdc:s1zOnEdqnag:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vZjbBFKgQdc:s1zOnEdqnag:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vZjbBFKgQdc:s1zOnEdqnag:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vZjbBFKgQdc:s1zOnEdqnag:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vZjbBFKgQdc:s1zOnEdqnag:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vZjbBFKgQdc:s1zOnEdqnag:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vZjbBFKgQdc:s1zOnEdqnag:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8809675663975732411
title: Microsoft Warns of Critical "PrintNightmare" Flaw Being Exploited in the Wild
uri: Microsoft-Warns-of-Critical-PrintNightmare-Flaw-Being-Exploited-in-t
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8809675663975732411
content:
Microsoft on Thursday officially confirmed that the "PrintNightmare" remote code execution (RCE) vulnerability affecting Windows Print Spooler is different from the issue the company addressed as part of its Patch Tuesday update released earlier this month, while warning that it has detected exploitation attempts targeting the flaw.
The company is tracking the security weakness under the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0DtR37gKXdI:a2-p_bbuWlw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0DtR37gKXdI:a2-p_bbuWlw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0DtR37gKXdI:a2-p_bbuWlw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0DtR37gKXdI:a2-p_bbuWlw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0DtR37gKXdI:a2-p_bbuWlw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0DtR37gKXdI:a2-p_bbuWlw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0DtR37gKXdI:a2-p_bbuWlw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0DtR37gKXdI:a2-p_bbuWlw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8493046946815678224
title: New Google Scorecards Tool Scans Open-Source Software for More Security Risks
uri: New-Google-Scorecards-Tool-Scans-Open-Source-Software-for-More-Securit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8493046946815678224
content:
Google has launched an updated version of Scorecards, its automated security tool that produces a "risk score" for open source initiatives, with improved checks and capabilities to make the data generated by the utility accessible for analysis.
"With so much software today relying on open-source projects, consumers need an easy way to judge whether their dependencies are safe," Google's Open <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dlZfbOZA2Q:LIgMt5gxP9c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dlZfbOZA2Q:LIgMt5gxP9c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dlZfbOZA2Q:LIgMt5gxP9c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1dlZfbOZA2Q:LIgMt5gxP9c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dlZfbOZA2Q:LIgMt5gxP9c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1dlZfbOZA2Q:LIgMt5gxP9c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dlZfbOZA2Q:LIgMt5gxP9c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1dlZfbOZA2Q:LIgMt5gxP9c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9089642860422395320
title: New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks
uri: New-Mirai-Inspired-Botnet-Could-Be-Using-Your-KGUARD-DVRs-in-Cyber-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9089642860422395320
content:
Cybersecurity researchers on Thursday revealed details about a new Mirai-inspired botnet called "mirai_ptea" that leverages an undisclosed vulnerability in digital video recorders (DVR) provided by KGUARD to propagate and carry out distributed denial-of-service (DDoS) attacks.
Chinese security firm Netlab 360 pinned the first probe against the flaw on March 23, 2021, before it detected active <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNF24HKcybw:9U6RPMfX1-M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNF24HKcybw:9U6RPMfX1-M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNF24HKcybw:9U6RPMfX1-M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GNF24HKcybw:9U6RPMfX1-M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNF24HKcybw:9U6RPMfX1-M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GNF24HKcybw:9U6RPMfX1-M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNF24HKcybw:9U6RPMfX1-M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GNF24HKcybw:9U6RPMfX1-M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8665936780293526175
title: Mongolian Certificate Authority Hacked to Distribute Backdoored CA Software
uri: Mongolian-Certificate-Authority-Hacked-to-Distribute-Backdoored-CA-Sof
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8665936780293526175
content:
In yet another instance of software supply chain attack, unidentified hackers breached the website of MonPass, one of Mongolia's major certificate authorities, to backdoor its installer software with Cobalt Strike binaries.
The trojanized client was available for download between February 8, 2021, and March 3, 2021, said Czech cybersecurity software company Avast in a report published Thursday.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9udDUcm4jv0:olBK81boeEI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9udDUcm4jv0:olBK81boeEI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9udDUcm4jv0:olBK81boeEI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9udDUcm4jv0:olBK81boeEI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9udDUcm4jv0:olBK81boeEI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9udDUcm4jv0:olBK81boeEI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9udDUcm4jv0:olBK81boeEI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9udDUcm4jv0:olBK81boeEI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8540990319236228659
title: Kaseya Supply-Chain Attack Hits Nearly 40 Service Providers With REvil Ransomware
uri: Kaseya-Supply-Chain-Attack-Hits-Nearly-40-Service-Providers-With-REvil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8540990319236228659
content:
The threat actors behind the REvil ransomware gang appear to have pushed ransomware via an update for Kaseya's IT management software, hitting around 40 customers worldwide, in what's an instance of a widespread supply-chain ransomware attack.
"Beginning around mid-day (EST/US) on Friday, July 2, 2021, Kaseya's Incident Response team learned of a potential security incident involving our VSA <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uGshBztopNw:wecqRE55Iqk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uGshBztopNw:wecqRE55Iqk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uGshBztopNw:wecqRE55Iqk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uGshBztopNw:wecqRE55Iqk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uGshBztopNw:wecqRE55Iqk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uGshBztopNw:wecqRE55Iqk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uGshBztopNw:wecqRE55Iqk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uGshBztopNw:wecqRE55Iqk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2205255844079637192
title: Learn to Code — Get 2021 Master Bundle of 13 Online Courses @ 99% OFF
uri: Learn-to-Code-Get-2021-Master-Bundle-of-13-Online-Courses-99-OF
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2205255844079637192
content:
Whether you are looking to turn into a full-time developer or simply increasing your earnings in your current niche, learning to code can be a smart move. It is a well-known fact that recruiters strive to recruit people with technical skills, and these skills are a great way to build your own startup.
Featuring 13 courses, The Master Learn to Code 2021 Certification Bundle is a great way to get <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2KB_dejlUZM:vSc4DRKvOy4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2KB_dejlUZM:vSc4DRKvOy4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2KB_dejlUZM:vSc4DRKvOy4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2KB_dejlUZM:vSc4DRKvOy4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2KB_dejlUZM:vSc4DRKvOy4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2KB_dejlUZM:vSc4DRKvOy4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2KB_dejlUZM:vSc4DRKvOy4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2KB_dejlUZM:vSc4DRKvOy4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4569526787200301353
title: Android Apps with 5.8 million Installs Caught Stealing Users' Facebook Passwords
uri: Android-Apps-with-5-8-million-Installs-Caught-Stealing-Users-Facebook
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4569526787200301353
content:
Google intervened to remove nine Android apps downloaded more than 5.8 million times from the company's Play Store after the apps were caught furtively stealing users' Facebook login credentials.
"The applications were fully functional, which was supposed to weaken the vigilance of potential victims. With that, to access all of the apps' functions and, allegedly, to disable in-app ads, users <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eQaaE5iQIPU:QyTfr0KoM9g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eQaaE5iQIPU:QyTfr0KoM9g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eQaaE5iQIPU:QyTfr0KoM9g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eQaaE5iQIPU:QyTfr0KoM9g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eQaaE5iQIPU:QyTfr0KoM9g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eQaaE5iQIPU:QyTfr0KoM9g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eQaaE5iQIPU:QyTfr0KoM9g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eQaaE5iQIPU:QyTfr0KoM9g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3601338832884042704
title: REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom
uri: REvil-Used-0-Day-in-Kaseya-Ransomware-Attack-Demands-70-Million-Rans
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3601338832884042704
content:
Amidst the massive supply-chain ransomware attack that triggered an infection chain compromising thousands of businesses on Friday, new details have emerged about how the notorious Russia-linked REvil cybercrime gang may have pulled off the unprecedented hack.
The Dutch Institute for Vulnerability Disclosure (DIVD) on Sunday revealed it had alerted Kaseya to a number of zero-day vulnerabilities <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9fsd5vw3Zk:COGRxWTP9_M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9fsd5vw3Zk:COGRxWTP9_M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9fsd5vw3Zk:COGRxWTP9_M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W9fsd5vw3Zk:COGRxWTP9_M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9fsd5vw3Zk:COGRxWTP9_M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W9fsd5vw3Zk:COGRxWTP9_M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9fsd5vw3Zk:COGRxWTP9_M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W9fsd5vw3Zk:COGRxWTP9_M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1631511853866124823
title: Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw
uri: Microsoft-Urges-Azure-Users-to-Update-PowerShell-to-Patch-RCE-Flaw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1631511853866124823
content:
Microsoft is urging Azure users to update the PowerShell command-line tool as soon as possible to protect against a critical remote code execution vulnerability impacting .NET Core.
The issue, tracked as CVE-2021-26701 (CVSS score: 8.1), affects PowerShell versions 7.0 and 7.1 and have been remediated in versions 7.0.6 and 7.1.3, respectively. Windows PowerShell 5.1 isn't impacted by the flaw.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2UBdG_izX0:9BLbx_ysCPk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2UBdG_izX0:9BLbx_ysCPk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2UBdG_izX0:9BLbx_ysCPk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I2UBdG_izX0:9BLbx_ysCPk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2UBdG_izX0:9BLbx_ysCPk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I2UBdG_izX0:9BLbx_ysCPk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2UBdG_izX0:9BLbx_ysCPk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I2UBdG_izX0:9BLbx_ysCPk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-531535000082667405
title: TrickBot Botnet Found Deploying A New Ransomware Called Diavol
uri: TrickBot-Botnet-Found-Deploying-A-New-Ransomware-Called-Diavol
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/531535000082667405
content:
Threat actors behind the infamous TrickBot malware have been linked to a new ransomware strain named "Diavol," according to the latest research.
Diavol and Conti ransomware payloads were deployed on different systems in a case of an unsuccessful attack targeting one of its customers earlier this month, researchers from Fortinet's FortiGuard Labs said last week.
TrickBot, a banking Trojan first <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wRnHgtD7RQ:hdfS7rcX-t0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wRnHgtD7RQ:hdfS7rcX-t0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wRnHgtD7RQ:hdfS7rcX-t0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wRnHgtD7RQ:hdfS7rcX-t0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wRnHgtD7RQ:hdfS7rcX-t0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wRnHgtD7RQ:hdfS7rcX-t0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wRnHgtD7RQ:hdfS7rcX-t0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wRnHgtD7RQ:hdfS7rcX-t0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3296540066366895364
title: Getting Started with Security Testing: A Practical Guide for Startups
uri: Getting-Started-with-Security-Testing-A-Practical-Guide-for-Startups
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3296540066366895364
content:
A common misconception among startup founders is that cybercriminals won't waste time on them, because they're not big or well known enough yet.
But just because you are small doesn't mean you're not in the firing line. The size of a startup does not exempt it from cyber-attacks – that's because hackers constantly scan the internet looking for flaws that they can exploit; one slip up, and your <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sd6lvN__1oE:p2zHX4bJquE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sd6lvN__1oE:p2zHX4bJquE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sd6lvN__1oE:p2zHX4bJquE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sd6lvN__1oE:p2zHX4bJquE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sd6lvN__1oE:p2zHX4bJquE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sd6lvN__1oE:p2zHX4bJquE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sd6lvN__1oE:p2zHX4bJquE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sd6lvN__1oE:p2zHX4bJquE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2361835407578556803
title: Kaseya Rules Out Supply-Chain Attack; Says VSA 0-Day Hit Its Customers Directly
uri: Kaseya-Rules-Out-Supply-Chain-Attack-Says-VSA-0-Day-Hit-Its-Customers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2361835407578556803
content:
U.S. technology firm Kaseya, which is firefighting the largest ever supply-chain ransomware strike on its VSA on-premises product, ruled out the possibility that its codebase was unauthorizedly tampered with to distribute malware.
While initial reports raised speculations that the ransomware gang might have gained access to Kaseya's backend infrastructure and abused it to deploy a malicious <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TFjT0ENoLBc:eLOPTzSFFYY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TFjT0ENoLBc:eLOPTzSFFYY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TFjT0ENoLBc:eLOPTzSFFYY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TFjT0ENoLBc:eLOPTzSFFYY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TFjT0ENoLBc:eLOPTzSFFYY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TFjT0ENoLBc:eLOPTzSFFYY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TFjT0ENoLBc:eLOPTzSFFYY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TFjT0ENoLBc:eLOPTzSFFYY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5902424664744863721
title: Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities
uri: Interpol-Arrests-Moroccan-Hacker-Engaged-in-Nefarious-Cyber-Activities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5902424664744863721
content:
Law enforcement authorities with Interpol have apprehended a threat actor presumably responsible for multiple attacks on telecom companies, major banks, and multinational corporations in France with the goal of stealing customers' bank information.
The two-year investigation, dubbed Operation Lyrebird by the international, intergovernmental organization, resulted in the arrest of a Moroccan <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HzE1FB4rw2E:R77yxZF1WUg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HzE1FB4rw2E:R77yxZF1WUg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HzE1FB4rw2E:R77yxZF1WUg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HzE1FB4rw2E:R77yxZF1WUg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HzE1FB4rw2E:R77yxZF1WUg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HzE1FB4rw2E:R77yxZF1WUg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HzE1FB4rw2E:R77yxZF1WUg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HzE1FB4rw2E:R77yxZF1WUg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7399409311743720584
title: Microsoft Issues Emergency Patch for Critical Windows PrintNightmare Vulnerability
uri: Microsoft-Issues-Emergency-Patch-for-Critical-Windows-PrintNightmare-V
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7399409311743720584
content:
Microsoft has shipped an emergency out-of-band security update to address a critical zero-day vulnerability — known as "PrintNightmare" — that affects the Windows Print Spooler service and can permit remote threat actors to run arbitrary code and take over vulnerable systems.
Tracked as CVE-2021-34527 (CVSS score: 8.8), the remote code execution flaw impacts all supported editions of Windows. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zqxdnEaalJY:TlUnC444ojE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zqxdnEaalJY:TlUnC444ojE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zqxdnEaalJY:TlUnC444ojE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zqxdnEaalJY:TlUnC444ojE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zqxdnEaalJY:TlUnC444ojE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zqxdnEaalJY:TlUnC444ojE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zqxdnEaalJY:TlUnC444ojE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zqxdnEaalJY:TlUnC444ojE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-430877203681687471
title: WildPressure APT Emerges With New Malware Targeting Windows and macOS
uri: WildPressure-APT-Emerges-With-New-Malware-Targeting-Windows-and-macOS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/430877203681687471
content:
A malicious campaign that has set its sights on industrial-related entities in the Middle East since 2019 has resurfaced with an upgraded malware toolset to strike both Windows and macOS operating systems, symbolizing an expansion in both its targets and its strategy around distributing threats.
Russian cybersecurity firm attributed the attacks to an advanced persistent threat (APT) it tracks as<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ2WPtxkI10:VxghArCG6DE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ2WPtxkI10:VxghArCG6DE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ2WPtxkI10:VxghArCG6DE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tZ2WPtxkI10:VxghArCG6DE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ2WPtxkI10:VxghArCG6DE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tZ2WPtxkI10:VxghArCG6DE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tZ2WPtxkI10:VxghArCG6DE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tZ2WPtxkI10:VxghArCG6DE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3080482652011396155
title: Dozens of Vulnerable NuGet Packages Allow Attackers to Target .NET Platform
uri: Dozens-of-Vulnerable-NuGet-Packages-Allow-Attackers-to-Target-NET-Pla
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3080482652011396155
content:
An analysis of off-the-shelf packages hosted on the NuGet repository has revealed 51 unique software components to be vulnerable to actively exploited, high-severity vulnerabilities, once again underscoring the threat posed by third-party dependencies to the software development process.
In light of the growing number of cyber incidents that target the software supply chain, there is an urgent <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fph_q-Q2eHg:xX9bt8RoAQg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fph_q-Q2eHg:xX9bt8RoAQg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fph_q-Q2eHg:xX9bt8RoAQg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fph_q-Q2eHg:xX9bt8RoAQg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fph_q-Q2eHg:xX9bt8RoAQg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fph_q-Q2eHg:xX9bt8RoAQg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fph_q-Q2eHg:xX9bt8RoAQg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fph_q-Q2eHg:xX9bt8RoAQg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-388910941722439767
title: [Whitepaper] XDR vs. NDR/NTA – What do Organizations Truly Need to Stay Safe?
uri: Whitepaper-XDR-vs-NDR-NTA-What-do-Organizations-Truly-Need-to-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/388910941722439767
content:
Security teams whose organizations are outside the Fortune 500 are faced with a dilemma. Most teams will have to choose between deploying either a network traffic analysis (NTA) or network detection and response (NDR) tool or an endpoint detection and response (EDR) tool to supplement their existing stacks.
On the other hand, some organizations are getting the best of both options by switching <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cgEh7QIaVV8:fiAHn4u0UPM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cgEh7QIaVV8:fiAHn4u0UPM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cgEh7QIaVV8:fiAHn4u0UPM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cgEh7QIaVV8:fiAHn4u0UPM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cgEh7QIaVV8:fiAHn4u0UPM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cgEh7QIaVV8:fiAHn4u0UPM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cgEh7QIaVV8:fiAHn4u0UPM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cgEh7QIaVV8:fiAHn4u0UPM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2694982491039478485
title: Microsoft's Emergency Patch Fails to Fully Fix PrintNightmare RCE Vulnerability
uri: Microsoft-s-Emergency-Patch-Fails-to-Fully-Fix-PrintNightmare-RCE-Vuln
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2694982491039478485
content:
Even as Microsoft expanded patches for the so-called PrintNightmare vulnerability for Windows 10 version 1607, Windows Server 2012, and Windows Server 2016, it has come to light that the patch for the remote code execution exploit in the Windows Print Spooler service can be bypassed in certain scenarios, effectively defeating the security protections and permitting attackers to run arbitrary <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wJ1sNG2UPg:h0OACTAB9lE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wJ1sNG2UPg:h0OACTAB9lE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wJ1sNG2UPg:h0OACTAB9lE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wJ1sNG2UPg:h0OACTAB9lE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wJ1sNG2UPg:h0OACTAB9lE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wJ1sNG2UPg:h0OACTAB9lE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wJ1sNG2UPg:h0OACTAB9lE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wJ1sNG2UPg:h0OACTAB9lE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7625934296069079898
title: Experts Uncover Malware Attacks Targeting Corporate Networks in Latin America
uri: Experts-Uncover-Malware-Attacks-Targeting-Corporate-Networks-in-Latin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7625934296069079898
content:
Cybersecurity researchers on Thursday took the wraps off a new, ongoing espionage campaign targeting corporate networks in Spanish-speaking countries, specifically Venezuela, to spy on its victims.
Dubbed "Bandidos" by ESET owing to the use of an upgraded variant of Bandook malware, the primary targets of the threat actor are corporate networks in the South American country spanning across <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pNIEaPaozbE:t_grpBrEe58:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pNIEaPaozbE:t_grpBrEe58:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pNIEaPaozbE:t_grpBrEe58:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pNIEaPaozbE:t_grpBrEe58:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pNIEaPaozbE:t_grpBrEe58:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pNIEaPaozbE:t_grpBrEe58:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pNIEaPaozbE:t_grpBrEe58:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pNIEaPaozbE:t_grpBrEe58:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9164162197979846513
title: Security Awareness Training is Broken. Human Risk Management (HRM) is the Fix
uri: Security-Awareness-Training-is-Broken-Human-Risk-Management-(HRM)-is
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9164162197979846513
content:
Humans are an organization's strongest defence against evolving cyber threats, but security awareness training alone often isn't enough to transform user behaviour.
In this guide, usecure looks at why Human Risk Management (HRM) is the new fix for building a security-savvy workforce.
Don't be fooled...
Businesses are investing more than ever into strengthening their employee security awareness <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9e58O7JzBw:mq1PKXSxLHI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9e58O7JzBw:mq1PKXSxLHI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9e58O7JzBw:mq1PKXSxLHI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m9e58O7JzBw:mq1PKXSxLHI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9e58O7JzBw:mq1PKXSxLHI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m9e58O7JzBw:mq1PKXSxLHI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9e58O7JzBw:mq1PKXSxLHI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m9e58O7JzBw:mq1PKXSxLHI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-513319000858768368
title: How to Mitigate Microsoft Print Spooler Vulnerability – PrintNightmare
uri: How-to-Mitigate-Microsoft-Print-Spooler-Vulnerability-PrintNightma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/513319000858768368
content:
This week, PrintNightmare - Microsoft's Print Spooler vulnerability (CVE-2021-34527) was upgraded from a 'Low' criticality to a 'Critical' criticality.
This is due to a Proof of Concept published on GitHub, which attackers could potentially leverage for gaining access to Domain Controllers.
As we reported earlier, Microsoft already released a patch in June 2021, but it wasn't enough to stop <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkZ25F8Te70:uJ_gdwZdpl0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkZ25F8Te70:uJ_gdwZdpl0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkZ25F8Te70:uJ_gdwZdpl0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RkZ25F8Te70:uJ_gdwZdpl0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkZ25F8Te70:uJ_gdwZdpl0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RkZ25F8Te70:uJ_gdwZdpl0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkZ25F8Te70:uJ_gdwZdpl0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RkZ25F8Te70:uJ_gdwZdpl0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1436572830165128938
title: SideCopy Hackers Target Indian Government Officials With New Malware
uri: SideCopy-Hackers-Target-Indian-Government-Officials-With-New-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1436572830165128938
content:
A cyber-espionage group has been observed increasingly targeting Indian government personnel as part of a broad campaign to infect victims with as many as four new custom remote access trojans (RATs), signaling a "boost in their development operations."
Attributed to a group tracked as SideCopy, the intrusions culminate in the deployment of a variety of modular plugins, ranging from file <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lU_0vXVGNw:Wya2gaJ_4bE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lU_0vXVGNw:Wya2gaJ_4bE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lU_0vXVGNw:Wya2gaJ_4bE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4lU_0vXVGNw:Wya2gaJ_4bE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lU_0vXVGNw:Wya2gaJ_4bE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4lU_0vXVGNw:Wya2gaJ_4bE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4lU_0vXVGNw:Wya2gaJ_4bE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4lU_0vXVGNw:Wya2gaJ_4bE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2640949081718016403
title: Critical Flaws Reported in Sage X3 Enterprise Management Software
uri: Critical-Flaws-Reported-in-Sage-X3-Enterprise-Management-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2640949081718016403
content:
Four security vulnerabilities have been uncovered in the Sage X3 enterprise resource planning (ERP) product, two of which could be chained together as part of an attack sequence to enable adversaries to execute malicious commands and take control of vulnerable systems.
These issues were discovered by researchers from Rapid7, who notified Sage Group of their findings on Feb. 3, 2021. The vendor <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Nk5V6X3eC0:8tES2QCBh_I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Nk5V6X3eC0:8tES2QCBh_I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Nk5V6X3eC0:8tES2QCBh_I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-Nk5V6X3eC0:8tES2QCBh_I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Nk5V6X3eC0:8tES2QCBh_I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-Nk5V6X3eC0:8tES2QCBh_I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-Nk5V6X3eC0:8tES2QCBh_I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-Nk5V6X3eC0:8tES2QCBh_I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6670450890777995785
title: Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems
uri: Critical-Flaws-Reported-in-Philips-Vue-PACS-Medical-Imaging-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6670450890777995785
content:
Multiple security vulnerabilities have been disclosed in Philips Clinical Collaboration Platform Portal (aka Vue PACS), some of which could be exploited by an adversary to take control of an affected system.
"Successful exploitation of these vulnerabilities could allow an unauthorized person or process to eavesdrop, view or modify data, gain system access, perform code execution, install <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JznQ4IpyYCo:doiP8OCqOEc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JznQ4IpyYCo:doiP8OCqOEc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JznQ4IpyYCo:doiP8OCqOEc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JznQ4IpyYCo:doiP8OCqOEc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JznQ4IpyYCo:doiP8OCqOEc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JznQ4IpyYCo:doiP8OCqOEc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JznQ4IpyYCo:doiP8OCqOEc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JznQ4IpyYCo:doiP8OCqOEc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3685152355922310182
title: Hackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files
uri: Hackers-Use-New-Trick-to-Disable-Macro-Security-Warnings-in-Malicious
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3685152355922310182
content:
While it's a norm for phishing campaigns that distribute weaponized Microsoft Office documents to prompt victims to enable macros in order to trigger the infection chain directly, new findings indicate attackers are using non-malicious documents to disable security warnings prior to executing macro code to infect victims' computers.
In yet another instance of malware authors continue to evolve <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UFYEmW7peA0:wjLxf8c8PB4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UFYEmW7peA0:wjLxf8c8PB4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UFYEmW7peA0:wjLxf8c8PB4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UFYEmW7peA0:wjLxf8c8PB4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UFYEmW7peA0:wjLxf8c8PB4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UFYEmW7peA0:wjLxf8c8PB4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UFYEmW7peA0:wjLxf8c8PB4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UFYEmW7peA0:wjLxf8c8PB4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4986620407986108355
title: New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021
uri: New-SaaS-Security-Report-Dives-into-the-Concerns-and-Plans-of-CISOs-in
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4986620407986108355
content:
For years, security professionals have recognized the need to enhance SaaS security. However, the exponential adoption of Software-as-a-Service (SaaS) applications over 2020 turned slow-burning embers into a raging fire. 
Organizations manage anywhere from thirty-five to more than a hundred applications. From collaboration tools like Slack and Microsoft Teams to mission-critical applications <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NXlajGdinFs:zqjwy2iquyE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NXlajGdinFs:zqjwy2iquyE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NXlajGdinFs:zqjwy2iquyE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NXlajGdinFs:zqjwy2iquyE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NXlajGdinFs:zqjwy2iquyE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NXlajGdinFs:zqjwy2iquyE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NXlajGdinFs:zqjwy2iquyE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NXlajGdinFs:zqjwy2iquyE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7803520227939291244
title: Magecart Hackers Hide Stolen Credit Card Data Into Images for Evasive Exfiltration
uri: Magecart-Hackers-Hide-Stolen-Credit-Card-Data-Into-Images-for-Evasive
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7803520227939291244
content:
Cybercrime actors part of the Magecart group have latched on to a new technique of obfuscating the malware code within comment blocks and encoding stolen credit card data into images and other files hosted on the server, once again demonstrating how the attackers are continuously improving their infection chains to escape detection.
"One tactic that some Magecart actors employ is the dumping of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dmxdzsmFzTY:1P1GfU6rPrQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dmxdzsmFzTY:1P1GfU6rPrQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dmxdzsmFzTY:1P1GfU6rPrQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dmxdzsmFzTY:1P1GfU6rPrQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dmxdzsmFzTY:1P1GfU6rPrQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dmxdzsmFzTY:1P1GfU6rPrQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dmxdzsmFzTY:1P1GfU6rPrQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dmxdzsmFzTY:1P1GfU6rPrQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2799535543229693006
title: Kaseya Releases Patches for Flaws Exploited in Widespread Ransomware Attack
uri: Kaseya-Releases-Patches-for-Flaws-Exploited-in-Widespread-Ransomware-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2799535543229693006
content:
Florida-based software vendor Kaseya on Sunday rolled out software updates to address critical security vulnerabilities in its Virtual System Administrator (VSA) software that was used as a jumping off point to target as many as 1,500 businesses across the globe as part of a widespread supply-chain ransomware attack.
Following the incident, the company had urged on-premise VSA customers to shut <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=en3pGVzKbvE:dfdscVTH5so:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=en3pGVzKbvE:dfdscVTH5so:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=en3pGVzKbvE:dfdscVTH5so:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=en3pGVzKbvE:dfdscVTH5so:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=en3pGVzKbvE:dfdscVTH5so:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=en3pGVzKbvE:dfdscVTH5so:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=en3pGVzKbvE:dfdscVTH5so:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=en3pGVzKbvE:dfdscVTH5so:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4457602162528466172
title: Crafting a Custom Dictionary for Your Password Policy
uri: Crafting-a-Custom-Dictionary-for-Your-Password-Policy
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4457602162528466172
content:
Modern password policies are comprised of many different elements that contribute to its effectiveness. One of the components of an effective current password policy makes use of what is known as a custom dictionary that filters out certain words that are not allowed as passwords in the environment.
Using custom dictionaries, organizations can significantly improve their cybersecurity posture <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UC-1YALRubQ:52S7AX-GHgE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UC-1YALRubQ:52S7AX-GHgE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UC-1YALRubQ:52S7AX-GHgE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UC-1YALRubQ:52S7AX-GHgE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UC-1YALRubQ:52S7AX-GHgE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UC-1YALRubQ:52S7AX-GHgE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UC-1YALRubQ:52S7AX-GHgE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UC-1YALRubQ:52S7AX-GHgE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6344738795785057733
title: Hackers Spread BIOPASS Malware via Chinese Online Gambling Sites
uri: Hackers-Spread-BIOPASS-Malware-via-Chinese-Online-Gambling-Sites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6344738795785057733
content:
Cybersecurity researchers are warning about a new malware that's striking online gambling companies in China via a watering hole attack to deploy either Cobalt Strike beacons or a previously undocumented Python-based backdoor called BIOPASS RAT that takes advantage of Open Broadcaster Software (OBS) Studio's live-streaming app to capture the screen of its victims to attackers.
The attack <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lUhuWFPTb1Y:2HI-XrUmYWU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lUhuWFPTb1Y:2HI-XrUmYWU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lUhuWFPTb1Y:2HI-XrUmYWU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lUhuWFPTb1Y:2HI-XrUmYWU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lUhuWFPTb1Y:2HI-XrUmYWU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lUhuWFPTb1Y:2HI-XrUmYWU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lUhuWFPTb1Y:2HI-XrUmYWU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lUhuWFPTb1Y:2HI-XrUmYWU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4057882779460138645
title: A New Critical SolarWinds Zero-Day Vulnerability Under Active Attack
uri: A-New-Critical-SolarWinds-Zero-Day-Vulnerability-Under-Active-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4057882779460138645
content:
SolarWinds, the Texas-based company that became the epicenter of a massive supply chain attack late last year, has issued patches to contain a remote code execution flaw in its Serv-U managed file transfer service.
The fixes, which target Serv-U Managed File Transfer and Serv-U Secure FTP products, arrive after Microsoft notified the IT management and remote monitoring software maker that the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeMawiqsar8:2-fEHrlb2yw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeMawiqsar8:2-fEHrlb2yw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeMawiqsar8:2-fEHrlb2yw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xeMawiqsar8:2-fEHrlb2yw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeMawiqsar8:2-fEHrlb2yw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xeMawiqsar8:2-fEHrlb2yw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xeMawiqsar8:2-fEHrlb2yw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xeMawiqsar8:2-fEHrlb2yw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8972258321888808531
title: Critical RCE Flaw in ForgeRock Access Manager Under Active Attack
uri: Critical-RCE-Flaw-in-ForgeRock-Access-Manager-Under-Active-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8972258321888808531
content:
Cybersecurity agencies in Australia and the U.S. are warning of an actively exploited vulnerability impacting ForgeRock's OpenAM access management solution that could be leveraged to execute arbitrary code on an affected system remotely.
"The [Australian Cyber Security Centre] has observed actors exploiting this vulnerability to compromise multiple hosts and deploy additional malware and tools,"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FR4cyb-e-yI:_qM0msLaL2c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FR4cyb-e-yI:_qM0msLaL2c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FR4cyb-e-yI:_qM0msLaL2c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FR4cyb-e-yI:_qM0msLaL2c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FR4cyb-e-yI:_qM0msLaL2c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FR4cyb-e-yI:_qM0msLaL2c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FR4cyb-e-yI:_qM0msLaL2c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FR4cyb-e-yI:_qM0msLaL2c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2942227801677587445
title: Trickbot Malware Returns with a new VNC Module to Spy on its Victims
uri: Trickbot-Malware-Returns-with-a-new-VNC-Module-to-Spy-on-its-Victims
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2942227801677587445
content:
Cybersecurity researchers have opened the lid on the continued resurgence of the insidious TrickBot malware, making it clear that the Russia-based transnational cybercrime group is working behind the scenes to revamp its attack infrastructure in response to recent counter efforts from law enforcement.
"The new capabilities discovered are used to monitor and gather intelligence on victims, using <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXAjxDOdOT8:PNGTQh2e1mk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXAjxDOdOT8:PNGTQh2e1mk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXAjxDOdOT8:PNGTQh2e1mk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cXAjxDOdOT8:PNGTQh2e1mk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXAjxDOdOT8:PNGTQh2e1mk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cXAjxDOdOT8:PNGTQh2e1mk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cXAjxDOdOT8:PNGTQh2e1mk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cXAjxDOdOT8:PNGTQh2e1mk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4375469373387242193
title: Iranian Hackers Posing as Scholars Target Professors and Writers in Middle-East
uri: Iranian-Hackers-Posing-as-Scholars-Target-Professors-and-Writers-in-Mi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4375469373387242193
content:
A sophisticated social engineering attack undertaken by an Iranian-state aligned actor targeted think tanks, journalists, and professors with an aim to solicit sensitive information by masquerading as scholars with the University of London's School of Oriental and African Studies (SOAS).
Enterprise security firm Proofpoint attributed the campaign — called "Operation SpoofedScholars" — to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B87P1f3Sg0A:C0B3r7lFgQs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B87P1f3Sg0A:C0B3r7lFgQs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B87P1f3Sg0A:C0B3r7lFgQs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B87P1f3Sg0A:C0B3r7lFgQs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B87P1f3Sg0A:C0B3r7lFgQs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B87P1f3Sg0A:C0B3r7lFgQs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=B87P1f3Sg0A:C0B3r7lFgQs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=B87P1f3Sg0A:C0B3r7lFgQs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8172538515915777924
title: Critical Flaws Reported in Etherpad — a Popular Google Docs Alternative
uri: Critical-Flaws-Reported-in-Etherpad-a-Popular-Google-Docs-Alternat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8172538515915777924
content:
Cybersecurity researchers have disclosed new security vulnerabilities in the Etherpad text editor (version 1.8.13) that could potentially enable attackers to hijack administrator accounts, execute system commands, and even steal sensitive documents.
The two flaws — tracked as CVE-2021-34816 and CVE-2021-34817 — were discovered and reported on June 4 by researchers from SonarSource, following <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5t1VnK2mtjQ:qY-ITZTM6n0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5t1VnK2mtjQ:qY-ITZTM6n0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5t1VnK2mtjQ:qY-ITZTM6n0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5t1VnK2mtjQ:qY-ITZTM6n0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5t1VnK2mtjQ:qY-ITZTM6n0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5t1VnK2mtjQ:qY-ITZTM6n0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5t1VnK2mtjQ:qY-ITZTM6n0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5t1VnK2mtjQ:qY-ITZTM6n0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-570829873053203768
title: Chinese Hackers Exploit Latest SolarWinds 0-Day to Target U.S. Defense Firms
uri: Chinese-Hackers-Exploit-Latest-SolarWinds-0-Day-to-Target-U-S-Defense
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/570829873053203768
content:
Microsoft on Tuesday disclosed that the latest string of attacks targeting SolarWinds Serv-U managed file transfer service with a now-patched remote code execution (RCE) exploit is the handiwork of a Chinese threat actor dubbed "DEV-0322."
The revelation comes days after the Texas-based IT monitoring software maker issued fixes for the flaw that could enable adversaries to remotely run arbitrary<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=knCtlhZLho0:4wI8hEcgX8w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=knCtlhZLho0:4wI8hEcgX8w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=knCtlhZLho0:4wI8hEcgX8w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=knCtlhZLho0:4wI8hEcgX8w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=knCtlhZLho0:4wI8hEcgX8w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=knCtlhZLho0:4wI8hEcgX8w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=knCtlhZLho0:4wI8hEcgX8w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=knCtlhZLho0:4wI8hEcgX8w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7867761410413246454
title: Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero-Days
uri: Update-Your-Windows-PCs-to-Patch-117-New-Flaws-Including-9-Zero-Days
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7867761410413246454
content:
Microsoft rolled out Patch Tuesday updates for the month of July with fixes for a total of 117 security vulnerabilities, including nine zero-day flaws, of which four are said to be under active attacks in the wild, potentially enabling an adversary to take control of affected systems. 
Of the 117 issues, 13 are rated Critical, 103 are rated Important, and one is rated as Moderate in severity, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V95LUDXEIK8:LCeWjqwkSGM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V95LUDXEIK8:LCeWjqwkSGM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V95LUDXEIK8:LCeWjqwkSGM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V95LUDXEIK8:LCeWjqwkSGM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V95LUDXEIK8:LCeWjqwkSGM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V95LUDXEIK8:LCeWjqwkSGM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V95LUDXEIK8:LCeWjqwkSGM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V95LUDXEIK8:LCeWjqwkSGM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9158536198447124035
title: REvil Ransomware Gang Mysteriously Disappears After High-Profile Attacks
uri: REvil-Ransomware-Gang-Mysteriously-Disappears-After-High-Profile-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9158536198447124035
content:
REvil, the infamous ransomware cartel behind some of the biggest cyberattacks targeting JBS and Kaseya, has mysteriously disappeared from the dark web, leading to speculations that the criminal enterprise may have been taken down.
Multiple darknet and clearnet sites maintained by the Russia-linked cybercrime syndicate, including the data leak, extortion, and payment portals, remained <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d7Z5Ja2uaL4:u_wXsJ-G0XI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d7Z5Ja2uaL4:u_wXsJ-G0XI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d7Z5Ja2uaL4:u_wXsJ-G0XI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d7Z5Ja2uaL4:u_wXsJ-G0XI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d7Z5Ja2uaL4:u_wXsJ-G0XI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d7Z5Ja2uaL4:u_wXsJ-G0XI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d7Z5Ja2uaL4:u_wXsJ-G0XI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d7Z5Ja2uaL4:u_wXsJ-G0XI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1311095048948148651
title: 16 Cybercriminals Behind Mekotio and Grandoreiro Banking Trojan Arrested in Spain
uri: 16-Cybercriminals-Behind-Mekotio-and-Grandoreiro-Banking-Trojan-Arrest
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1311095048948148651
content:
Spanish law enforcement agencies on Wednesday arrested 16 individuals belonging to a criminal network in connection with operating two banking trojans as part of a social engineering campaign targeting financial institutions in Europe.
The arrests were made in Ribeira (A Coruña), Madrid, Parla and Móstoles (Madrid), Seseña (Toledo), Villafranca de los barros (Badajoz), and Aranda de Duero (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SDUFTbmUgmw:Skhe_IpqoUM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SDUFTbmUgmw:Skhe_IpqoUM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SDUFTbmUgmw:Skhe_IpqoUM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SDUFTbmUgmw:Skhe_IpqoUM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SDUFTbmUgmw:Skhe_IpqoUM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SDUFTbmUgmw:Skhe_IpqoUM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SDUFTbmUgmw:Skhe_IpqoUM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SDUFTbmUgmw:Skhe_IpqoUM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-577634265832327354
title: Google Details iOS, Chrome, IE Zero-Day Flaws Exploited Recently in the Wild
uri: Google-Details-iOS-Chrome-IE-Zero-Day-Flaws-Exploited-Recently-in-th
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/577634265832327354
content:
Threat intelligence researchers from Google on Wednesday shed more light on four in-the-wild zero-days in Chrome, Safari, and Internet Explorer browsers that were exploited by malicious actors in different campaigns since the start of the year.
What's more, three of the four zero-days were engineered by commercial providers and sold to and used by government-backed actors, contributing to an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J51bCpFSyXc:X_AlJzVxcHw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J51bCpFSyXc:X_AlJzVxcHw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J51bCpFSyXc:X_AlJzVxcHw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=J51bCpFSyXc:X_AlJzVxcHw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J51bCpFSyXc:X_AlJzVxcHw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=J51bCpFSyXc:X_AlJzVxcHw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=J51bCpFSyXc:X_AlJzVxcHw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=J51bCpFSyXc:X_AlJzVxcHw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6992701658319290526
title: New Zero-Trust API Offers Mobile Carrier Authentication to Developers
uri: New-Zero-Trust-API-Offers-Mobile-Carrier-Authentication-to-Developers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6992701658319290526
content:
Zero Trust is increasingly being adopted as the best strategy to maintain application security and prevent data breaches. To help achieve progress on Zero Trust, there is now a new, easy way to implement continuous user verification by connecting directly to the authentication systems used by mobile operators – without the overhead of processing or storing user data. 
Before we show you how it <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xMQewm8swes:XdPz5BlrK_A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xMQewm8swes:XdPz5BlrK_A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xMQewm8swes:XdPz5BlrK_A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xMQewm8swes:XdPz5BlrK_A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xMQewm8swes:XdPz5BlrK_A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xMQewm8swes:XdPz5BlrK_A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xMQewm8swes:XdPz5BlrK_A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xMQewm8swes:XdPz5BlrK_A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9141110185783236331
title: Ransomware Attacks Targeting Unpatched EOL SonicWall SMA 100 VPN Appliances
uri: Ransomware-Attacks-Targeting-Unpatched-EOL-SonicWall-SMA-100-VPN-Appli
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9141110185783236331
content:
Networking equipment maker SonicWall is alerting customers of an "imminent" ransomware campaign targeting its Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) products running unpatched and end-of-life 8.x firmware.
The warning comes more than a month after reports emerged that remote access vulnerabilities in SonicWall SRA 4600 VPN appliances (CVE-2019-7481) are being <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFBap-h96gQ:G8rv0tjOvTU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFBap-h96gQ:G8rv0tjOvTU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFBap-h96gQ:G8rv0tjOvTU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kFBap-h96gQ:G8rv0tjOvTU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFBap-h96gQ:G8rv0tjOvTU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kFBap-h96gQ:G8rv0tjOvTU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFBap-h96gQ:G8rv0tjOvTU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kFBap-h96gQ:G8rv0tjOvTU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-630618765425204257
title: China's Cyberspies Targeting Southeast Asian Government Entities
uri: China-s-Cyberspies-Targeting-Southeast-Asian-Government-Entities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/630618765425204257
content:
A sweeping and "highly active campaign" that originally set its sights on Myanmar has broadened its focus to strike a number of targets located in the Philippines, according to new research.
Russian cybersecurity firm Kaspersky, which first spotted the infections in October 2020, attributed them to a threat actor it tracks as "LuminousMoth," which it connected with medium to high confidence to a<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynTYqw0HM1w:y06W7l3lxoI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynTYqw0HM1w:y06W7l3lxoI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynTYqw0HM1w:y06W7l3lxoI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ynTYqw0HM1w:y06W7l3lxoI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynTYqw0HM1w:y06W7l3lxoI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ynTYqw0HM1w:y06W7l3lxoI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ynTYqw0HM1w:y06W7l3lxoI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ynTYqw0HM1w:y06W7l3lxoI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8842642962985258276
title: Update Your Chrome Browser to Patch New Zero‑Day Bug Exploited in the Wild
uri: Update-Your-Chrome-Browser-to-Patch-New-Zero-Day-Bug-Exploited-in-th
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8842642962985258276
content:
Google has pushed out a new security update to Chrome browser for Windows, Mac, and Linux with multiple fixes, including a zero-day that it says is being exploited in the wild.
The latest patch resolves a total of eight issues, one of which concerns a type confusion issue in its V8 open-source and JavaScript engine (CVE-2021-30563). The search giant credited an anonymous researcher for reporting<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6BEv2m0Dn8:m5UUTP64a7g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6BEv2m0Dn8:m5UUTP64a7g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6BEv2m0Dn8:m5UUTP64a7g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j6BEv2m0Dn8:m5UUTP64a7g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6BEv2m0Dn8:m5UUTP64a7g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j6BEv2m0Dn8:m5UUTP64a7g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j6BEv2m0Dn8:m5UUTP64a7g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j6BEv2m0Dn8:m5UUTP64a7g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4075963699407058047
title: Microsoft Warns of New Unpatched Windows Print Spooler Vulnerability
uri: Microsoft-Warns-of-New-Unpatched-Windows-Print-Spooler-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4075963699407058047
content:
Microsoft on Thursday shared fresh guidance on yet another vulnerability affecting the Windows Print Spooler service, stating that it's working to address it in an upcoming security update.
Tracked as CVE-2021-34481 (CVSS score: 7.8), the issue concerns a local privilege escalation flaw that could be abused to perform unauthorized actions on the system. The company credited security researcher <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KIB6sSY3DOA:rq1bZimn1a8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KIB6sSY3DOA:rq1bZimn1a8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KIB6sSY3DOA:rq1bZimn1a8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KIB6sSY3DOA:rq1bZimn1a8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KIB6sSY3DOA:rq1bZimn1a8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KIB6sSY3DOA:rq1bZimn1a8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KIB6sSY3DOA:rq1bZimn1a8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KIB6sSY3DOA:rq1bZimn1a8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1697022254154608274
title: Facebook Suspends Accounts Used by Iranian Hackers to Target US Military Personnel
uri: Facebook-Suspends-Accounts-Used-by-Iranian-Hackers-to-Target-US-Milita
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1697022254154608274
content:
Facebook on Thursday disclosed it dismantled a "sophisticated" online cyber espionage campaign conducted by Iranian hackers targeting about 200 military personnel and companies in the defense and aerospace sectors in the U.S., U.K., and Europe using fake online personas on its platform.
The social media giant pinned the attacks to a threat actor known as Tortoiseshell (aka Imperial Kitten) based<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D71FVAKV1pY:ic_KDNqNFQE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D71FVAKV1pY:ic_KDNqNFQE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D71FVAKV1pY:ic_KDNqNFQE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D71FVAKV1pY:ic_KDNqNFQE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D71FVAKV1pY:ic_KDNqNFQE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D71FVAKV1pY:ic_KDNqNFQE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D71FVAKV1pY:ic_KDNqNFQE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D71FVAKV1pY:ic_KDNqNFQE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6130813682041928659
title: Israeli Firm Helped Governments Target Journalists, Activists with 0-Days and Spyware
uri: Israeli-Firm-Helped-Governments-Target-Journalists-Activists-with-0-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6130813682041928659
content:
Two of the zero-day Windows flaws patched by Microsoft as part of its Patch Tuesday update earlier this week were weaponized by an Israel-based company called Candiru in a series of "precision attacks" to hack more than 100 journalists, academics, activists, and political dissidents globally.
The spyware vendor was also formally identified as the commercial surveillance company that Google's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kxKUMcFXWq8:0ZqSZmcUnfE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kxKUMcFXWq8:0ZqSZmcUnfE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kxKUMcFXWq8:0ZqSZmcUnfE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kxKUMcFXWq8:0ZqSZmcUnfE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kxKUMcFXWq8:0ZqSZmcUnfE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kxKUMcFXWq8:0ZqSZmcUnfE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kxKUMcFXWq8:0ZqSZmcUnfE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kxKUMcFXWq8:0ZqSZmcUnfE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-599524960078952216
title: CloudFlare CDNJS Bug Could Have Led to Widespread Supply-Chain Attacks
uri: CloudFlare-CDNJS-Bug-Could-Have-Led-to-Widespread-Supply-Chain-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/599524960078952216
content:
Web infrastructure and website security company Cloudflare last month fixed a critical vulnerability in its CDNJS library that's used by 12.7% of all websites on the internet.
CDNJS is a free and open-source content delivery network (CDN) that serves about 4,041 JavaScript and CSS libraries, making it the second most popular CDN for JavaScript after Google Hosted Libraries.
The weakness <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iLNhjM9jFOM:_sc6dysR8Fs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iLNhjM9jFOM:_sc6dysR8Fs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iLNhjM9jFOM:_sc6dysR8Fs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iLNhjM9jFOM:_sc6dysR8Fs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iLNhjM9jFOM:_sc6dysR8Fs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iLNhjM9jFOM:_sc6dysR8Fs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iLNhjM9jFOM:_sc6dysR8Fs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iLNhjM9jFOM:_sc6dysR8Fs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7468023247072638596
title: Instagram Launches 'Security Checkup' to Help Users Recover Hacked Accounts
uri: Instagram-Launches-Security-Checkup-to-Help-Users-Recover-Hacked-Acc
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7468023247072638596
content:
Instagram earlier this week introduced a new "Security Checkup" feature that aims to keep accounts safe and help users—whose accounts may have been compromised—to recover them.
In order to gain access to accounts, users will be prompted to perform a series of steps, which include checking recent login activity, reviewing profile information, and updating contact details such as phone numbers or <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SrSMJnd9H34:UmXFc4DsS4w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SrSMJnd9H34:UmXFc4DsS4w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SrSMJnd9H34:UmXFc4DsS4w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SrSMJnd9H34:UmXFc4DsS4w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SrSMJnd9H34:UmXFc4DsS4w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SrSMJnd9H34:UmXFc4DsS4w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SrSMJnd9H34:UmXFc4DsS4w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SrSMJnd9H34:UmXFc4DsS4w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4069844790646132417
title: China's New Law Requires Researchers to Report All Zero-Day Bugs to Government
uri: China-s-New-Law-Requires-Researchers-to-Report-All-Zero-Day-Bugs-to-Go
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4069844790646132417
content:
The Cyberspace Administration of China (CAC) has issued new stricter vulnerability disclosures regulations that mandate security researchers uncovering critical flaws in computer systems to mandatorily disclose them first-hand to the government authorities within two days of filing a report.
The "Regulations on the Management of Network Product Security Vulnerability" are expected to go into <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hDIiMFjmWqc:YmAvpkOEx4E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hDIiMFjmWqc:YmAvpkOEx4E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hDIiMFjmWqc:YmAvpkOEx4E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hDIiMFjmWqc:YmAvpkOEx4E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hDIiMFjmWqc:YmAvpkOEx4E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hDIiMFjmWqc:YmAvpkOEx4E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hDIiMFjmWqc:YmAvpkOEx4E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hDIiMFjmWqc:YmAvpkOEx4E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1591471731922249246
title: Researcher Uncovers Yet Another Unpatched Windows Printer Spooler Vulnerability
uri: Researcher-Uncovers-Yet-Another-Unpatched-Windows-Printer-Spooler-Vuln
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1591471731922249246
content:
Merely days after Microsoft sounded the alarm on an unpatched security vulnerability in the Windows Print Spooler service, possibly yet another zero-day flaw in the same component has come to light, making it the fourth printer-related shortcoming to be discovered in recent weeks.
"Microsoft Windows allows for non-admin users to be able to install printer drivers via Point and Print," CERT <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zgc63uS7Nu8:8ha-eVQ6Gws:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zgc63uS7Nu8:8ha-eVQ6Gws:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zgc63uS7Nu8:8ha-eVQ6Gws:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zgc63uS7Nu8:8ha-eVQ6Gws:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zgc63uS7Nu8:8ha-eVQ6Gws:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zgc63uS7Nu8:8ha-eVQ6Gws:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zgc63uS7Nu8:8ha-eVQ6Gws:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zgc63uS7Nu8:8ha-eVQ6Gws:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4509478851833674590
title: New Leak Reveals Abuse of Pegasus Spyware to Target Journalists Globally
uri: New-Leak-Reveals-Abuse-of-Pegasus-Spyware-to-Target-Journalists-Global
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4509478851833674590
content:
A sweeping probe into a data leak of more than 50,000 phone numbers has revealed an extensive misuse of Israeli company NSO Group's Pegasus "military-grade spyware" to facilitate human rights violations by surveilling heads of state, activists, journalists, and lawyers around the world.
Dubbed the "Pegasus Project," the investigation is a collaboration by more than 80 journalists from a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WCLNQvg-w9Y:yfCi8p3VWnA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WCLNQvg-w9Y:yfCi8p3VWnA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WCLNQvg-w9Y:yfCi8p3VWnA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WCLNQvg-w9Y:yfCi8p3VWnA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WCLNQvg-w9Y:yfCi8p3VWnA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WCLNQvg-w9Y:yfCi8p3VWnA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WCLNQvg-w9Y:yfCi8p3VWnA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WCLNQvg-w9Y:yfCi8p3VWnA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6602950666092926711
title: Turns Out That Low-Risk iOS Wi-Fi Naming Bug Can Hack iPhones Remotely
uri: Turns-Out-That-Low-Risk-iOS-Wi-Fi-Naming-Bug-Can-Hack-iPhones-Remotely
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6602950666092926711
content:
The Wi-Fi network name bug that was found to completely disable an iPhone's networking functionality had remote code execution capabilities and was silently fixed by Apple earlier this year, according to new research.
The denial-of-service vulnerability, which came to light last month, stemmed from the way iOS handled string formats associated with the SSID input, triggering a crash on any <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TBSEy5OiD9k:PZ9n0Z4FOl8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TBSEy5OiD9k:PZ9n0Z4FOl8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TBSEy5OiD9k:PZ9n0Z4FOl8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TBSEy5OiD9k:PZ9n0Z4FOl8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TBSEy5OiD9k:PZ9n0Z4FOl8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TBSEy5OiD9k:PZ9n0Z4FOl8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TBSEy5OiD9k:PZ9n0Z4FOl8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TBSEy5OiD9k:PZ9n0Z4FOl8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7359122813118685651
title: Five Critical Password Security Rules Your Employees Are Ignoring
uri: Five-Critical-Password-Security-Rules-Your-Employees-Are-Ignoring
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7359122813118685651
content:
According to Keeper Security's Workplace Password Malpractice Report, many remote workers aren't following best practices for password security.
Password security was a problem even before the advent of widespread remote work. So, what happened post-pandemic? Keeper Security's Workplace Password Malpractice Report sought to find out.
In February 2021, Keeper surveyed 1,000 employees in the U.S. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L013-YRnjLw:iFB6rpToDfo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L013-YRnjLw:iFB6rpToDfo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L013-YRnjLw:iFB6rpToDfo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L013-YRnjLw:iFB6rpToDfo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L013-YRnjLw:iFB6rpToDfo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L013-YRnjLw:iFB6rpToDfo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L013-YRnjLw:iFB6rpToDfo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L013-YRnjLw:iFB6rpToDfo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3600347948500681941
title: Researchers Warn of Linux Cryptojacking Attackers Operating from Romania
uri: Researchers-Warn-of-Linux-Cryptojacking-Attackers-Operating-from-Roman
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3600347948500681941
content:
A threat group likely based in Romania and active since at least 2020 has been behind an active cryptojacking campaign targeting Linux-based machines with a previously undocumented SSH brute-forcer written in Golang.
Dubbed "Diicot brute," the password cracking tool is alleged to be distributed via a software-as-a-service model, with each threat actor furnishing their own unique API keys to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m2WxVj3ppPY:lOxOXn2hDVo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m2WxVj3ppPY:lOxOXn2hDVo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m2WxVj3ppPY:lOxOXn2hDVo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m2WxVj3ppPY:lOxOXn2hDVo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m2WxVj3ppPY:lOxOXn2hDVo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m2WxVj3ppPY:lOxOXn2hDVo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m2WxVj3ppPY:lOxOXn2hDVo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m2WxVj3ppPY:lOxOXn2hDVo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3039196510423054412
title: US and Global Allies Accuse China of Massive Microsoft Exchange Attack
uri: US-and-Global-Allies-Accuse-China-of-Massive-Microsoft-Exchange-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3039196510423054412
content:
The U.S. government and its key allies, including the European Union, the U.K., and NATO, formally attributed the massive cyberattack against Microsoft Exchange email servers to state-sponsored hacking crews working affiliated with the People's Republic of China's Ministry of State Security (MSS).
In a statement issued by the White House on Monday, the administration said, "with a high degree of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zpzmQvEQWao:ORypBt-np68:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zpzmQvEQWao:ORypBt-np68:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zpzmQvEQWao:ORypBt-np68:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zpzmQvEQWao:ORypBt-np68:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zpzmQvEQWao:ORypBt-np68:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zpzmQvEQWao:ORypBt-np68:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zpzmQvEQWao:ORypBt-np68:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zpzmQvEQWao:ORypBt-np68:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6585720508825483044
title: This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection
uri: This-New-Malware-Hides-Itself-Among-Windows-Defender-Exclusions-to-Eva
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6585720508825483044
content:
Cybersecurity researchers on Tuesday lifted the lid on a previously undocumented malware strain dubbed "MosaicLoader" that singles out individuals searching for cracked software as part of a global campaign.
"The attackers behind MosaicLoader created a piece of malware that can deliver any payload on the system, making it potentially profitable as a delivery service," Bitdefender researchers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xoTHw83XeOg:CnkMsRExj_g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xoTHw83XeOg:CnkMsRExj_g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xoTHw83XeOg:CnkMsRExj_g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xoTHw83XeOg:CnkMsRExj_g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xoTHw83XeOg:CnkMsRExj_g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xoTHw83XeOg:CnkMsRExj_g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xoTHw83XeOg:CnkMsRExj_g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xoTHw83XeOg:CnkMsRExj_g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3367173600992530335
title: 16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers
uri: 16-Year-Old-Security-Bug-Affects-Millions-of-HP-Samsung-Xerox-Printe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3367173600992530335
content:
Details have emerged about a high severity security vulnerability affecting a software driver used in HP, Xerox, and Samsung printers that has remained undetected since 2005.
Tracked as CVE-2021-3438 (CVSS score: 8.8), the issue concerns a buffer overflow in a print driver installer package named "SSPORT.SYS" that can enable remote privilege and arbitrary code execution. Hundreds of millions of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0waAACXDS2I:8SYP2dmMej8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0waAACXDS2I:8SYP2dmMej8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0waAACXDS2I:8SYP2dmMej8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0waAACXDS2I:8SYP2dmMej8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0waAACXDS2I:8SYP2dmMej8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0waAACXDS2I:8SYP2dmMej8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0waAACXDS2I:8SYP2dmMej8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0waAACXDS2I:8SYP2dmMej8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-252438210938664155
title: New Windows and Linux Flaws Give Attackers Highest System Privileges
uri: New-Windows-and-Linux-Flaws-Give-Attackers-Highest-System-Privileges
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/252438210938664155
content:
Microsoft's Windows 10 and the upcoming Windows 11 versions have been found vulnerable to a new local privilege escalation vulnerability that permits users with low-level permissions access Windows system files, in turn, enabling them to unmask the operating system installation password and even decrypt private keys.
"Starting with Windows 10 build 1809, non-administrative users are granted <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8w-lkhOOs48:OdMhr7qR37A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8w-lkhOOs48:OdMhr7qR37A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8w-lkhOOs48:OdMhr7qR37A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8w-lkhOOs48:OdMhr7qR37A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8w-lkhOOs48:OdMhr7qR37A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8w-lkhOOs48:OdMhr7qR37A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8w-lkhOOs48:OdMhr7qR37A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8w-lkhOOs48:OdMhr7qR37A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6358935692994086259
title: Malicious NPM Package Caught Stealing Users' Saved Passwords From Browsers
uri: Malicious-NPM-Package-Caught-Stealing-Users-Saved-Passwords-From-Brow
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6358935692994086259
content:
A software package available from the official NPM repository has been revealed to be actually a front for a tool that's designed to steal saved passwords from the Chrome web browser.
The package in question, named "nodejs_net_server" and downloaded over 1,283 times since February 2019, was last updated seven months ago (version 1.1.2), with its corresponding repository leading to non-existent <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QyJiz3kF9n4:rgGi80Fmp-4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QyJiz3kF9n4:rgGi80Fmp-4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QyJiz3kF9n4:rgGi80Fmp-4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QyJiz3kF9n4:rgGi80Fmp-4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QyJiz3kF9n4:rgGi80Fmp-4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QyJiz3kF9n4:rgGi80Fmp-4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QyJiz3kF9n4:rgGi80Fmp-4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QyJiz3kF9n4:rgGi80Fmp-4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8055459006866530600
title: XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems
uri: XLoader-Windows-InfoStealer-Malware-Now-Upgraded-to-Attack-macOS-Syste
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8055459006866530600
content:
Cybersecurity researchers on Wednesday disclosed details of an evolving malware that has now been upgraded to steal sensitive information from Apple's macOS operating system.
The malware, dubbed "XLoader," is a successor to another well-known Windows-based info stealer called Formbook that's known to vacuum credentials from various web browsers, collect screenshots, log keystrokes, and download <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=crF48NxsWMo:f2FLrh095CE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=crF48NxsWMo:f2FLrh095CE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=crF48NxsWMo:f2FLrh095CE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=crF48NxsWMo:f2FLrh095CE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=crF48NxsWMo:f2FLrh095CE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=crF48NxsWMo:f2FLrh095CE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=crF48NxsWMo:f2FLrh095CE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=crF48NxsWMo:f2FLrh095CE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-49785641586777679
title: Several New Critical Flaws Affect CODESYS Industrial Automation Software
uri: Several-New-Critical-Flaws-Affect-CODESYS-Industrial-Automation-Softwa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/49785641586777679
content:
Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller (PLC) platform that could be remotely exploited to take control of a company's cloud operational technology (OT) infrastructure.
The flaws can be turned "into innovative attacks that could put threat actors in position to remotely <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnByrOj1RPU:gehgxnLErTo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnByrOj1RPU:gehgxnLErTo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnByrOj1RPU:gehgxnLErTo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BnByrOj1RPU:gehgxnLErTo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnByrOj1RPU:gehgxnLErTo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BnByrOj1RPU:gehgxnLErTo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BnByrOj1RPU:gehgxnLErTo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BnByrOj1RPU:gehgxnLErTo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-990915030546808446
title: [eBook] A Guide to Stress-Free Cybersecurity for Lean IT Security Teams
uri: eBook-A-Guide-to-Stress-Free-Cybersecurity-for-Lean-IT-Security-Team
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/990915030546808446
content:
Today’s cybersecurity landscape is enough to make any security team concerned. The rapid evolution and increased danger of attack tactics have put even the largest corporations and governments at heightened risk. If the most elite security teams can’t prevent these attacks from happening, what can lean security teams look forward to? 
Surprisingly, leaner teams have a much greater chance than <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SEP7cMf5Bfg:EK-HJNuSgyw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SEP7cMf5Bfg:EK-HJNuSgyw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SEP7cMf5Bfg:EK-HJNuSgyw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SEP7cMf5Bfg:EK-HJNuSgyw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SEP7cMf5Bfg:EK-HJNuSgyw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SEP7cMf5Bfg:EK-HJNuSgyw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SEP7cMf5Bfg:EK-HJNuSgyw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SEP7cMf5Bfg:EK-HJNuSgyw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7087988135652211406
title: Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam
uri: Another-Hacker-Arrested-for-2020-Twitter-Hack-and-Massive-Bitcoin-Scam
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7087988135652211406
content:
A U.K. citizen has been arrested in the Spanish town of Estepona over his alleged involvement in the July 2020 hack of Twitter, resulting in the compromise of 130 high-profile accounts.
Joseph O'Connor, 22, has been charged with intentionally accessing a computer without authorization and obtaining information from a protected computer, as well as for making extortive communications. The Spanish<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=daC7Pxf6UMA:tzRuqCBysWY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=daC7Pxf6UMA:tzRuqCBysWY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=daC7Pxf6UMA:tzRuqCBysWY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=daC7Pxf6UMA:tzRuqCBysWY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=daC7Pxf6UMA:tzRuqCBysWY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=daC7Pxf6UMA:tzRuqCBysWY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=daC7Pxf6UMA:tzRuqCBysWY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=daC7Pxf6UMA:tzRuqCBysWY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-372322768027249497
title: Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws
uri: Oracle-Warns-of-Critical-Remotely-Exploitable-Weblogic-Server-Flaws
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/372322768027249497
content:
Oracle on Tuesday released its quarterly Critical Patch Update for July 2021 with 342 fixes spanning across multiple products, some of which could be exploited by a remote attacker to take control of an affected system.
Chief among them is CVE-2019-2729, a critical deserialization vulnerability via XMLDecoder in Oracle WebLogic Server Web Services that's remotely exploitable without <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zd_2qghHdqs:FDjoCD1iP70:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zd_2qghHdqs:FDjoCD1iP70:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zd_2qghHdqs:FDjoCD1iP70:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zd_2qghHdqs:FDjoCD1iP70:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zd_2qghHdqs:FDjoCD1iP70:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zd_2qghHdqs:FDjoCD1iP70:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zd_2qghHdqs:FDjoCD1iP70:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zd_2qghHdqs:FDjoCD1iP70:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2187502297674416262
title: APT Hackers Distributed Android Trojan via Syrian e-Government Portal
uri: APT-Hackers-Distributed-Android-Trojan-via-Syrian-e-Government-Portal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2187502297674416262
content:
An advanced persistent threat (APT) actor has been tracked in a new campaign deploying Android malware via the Syrian e-Government Web Portal, indicating an upgraded arsenal designed to compromise victims.
"To the best of our knowledge, this is the first time that the group has been publicly observed using malicious Android applications as part of its attacks," Trend Micro researchers Zhengyu <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gLX9xr2xUiY:J4QV5_Ot6WE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gLX9xr2xUiY:J4QV5_Ot6WE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gLX9xr2xUiY:J4QV5_Ot6WE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gLX9xr2xUiY:J4QV5_Ot6WE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gLX9xr2xUiY:J4QV5_Ot6WE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gLX9xr2xUiY:J4QV5_Ot6WE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gLX9xr2xUiY:J4QV5_Ot6WE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gLX9xr2xUiY:J4QV5_Ot6WE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1366712893411314386
title: Reduce End-User Password Change Frustrations
uri: Reduce-End-User-Password-Change-Frustrations
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1366712893411314386
content:
Organizations today must give attention to their cybersecurity posture, including policies, procedures, and technical solutions for cybersecurity challenges. 
This often results in a greater burden on the IT service desk staff as end-users encounter issues related to security software, policies, and password restrictions. 
One of the most common areas where security may cause challenges for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rcOYj6ymYvY:mW4ZNp6gUmw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rcOYj6ymYvY:mW4ZNp6gUmw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rcOYj6ymYvY:mW4ZNp6gUmw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rcOYj6ymYvY:mW4ZNp6gUmw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rcOYj6ymYvY:mW4ZNp6gUmw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rcOYj6ymYvY:mW4ZNp6gUmw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rcOYj6ymYvY:mW4ZNp6gUmw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rcOYj6ymYvY:mW4ZNp6gUmw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1394405956789633596
title: Kaseya Gets Universal Decryptor to Help REvil Ransomware Victims
uri: Kaseya-Gets-Universal-Decryptor-to-Help-REvil-Ransomware-Victims
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1394405956789633596
content:
Nearly three weeks after Florida-based software vendor Kaseya was hit by a widespread supply-chain ransomware attack, the company on Thursday said it obtained a universal decryptor to unlock systems and help customers recover their data.
&lt;!--adsense--&gt;
"On July 21, Kaseya obtained a decryptor for victims of the REvil ransomware attack, and we're working to remediate customers impacted by the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NF6JpG3KTE:3ecqRMHCob8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NF6JpG3KTE:3ecqRMHCob8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NF6JpG3KTE:3ecqRMHCob8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9NF6JpG3KTE:3ecqRMHCob8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NF6JpG3KTE:3ecqRMHCob8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9NF6JpG3KTE:3ecqRMHCob8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NF6JpG3KTE:3ecqRMHCob8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9NF6JpG3KTE:3ecqRMHCob8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4921687608345281397
title: Dutch Police Arrest Two Hackers Tied to "Fraud Family" Cybercrime Ring
uri: Dutch-Police-Arrest-Two-Hackers-Tied-to-Fraud-Family-Cybercrime-Ring
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4921687608345281397
content:
Law enforcement authorities in the Netherlands have arrested two alleged individuals belonging to a Dutch cybercriminal collective who were involved in developing, selling, and renting sophisticated phishing frameworks to other threat actors in what's known as a "Fraud-as-a-Service" operation.
The apprehended suspects, a 24-year-old software engineer, and a 15-year-old boy, are said to have been<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W2-VCEVqpzU:rH9QoTZWoKQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W2-VCEVqpzU:rH9QoTZWoKQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W2-VCEVqpzU:rH9QoTZWoKQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W2-VCEVqpzU:rH9QoTZWoKQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W2-VCEVqpzU:rH9QoTZWoKQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W2-VCEVqpzU:rH9QoTZWoKQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W2-VCEVqpzU:rH9QoTZWoKQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W2-VCEVqpzU:rH9QoTZWoKQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2603044132821101418
title: Nasty macOS Malware XCSSET Now Targets Google Chrome, Telegram Software
uri: Nasty-macOS-Malware-XCSSET-Now-Targets-Google-Chrome-Telegram-Softwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2603044132821101418
content:
A malware known for targeting macOS operating system has been updated once again to add more features to its toolset that allows it to amass and exfiltrate sensitive data stored in a variety of apps, including apps such as Google Chrome and Telegram, as part of further "refinements in its tactics."
XCSSET was uncovered in August 2020, when it was found targeting Mac developers using an unusual <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JpdJMObI3dY:gmr0LV87-Eo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JpdJMObI3dY:gmr0LV87-Eo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JpdJMObI3dY:gmr0LV87-Eo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JpdJMObI3dY:gmr0LV87-Eo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JpdJMObI3dY:gmr0LV87-Eo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JpdJMObI3dY:gmr0LV87-Eo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JpdJMObI3dY:gmr0LV87-Eo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JpdJMObI3dY:gmr0LV87-Eo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5805332479991677138
title: Wake up! Identify API Vulnerabilities Proactively, From Code Back to Production
uri: Wake-up-Identify-API-Vulnerabilities-Proactively-From-Code-Back-to-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5805332479991677138
content:
After more than 20 years in the making, now it's official: APIs are everywhere. In a 2021 survey, 73% of enterprises reported that they already publish more than 50 APIs, and this number is constantly growing.
APIs have crucial roles to play in virtually every industry today, and their importance is increasing steadily, as they move to the forefront of business strategies. This comes as no <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GASj_xiB8DA:u0BtAMLVqSU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GASj_xiB8DA:u0BtAMLVqSU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GASj_xiB8DA:u0BtAMLVqSU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GASj_xiB8DA:u0BtAMLVqSU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GASj_xiB8DA:u0BtAMLVqSU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GASj_xiB8DA:u0BtAMLVqSU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GASj_xiB8DA:u0BtAMLVqSU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GASj_xiB8DA:u0BtAMLVqSU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-199794438227508485
title: New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains
uri: New-PetitPotam-NTLM-Relay-Attack-Lets-Hackers-Take-Over-Windows-Domain
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/199794438227508485
content:
A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain.
The issue, dubbed "PetitPotam," was discovered by security researcher Gilles Lionel, who shared <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPJDrP3D6Hw:6nS08XCBFaI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPJDrP3D6Hw:6nS08XCBFaI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPJDrP3D6Hw:6nS08XCBFaI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WPJDrP3D6Hw:6nS08XCBFaI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPJDrP3D6Hw:6nS08XCBFaI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WPJDrP3D6Hw:6nS08XCBFaI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WPJDrP3D6Hw:6nS08XCBFaI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WPJDrP3D6Hw:6nS08XCBFaI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-653804690554608280
title: Microsoft Warns of LemonDuck Malware Targeting Windows and Linux Systems
uri: Microsoft-Warns-of-LemonDuck-Malware-Targeting-Windows-and-Linux-Syste
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/653804690554608280
content:
An infamous cross-platform crypto-mining malware has continued to refine and improve upon its techniques to strike both Windows and Linux operating systems by setting its sights on older vulnerabilities, while simultaneously latching on to a variety of spreading mechanisms to maximize the effectiveness of its campaigns.
"LemonDuck, an actively updated and robust malware that's primarily known <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbLN9-5JQ3k:liQBr-or-kc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbLN9-5JQ3k:liQBr-or-kc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbLN9-5JQ3k:liQBr-or-kc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UbLN9-5JQ3k:liQBr-or-kc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbLN9-5JQ3k:liQBr-or-kc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UbLN9-5JQ3k:liQBr-or-kc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UbLN9-5JQ3k:liQBr-or-kc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UbLN9-5JQ3k:liQBr-or-kc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-176993720997582284
title: BIMI: A Visual Take on Email Authentication and Security
uri: BIMI-A-Visual-Take-on-Email-Authentication-and-Security
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/176993720997582284
content:
There is a saying that goes something like, "Do not judge a book by its cover." Yet, we all know we can not help but do just that - especially when it comes to online security.
Logos play a significant role in whether or not we open an email and how we assess the importance of each message. Brand Indicators for Message Identification, or BIMI, aims to make it easier for us to quickly identify <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ROgjIHmdUVY:eIXjguDqyX0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ROgjIHmdUVY:eIXjguDqyX0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ROgjIHmdUVY:eIXjguDqyX0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ROgjIHmdUVY:eIXjguDqyX0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ROgjIHmdUVY:eIXjguDqyX0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ROgjIHmdUVY:eIXjguDqyX0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ROgjIHmdUVY:eIXjguDqyX0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ROgjIHmdUVY:eIXjguDqyX0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3374514412009081280
title: How to Mitigate Microsoft Windows 10, 11 SeriousSAM Vulnerability
uri: How-to-Mitigate-Microsoft-Windows-10-11-SeriousSAM-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3374514412009081280
content:
Microsoft Windows 10 and Windows 11 users are at risk of a new unpatched vulnerability that was recently disclosed publicly.
As we reported last week, the vulnerability — SeriousSAM — allows attackers with low-level permissions to access Windows system files to perform a Pass-the-Hash (and potentially Silver Ticket) attack. 
Attackers can exploit this vulnerability to obtain hashed passwords <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HfUWu591DT8:3xfKSf9WRW8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HfUWu591DT8:3xfKSf9WRW8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HfUWu591DT8:3xfKSf9WRW8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HfUWu591DT8:3xfKSf9WRW8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HfUWu591DT8:3xfKSf9WRW8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HfUWu591DT8:3xfKSf9WRW8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HfUWu591DT8:3xfKSf9WRW8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HfUWu591DT8:3xfKSf9WRW8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1730278437121267688
title: Apple Releases Urgent 0-Day Bug Patch for Mac, iPhone and iPad Devices
uri: Apple-Releases-Urgent-0-Day-Bug-Patch-for-Mac-iPhone-and-iPad-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1730278437121267688
content:
Apple on Monday rolled out an urgent security update for iOS, iPadOS, and macOS to address a zero-day flaw that it said may have been actively exploited, making it the thirteenth such vulnerability Apple has patched since the start of this year.
The updates, which arrive less than a week after the company released iOS 14.7, iPadOS 14.7, and macOS Big Sur 11.5 to the public, fixes a memory <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhZO1FaH6C8:9WRHJuEgsxA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhZO1FaH6C8:9WRHJuEgsxA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhZO1FaH6C8:9WRHJuEgsxA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rhZO1FaH6C8:9WRHJuEgsxA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhZO1FaH6C8:9WRHJuEgsxA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rhZO1FaH6C8:9WRHJuEgsxA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhZO1FaH6C8:9WRHJuEgsxA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rhZO1FaH6C8:9WRHJuEgsxA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2546060916758262436
title: Several Bugs Found in 3 Open-Source Software Used by Several Businesses
uri: Several-Bugs-Found-in-3-Open-Source-Software-Used-by-Several-Businesse
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2546060916758262436
content:
Cybersecurity researchers on Tuesday disclosed nine security vulnerabilities affecting three open-source projects — EspoCRM, Pimcore, and Akaunting — that are widely used by several small to medium businesses and, if successfully exploited, could provide a pathway to more sophisticated attacks.
All the security flaws in question, which impact EspoCRM v6.1.6, Pimcore Customer Data Framework <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ljS0Hk4aAu4:opipSNdCR44:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ljS0Hk4aAu4:opipSNdCR44:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ljS0Hk4aAu4:opipSNdCR44:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ljS0Hk4aAu4:opipSNdCR44:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ljS0Hk4aAu4:opipSNdCR44:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ljS0Hk4aAu4:opipSNdCR44:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ljS0Hk4aAu4:opipSNdCR44:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ljS0Hk4aAu4:opipSNdCR44:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3599785759721813559
title: Hackers Turning to 'Exotic' Programming Languages for Malware Development
uri: Hackers-Turning-to-Exotic-Programming-Languages-for-Malware-Developm
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3599785759721813559
content:
Threat actors are increasingly shifting to "exotic" programming languages such as Go, Rust, Nim, and Dlang that can better circumvent conventional security protections, evade analysis, and hamper reverse engineering efforts.
"Malware authors are known for their ability to adapt and modify their skills and behaviors to take advantage of newer technologies," said Eric Milam, Vice President of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9S1-Bg57HWQ:o-HWb7XRSxA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9S1-Bg57HWQ:o-HWb7XRSxA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9S1-Bg57HWQ:o-HWb7XRSxA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9S1-Bg57HWQ:o-HWb7XRSxA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9S1-Bg57HWQ:o-HWb7XRSxA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9S1-Bg57HWQ:o-HWb7XRSxA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9S1-Bg57HWQ:o-HWb7XRSxA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9S1-Bg57HWQ:o-HWb7XRSxA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1473572090125619302
title: New Bug Could Let Attackers Hijack Zimbra Server by Sending Malicious Email
uri: New-Bug-Could-Let-Attackers-Hijack-Zimbra-Server-by-Sending-Malicious
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1473572090125619302
content:
Cybersecurity researchers have discovered multiple security vulnerabilities in Zimbra email collaboration software that could be potentially exploited to compromise email accounts by sending a malicious message and even achieve a full takeover of the mail server when hosted on a cloud infrastructure.
The flaws — tracked as CVE-2021-35208 and CVE-2021-35208 — were discovered and reported in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_T-2HPMA8:DD4GoKJWIfg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_T-2HPMA8:DD4GoKJWIfg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_T-2HPMA8:DD4GoKJWIfg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1m_T-2HPMA8:DD4GoKJWIfg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_T-2HPMA8:DD4GoKJWIfg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1m_T-2HPMA8:DD4GoKJWIfg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1m_T-2HPMA8:DD4GoKJWIfg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1m_T-2HPMA8:DD4GoKJWIfg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-536791793340123817
title: Hackers Posed as Aerobics Instructors for Years to Target Aerospace Employees
uri: Hackers-Posed-as-Aerobics-Instructors-for-Years-to-Target-Aerospace-Em
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/536791793340123817
content:
An Iranian cyberespionage group masqueraded as an aerobics instructor on Facebook in an attempt to infect the machine of an employee of an aerospace defense contractor with malware as part of years-long social engineering and targeted malware campaign.
Enterprise security firm Proofpoint attributed the covert operation to a state-aligned threat actor it tracks as TA456, and by the wider <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Nda9kvOoX4:E6Ln6BPlaCM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Nda9kvOoX4:E6Ln6BPlaCM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Nda9kvOoX4:E6Ln6BPlaCM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Nda9kvOoX4:E6Ln6BPlaCM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Nda9kvOoX4:E6Ln6BPlaCM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Nda9kvOoX4:E6Ln6BPlaCM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Nda9kvOoX4:E6Ln6BPlaCM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Nda9kvOoX4:E6Ln6BPlaCM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9002826158048808697
title: Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers
uri: Chinese-Hackers-Implant-PlugX-Variant-on-Compromised-MS-Exchange-Serve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9002826158048808697
content:
A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan (RAT) on compromised systems.
Attributing the intrusions to a threat actor named PKPLUG (aka Mustang Panda and HoneyMyte), Palo Alto Networks' Unit 42 threat intelligence team<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCubZykCI5I:HSK0illIxV0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCubZykCI5I:HSK0illIxV0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCubZykCI5I:HSK0illIxV0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QCubZykCI5I:HSK0illIxV0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCubZykCI5I:HSK0illIxV0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QCubZykCI5I:HSK0illIxV0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCubZykCI5I:HSK0illIxV0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QCubZykCI5I:HSK0illIxV0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8856688555965779115
title: UBEL is the New Oscorp — Android Credential Stealing Malware Active in the Wild
uri: UBEL-is-the-New-Oscorp-Android-Credential-Stealing-Malware-Active
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8856688555965779115
content:
An Android malware that was observed abusing accessibility services in the device to hijack user credentials from European banking applications has morphed into an entirely new botnet as part of a renewed campaign that began in May 2021.
Italy's CERT-AGID, in late January, disclosed details about Oscorp, a mobile malware developed to attack multiple financial targets with the goal of stealing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EltJMRUOUGE:oGNXN1PEyDA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EltJMRUOUGE:oGNXN1PEyDA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EltJMRUOUGE:oGNXN1PEyDA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EltJMRUOUGE:oGNXN1PEyDA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EltJMRUOUGE:oGNXN1PEyDA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EltJMRUOUGE:oGNXN1PEyDA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EltJMRUOUGE:oGNXN1PEyDA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EltJMRUOUGE:oGNXN1PEyDA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6206990546392568437
title: New Android Malware Uses VNC to Spy and Steal Passwords from Victims
uri: New-Android-Malware-Uses-VNC-to-Spy-and-Steal-Passwords-from-Victims
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6206990546392568437
content:
A previously undocumented Android-based remote access trojan (RAT) has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud.
Dubbed "Vultur" due to its use of Virtual Network Computing (VNC)'s remote screen-sharing technology to gain full visibility on targeted users, the mobile malware was <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ncp9E0wkAaw:hbxuHTSqZkk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ncp9E0wkAaw:hbxuHTSqZkk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ncp9E0wkAaw:hbxuHTSqZkk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ncp9E0wkAaw:hbxuHTSqZkk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ncp9E0wkAaw:hbxuHTSqZkk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ncp9E0wkAaw:hbxuHTSqZkk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ncp9E0wkAaw:hbxuHTSqZkk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ncp9E0wkAaw:hbxuHTSqZkk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4294060126303470963
title: Top 30 Critical Security Vulnerabilities Most Exploited by Hackers
uri: Top-30-Critical-Security-Vulnerabilities-Most-Exploited-by-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4294060126303470963
content:
Intelligence agencies in Australia, the U.K., and the U.S. issued a joint advisory on Wednesday detailing the most exploited vulnerabilities in 2020 and 2021, once again demonstrating how threat actors are able to weaponize publicly disclosed flaws to their advantage swiftly.
"Cyber actors continue to exploit publicly known—and often dated—software vulnerabilities against broad target sets, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4bqby1RlKSQ:L__BGsC_Mqo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4bqby1RlKSQ:L__BGsC_Mqo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4bqby1RlKSQ:L__BGsC_Mqo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4bqby1RlKSQ:L__BGsC_Mqo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4bqby1RlKSQ:L__BGsC_Mqo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4bqby1RlKSQ:L__BGsC_Mqo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4bqby1RlKSQ:L__BGsC_Mqo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4bqby1RlKSQ:L__BGsC_Mqo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-100542673070350593
title: Best Practices to Thwart Business Email Compromise (BEC) Attacks
uri: Best-Practices-to-Thwart-Business-Email-Compromise-(BEC)-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/100542673070350593
content:
Business email compromise (BEC) refers to all types of email attacks that do not have payloads. Although there are numerous types, there are essentially two main mechanisms through which attackers penetrate organizations utilizing BEC techniques, spoofing and account take-over attacks.
In a recent study, 71% of organizations acknowledged they had seen a business email compromise (BEC) attack <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qibFmXAvWbU:BJCIsx8IOB8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qibFmXAvWbU:BJCIsx8IOB8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qibFmXAvWbU:BJCIsx8IOB8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qibFmXAvWbU:BJCIsx8IOB8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qibFmXAvWbU:BJCIsx8IOB8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qibFmXAvWbU:BJCIsx8IOB8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qibFmXAvWbU:BJCIsx8IOB8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qibFmXAvWbU:BJCIsx8IOB8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2818398601939327849
title: New Ransomware Gangs — Haron and BlackMatter — Emerge on Cybercrime Forums
uri: New-Ransomware-Gangs-Haron-and-BlackMatter-Emerge-on-Cybercrim
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2818398601939327849
content:
Two new ransomware-as-service (RaaS) programs have appeared on the threat radar this month, with one group professing to be a successor to DarkSide and REvil, the two infamous ransomware syndicates that went off the grid following major attacks on Colonial Pipeline and Kaseya over the past few months.
"The project has incorporated in itself the best features of DarkSide, REvil, and LockBit," the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94ZIBwf3J0I:H7Z5t5iquVA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94ZIBwf3J0I:H7Z5t5iquVA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94ZIBwf3J0I:H7Z5t5iquVA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=94ZIBwf3J0I:H7Z5t5iquVA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94ZIBwf3J0I:H7Z5t5iquVA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=94ZIBwf3J0I:H7Z5t5iquVA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94ZIBwf3J0I:H7Z5t5iquVA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=94ZIBwf3J0I:H7Z5t5iquVA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1113018964659265857
title: Hackers Exploit Microsoft Browser Bug to Deploy VBA Malware on Targeted PCs
uri: Hackers-Exploit-Microsoft-Browser-Bug-to-Deploy-VBA-Malware-on-Targete
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1113018964659265857
content:
An unidentified threat actor has been exploiting a now-patched zero-day flaw in Internet Explorer browser to deliver a fully-featured VBA-based remote access trojan (RAT) capable of accessing files stored in compromised Windows systems, and downloading and executing malicious payloads as part of an "unusual" campaign.
The backdoor is distributed via a decoy document named "Manifest.docx" that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8xD-cnNeWM:AbM2ldLhePQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8xD-cnNeWM:AbM2ldLhePQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8xD-cnNeWM:AbM2ldLhePQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z8xD-cnNeWM:AbM2ldLhePQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8xD-cnNeWM:AbM2ldLhePQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z8xD-cnNeWM:AbM2ldLhePQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Z8xD-cnNeWM:AbM2ldLhePQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Z8xD-cnNeWM:AbM2ldLhePQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-403532344358896940
title: Phony Call Centers Tricking Users Into Installing Ransomware and Data-Stealers
uri: Phony-Call-Centers-Tricking-Users-Into-Installing-Ransomware-and-Data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/403532344358896940
content:
An ongoing malicious campaign that employs phony call centers has been found to trick victims into downloading malware capable of data exfiltration as well as deploying ransomware on infected systems.
The attacks — dubbed "BazaCall" — eschew traditional social engineering techniques that rely on rogue URLs and malware-laced documents in favor of a vishing-like method wherein targeted users are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jww8Fnn5Ppc:LtptSPmkRFo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jww8Fnn5Ppc:LtptSPmkRFo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jww8Fnn5Ppc:LtptSPmkRFo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jww8Fnn5Ppc:LtptSPmkRFo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jww8Fnn5Ppc:LtptSPmkRFo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jww8Fnn5Ppc:LtptSPmkRFo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jww8Fnn5Ppc:LtptSPmkRFo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jww8Fnn5Ppc:LtptSPmkRFo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1122759655443128562
title: A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System
uri: A-New-Wiper-Malware-Was-Behind-Recent-Cyberattack-On-Iranian-Train-Sys
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1122759655443128562
content:
A cyber attack that derailed websites of Iran's transport ministry and its national railway system earlier this month, causing widespread disruptions in train services, was the result of a never-before-seen reusable wiper malware called "Meteor."
The campaign — dubbed "MeteorExpress" — has not been linked to any previously identified threat group or to additional attacks, making it the first <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xn_-EVo5RdA:2w5zUrOMbtI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xn_-EVo5RdA:2w5zUrOMbtI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xn_-EVo5RdA:2w5zUrOMbtI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Xn_-EVo5RdA:2w5zUrOMbtI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xn_-EVo5RdA:2w5zUrOMbtI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Xn_-EVo5RdA:2w5zUrOMbtI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Xn_-EVo5RdA:2w5zUrOMbtI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Xn_-EVo5RdA:2w5zUrOMbtI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1604073651116725861
title: Several Malicious Typosquatted Python Libraries Found On PyPI Repository
uri: Several-Malicious-Typosquatted-Python-Libraries-Found-On-PyPI-Reposito
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1604073651116725861
content:
As many as eight Python packages that were downloaded more than 30,000 times have been removed from the PyPI portal for containing malicious code, once again highlighting how software package repositories are evolving into a popular target for supply chain attacks.
"Lack of moderation and automated security controls in public software repositories allow even inexperienced attackers to use them <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49zOaOj0glw:NEHZyBIQEEg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49zOaOj0glw:NEHZyBIQEEg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49zOaOj0glw:NEHZyBIQEEg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49zOaOj0glw:NEHZyBIQEEg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49zOaOj0glw:NEHZyBIQEEg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49zOaOj0glw:NEHZyBIQEEg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49zOaOj0glw:NEHZyBIQEEg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49zOaOj0glw:NEHZyBIQEEg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7037418503697144130
title: Experts Uncover Several C&C Servers Linked to WellMess Malware
uri: Experts-Uncover-Several-C-C-Servers-Linked-to-WellMess-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7037418503697144130
content:
Cybersecurity researchers on Friday unmasked new command-and-control (C2) infrastructure belonging to the Russian threat actor tracked as APT29, aka Cozy Bear, that has been spotted actively serving WellMess malware as part of an ongoing attack campaign.
More than 30 C2 servers operated by the Russian foreign intelligence have been uncovered, Microsoft-owned cybersecurity subsidiary RiskIQ said <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGQmE6b-OF4:zFRIjrnIC6k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGQmE6b-OF4:zFRIjrnIC6k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGQmE6b-OF4:zFRIjrnIC6k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OGQmE6b-OF4:zFRIjrnIC6k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGQmE6b-OF4:zFRIjrnIC6k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OGQmE6b-OF4:zFRIjrnIC6k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGQmE6b-OF4:zFRIjrnIC6k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OGQmE6b-OF4:zFRIjrnIC6k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2662233367091488402
title: PyPI Python Package Repository Patches Critical Supply Chain Flaw
uri: PyPI-Python-Package-Repository-Patches-Critical-Supply-Chain-Flaw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2662233367091488402
content:
The maintainers of Python Package Index (PyPI) last week issued fixes for three vulnerabilities, one among which could be abused to achieve arbitrary code execution and take full control of the official third-party software repository.
The security weaknesses were discovered and reported by Japanese security researcher RyotaK, who in the past has disclosed critical vulnerabilities in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xPmhYci7K18:UEluWVla-KM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xPmhYci7K18:UEluWVla-KM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xPmhYci7K18:UEluWVla-KM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xPmhYci7K18:UEluWVla-KM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xPmhYci7K18:UEluWVla-KM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xPmhYci7K18:UEluWVla-KM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xPmhYci7K18:UEluWVla-KM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xPmhYci7K18:UEluWVla-KM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5281030207381232789
title: Solarmarker InfoStealer Malware Once Again Making its Way Into the Wild
uri: Solarmarker-InfoStealer-Malware-Once-Again-Making-its-Way-Into-the-Wil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5281030207381232789
content:
Healthcare and education sectors are the frequent targets of a new surge in credential harvesting activity from what's a "highly modular" .NET-based information stealer and keylogger, charting the course for the threat actor's continued evolution while simultaneously remaining under the radar.
Dubbed "Solarmarker," the malware campaign is believed to be active since September 2020, with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kwrsdvGD34A:HtXN0DniCAM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kwrsdvGD34A:HtXN0DniCAM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kwrsdvGD34A:HtXN0DniCAM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kwrsdvGD34A:HtXN0DniCAM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kwrsdvGD34A:HtXN0DniCAM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kwrsdvGD34A:HtXN0DniCAM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kwrsdvGD34A:HtXN0DniCAM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kwrsdvGD34A:HtXN0DniCAM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1341718675677941803
title: PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.
uri: PwnedPiper-PTS-Security-Flaws-Threaten-80-of-Hospitals-in-the-U-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1341718675677941803
content:
Cybersecurity researchers on Monday disclosed a set of nine vulnerabilities known as "PwnedPiper" that left a widely-used pneumatic tube system (PTS) vulnerable to critical attacks, including a possibility of complete takeover.
The security weaknesses, disclosed by American cybersecurity firm Armis, impact the Translogic PTS system by Swisslog Healthcare, which is installed in about 80% of all <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5OlvMGChoW4:4tKnQJdBx7s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5OlvMGChoW4:4tKnQJdBx7s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5OlvMGChoW4:4tKnQJdBx7s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5OlvMGChoW4:4tKnQJdBx7s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5OlvMGChoW4:4tKnQJdBx7s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5OlvMGChoW4:4tKnQJdBx7s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5OlvMGChoW4:4tKnQJdBx7s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5OlvMGChoW4:4tKnQJdBx7s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3184105478277705428
title: New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits
uri: New-APT-Hacking-Group-Targets-Microsoft-IIS-Servers-with-ASP-NET-Explo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3184105478277705428
content:
A new highly capable and persistent threat actor has been targeting major high-profile public and private entities in the U.S. as part of a series of targeted cyber intrusion attacks by exploiting internet-facing Microsoft Internet Information Services (IIS) servers to infiltrate their networks.
Israeli cybersecurity firm Sygnia, which identified the campaign, is tracking the advanced, stealthy <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ESsa1FdAlIU:JZxwc6WC7bk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ESsa1FdAlIU:JZxwc6WC7bk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ESsa1FdAlIU:JZxwc6WC7bk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ESsa1FdAlIU:JZxwc6WC7bk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ESsa1FdAlIU:JZxwc6WC7bk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ESsa1FdAlIU:JZxwc6WC7bk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ESsa1FdAlIU:JZxwc6WC7bk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ESsa1FdAlIU:JZxwc6WC7bk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7472863946256738696
title: Chinese Hackers Target Major Southeast Asian Telecom Companies
uri: Chinese-Hackers-Target-Major-Southeast-Asian-Telecom-Companies
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7472863946256738696
content:
Three distinct clusters of malicious activities operating on behalf of Chinese state interests have staged a series of attacks to target networks belonging to at least five major telecommunications companies located in Southeast Asian countries since 2017.
"The goal of the attackers behind these intrusions was to gain and maintain continuous access to telecommunication providers and to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hlWcTvbAJ5Y:7o-0Vnsm-nY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hlWcTvbAJ5Y:7o-0Vnsm-nY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hlWcTvbAJ5Y:7o-0Vnsm-nY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hlWcTvbAJ5Y:7o-0Vnsm-nY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hlWcTvbAJ5Y:7o-0Vnsm-nY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hlWcTvbAJ5Y:7o-0Vnsm-nY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hlWcTvbAJ5Y:7o-0Vnsm-nY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hlWcTvbAJ5Y:7o-0Vnsm-nY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8653227838850183522
title: Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices
uri: Critical-Flaws-Affect-Embedded-TCP-IP-Stack-Widely-Used-in-Industrial
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8653227838850183522
content:
Cybersecurity researchers on Wednesday disclosed 14 vulnerabilities affecting a commonly-used TCP/IP stack used in millions of Operational Technology (OT) devices manufactured by no fewer than 200 vendors and deployed in manufacturing plants, power generation, water treatment, and critical infrastructure sectors.
The shortcomings, collectively dubbed "INFRA:HALT," target NicheStack, potentially <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-sdlozcW6D8:FydMU2hb09Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-sdlozcW6D8:FydMU2hb09Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-sdlozcW6D8:FydMU2hb09Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-sdlozcW6D8:FydMU2hb09Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-sdlozcW6D8:FydMU2hb09Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-sdlozcW6D8:FydMU2hb09Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-sdlozcW6D8:FydMU2hb09Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-sdlozcW6D8:FydMU2hb09Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6908115932511126492
title: New Chinese Spyware Being Used in Widespread Cyber Espionage Attacks
uri: New-Chinese-Spyware-Being-Used-in-Widespread-Cyber-Espionage-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6908115932511126492
content:
A threat actor presumed to be of Chinese origin has been linked to a series of 10 attacks targeting Mongolia, Russia, Belarus, Canada, and the U.S. from January to July 2021 that involve the deployment of a remote access trojan (RAT) on infected systems, according to new research.
The intrusions have been attributed to an advanced persistent threat named APT31 (FireEye), which is tracked by the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SfZ4rX3mo-s:at7BOeMnXJw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SfZ4rX3mo-s:at7BOeMnXJw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SfZ4rX3mo-s:at7BOeMnXJw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SfZ4rX3mo-s:at7BOeMnXJw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SfZ4rX3mo-s:at7BOeMnXJw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SfZ4rX3mo-s:at7BOeMnXJw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SfZ4rX3mo-s:at7BOeMnXJw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SfZ4rX3mo-s:at7BOeMnXJw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2920808955866128453
title: Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus
uri: Russian-Federal-Agencies-Were-Attacked-With-Chinese-Webdav-O-Virus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2920808955866128453
content:
An amalgam of multiple state-sponsored threat groups from China may have been behind a string of targeted attacks against Russian federal executive authorities in 2020.
The latest research, published by Singapore-headquartered company Group-IB, delves into a piece of computer virus called "Webdav-O" that was detected in the intrusions, with the cybersecurity firm observing similarities between <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c1i23SpnOC8:0UohyA82tpA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c1i23SpnOC8:0UohyA82tpA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c1i23SpnOC8:0UohyA82tpA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c1i23SpnOC8:0UohyA82tpA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c1i23SpnOC8:0UohyA82tpA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c1i23SpnOC8:0UohyA82tpA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c1i23SpnOC8:0UohyA82tpA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c1i23SpnOC8:0UohyA82tpA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6649574131137472405
title: Several Malware Families Targeting IIS Web Servers With Malicious Modules
uri: Several-Malware-Families-Targeting-IIS-Web-Servers-With-Malicious-Modu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6649574131137472405
content:
A systematic analysis of attacks against Microsoft's Internet Information Services (IIS) servers has revealed as many as 14 malware families, 10 of them newly documented, indicating that the Windows-based web server software continues to be a hotbed for natively developed malware for close to eight years.
The findings were presented today by ESET malware researcher Zuzana Hromcova at the Black <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ou5UQz4wbvY:0ThyNmQOQ1I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ou5UQz4wbvY:0ThyNmQOQ1I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ou5UQz4wbvY:0ThyNmQOQ1I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ou5UQz4wbvY:0ThyNmQOQ1I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ou5UQz4wbvY:0ThyNmQOQ1I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ou5UQz4wbvY:0ThyNmQOQ1I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ou5UQz4wbvY:0ThyNmQOQ1I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ou5UQz4wbvY:0ThyNmQOQ1I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-333830528116437679
title: Cisco Issues Critical Security Patches to Fix Small Business VPN Router Bugs
uri: Cisco-Issues-Critical-Security-Patches-to-Fix-Small-Business-VPN-Route
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/333830528116437679
content:
Networking equipment major Cisco has rolled out patches to address critical vulnerabilities impacting its Small Business VPN routers that could be abused by a remote attacker to execute arbitrary code and even cause a denial-of-service (DoS) condition.
The issues, tracked as CVE-2021-1609 (CVSS score: 9.8) and CVE-2021-1610 (CVSS score: 7.2), reside in the web-based management interface of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NWw0fXZOtLk:tneHCbejUro:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NWw0fXZOtLk:tneHCbejUro:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NWw0fXZOtLk:tneHCbejUro:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NWw0fXZOtLk:tneHCbejUro:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NWw0fXZOtLk:tneHCbejUro:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NWw0fXZOtLk:tneHCbejUro:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NWw0fXZOtLk:tneHCbejUro:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NWw0fXZOtLk:tneHCbejUro:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4127687113313345227
title: Salesforce Release Updates — A Cautionary Tale for Security Teams
uri: Salesforce-Release-Updates-A-Cautionary-Tale-for-Security-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4127687113313345227
content:
On the surface, Salesforce seems like a classic Software-as-a-Service (SaaS) platform. Someone might even argue that Salesforce invented the SaaS market. However, the more people work with the full offering of Salesforce, the more they realize that it goes beyond a traditional SaaS platform's capabilities.
For example, few people talk about managing the security aspects of Salesforce Release <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JxK2TjOWwvI:wJs5lr9lbRE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JxK2TjOWwvI:wJs5lr9lbRE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JxK2TjOWwvI:wJs5lr9lbRE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JxK2TjOWwvI:wJs5lr9lbRE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JxK2TjOWwvI:wJs5lr9lbRE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JxK2TjOWwvI:wJs5lr9lbRE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JxK2TjOWwvI:wJs5lr9lbRE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JxK2TjOWwvI:wJs5lr9lbRE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2230279969170300715
title: A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service
uri: A-Wide-Range-of-Cyber-Attacks-Leveraging-Prometheus-TDS-Malware-Servic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2230279969170300715
content:
Multiple cybercriminal groups are leveraging a malware-as-a-service (MaaS) solution to distribute a wide range of malicious software distribution campaigns that result in the deployment of payloads such as Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish against individuals in Belgium as well as government agencies, companies, and corporations in the U.S.
&lt;!--adsense--&gt;
Dubbed "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mi7rIHIlOWw:yEiJZHYOlmk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mi7rIHIlOWw:yEiJZHYOlmk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mi7rIHIlOWw:yEiJZHYOlmk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mi7rIHIlOWw:yEiJZHYOlmk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mi7rIHIlOWw:yEiJZHYOlmk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mi7rIHIlOWw:yEiJZHYOlmk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mi7rIHIlOWw:yEiJZHYOlmk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mi7rIHIlOWw:yEiJZHYOlmk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6626359983083511632
title: Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks
uri: Unpatched-Security-Flaws-Expose-Mitsubishi-Safety-PLCs-to-Remote-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6626359983083511632
content:
Multiple unpatched security vulnerabilities have been disclosed in Mitsubishi safety programmable logic controllers (PLCs) that could be exploited by an adversary to acquire legitimate user names registered in the module via a brute-force attack, unauthorized login to the CPU module, and even cause a denial-of-service (DoS) condition.
The security weaknesses, disclosed by Nozomi Networks, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D4O5b9sYOww:T-x3l5ClDwc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D4O5b9sYOww:T-x3l5ClDwc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D4O5b9sYOww:T-x3l5ClDwc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D4O5b9sYOww:T-x3l5ClDwc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D4O5b9sYOww:T-x3l5ClDwc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D4O5b9sYOww:T-x3l5ClDwc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D4O5b9sYOww:T-x3l5ClDwc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D4O5b9sYOww:T-x3l5ClDwc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6593152325149694995
title: VMware Issues Patches to Fix Critical Bugs Affecting Multiple Products
uri: VMware-Issues-Patches-to-Fix-Critical-Bugs-Affecting-Multiple-Products
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6593152325149694995
content:
VMware has released security updates for multiple products to address a critical vulnerability that could be exploited to gain access to confidential information.
Tracked as CVE-2021-22002 (CVSS score: 8.6) and CVE-2021-22003 (CVSS score: 3.7), the flaws affect VMware Workspace One Access (Access), VMware Identity Manager (vIDM), VMware vRealize Automation (vRA), VMware Cloud Foundation, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eXRJh4_7sV0:r67pL5IgUys:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eXRJh4_7sV0:r67pL5IgUys:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eXRJh4_7sV0:r67pL5IgUys:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eXRJh4_7sV0:r67pL5IgUys:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eXRJh4_7sV0:r67pL5IgUys:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eXRJh4_7sV0:r67pL5IgUys:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eXRJh4_7sV0:r67pL5IgUys:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eXRJh4_7sV0:r67pL5IgUys:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2196022808583743786
title: India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks
uri: India-s-Koo-a-Twitter-like-Service-Found-Vulnerable-to-Critical-Worm
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2196022808583743786
content:
Koo, India's homegrown Twitter clone, recently patched a serious security vulnerability that could have been exploited to execute arbitrary JavaScript code against hundreds of thousands of its users, spreading the attack across the platform.
The vulnerability involves a stored cross-site scripting flaw (also known as persistent XSS) in Koo's web application that allows malicious scripts to be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zH8P5kkSDGI:9e6-8qiyLHg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zH8P5kkSDGI:9e6-8qiyLHg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zH8P5kkSDGI:9e6-8qiyLHg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zH8P5kkSDGI:9e6-8qiyLHg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zH8P5kkSDGI:9e6-8qiyLHg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zH8P5kkSDGI:9e6-8qiyLHg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zH8P5kkSDGI:9e6-8qiyLHg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zH8P5kkSDGI:9e6-8qiyLHg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1709041396990537191
title: New Amazon Kindle Bug Could've Let Attackers Hijack Your eBook Reader
uri: New-Amazon-Kindle-Bug-Could-ve-Let-Attackers-Hijack-Your-eBook-Reader
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1709041396990537191
content:
Amazon earlier this April addressed a critical vulnerability in its Kindle e-book reader platform that could have been potentially exploited to take full control over a user's device, resulting in the theft of sensitive information by just deploying a malicious e-book.
"By sending Kindle users a single malicious e-book, a threat actor could have stolen any information stored on the device, from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dBPrsd-4_y4:fcAbS-GoU6U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dBPrsd-4_y4:fcAbS-GoU6U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dBPrsd-4_y4:fcAbS-GoU6U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dBPrsd-4_y4:fcAbS-GoU6U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dBPrsd-4_y4:fcAbS-GoU6U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dBPrsd-4_y4:fcAbS-GoU6U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dBPrsd-4_y4:fcAbS-GoU6U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dBPrsd-4_y4:fcAbS-GoU6U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2201617334994338076
title: Apple to Scan Every Device for Child Abuse Content — But Experts Fear for Privacy
uri: Apple-to-Scan-Every-Device-for-Child-Abuse-Content-But-Experts-Fea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2201617334994338076
content:
Apple on Thursday said it's introducing new child safety features in iOS, iPadOS, watchOS, and macOS as part of its efforts to limit the spread of Child Sexual Abuse Material (CSAM) in the U.S.
To that effect, the iPhone maker said it intends to begin client-side scanning of images shared via every Apple device for known child abuse content as they are being uploaded into iCloud Photos, in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9rcyWF6hqNc:mQE9hf7ebe4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9rcyWF6hqNc:mQE9hf7ebe4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9rcyWF6hqNc:mQE9hf7ebe4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9rcyWF6hqNc:mQE9hf7ebe4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9rcyWF6hqNc:mQE9hf7ebe4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9rcyWF6hqNc:mQE9hf7ebe4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9rcyWF6hqNc:mQE9hf7ebe4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9rcyWF6hqNc:mQE9hf7ebe4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7226236640459092459
title: Pulse Secure VPNs Get New Urgent Update for Poorly Patched Critical Flaw
uri: Pulse-Secure-VPNs-Get-New-Urgent-Update-for-Poorly-Patched-Critical-Fl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7226236640459092459
content:
Pulse Secure has shipped a fix for a critical post-authentication remote code execution (RCE) vulnerability in its Connect Secure virtual private network (VPN) appliances to address an incomplete patch for an actively exploited flaw it previously resolved in October 2020.
"The Pulse Connect Secure appliance suffers from an uncontrolled archive extraction vulnerability which allows an attacker to<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pAt4zMSVrsI:OjHWbCLFctA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pAt4zMSVrsI:OjHWbCLFctA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pAt4zMSVrsI:OjHWbCLFctA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pAt4zMSVrsI:OjHWbCLFctA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pAt4zMSVrsI:OjHWbCLFctA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pAt4zMSVrsI:OjHWbCLFctA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pAt4zMSVrsI:OjHWbCLFctA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pAt4zMSVrsI:OjHWbCLFctA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9105514924593385391
title: A Critical Random Number Generator Flaw Affects Billions of IoT Devices
uri: A-Critical-Random-Number-Generator-Flaw-Affects-Billions-of-IoT-Device
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9105514924593385391
content:
A critical vulnerability has been disclosed in hardware random number generators used in billions of Internet of Things (IoT) devices whereby it fails to properly generate random numbers, thus undermining their security and putting them at risk of attacks.
"It turns out that these 'randomly' chosen numbers aren't always as random as you'd like when it comes to IoT devices," Bishop Fox <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-fYG3tVOXIs:-GdI5elgGP4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-fYG3tVOXIs:-GdI5elgGP4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-fYG3tVOXIs:-GdI5elgGP4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-fYG3tVOXIs:-GdI5elgGP4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-fYG3tVOXIs:-GdI5elgGP4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-fYG3tVOXIs:-GdI5elgGP4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-fYG3tVOXIs:-GdI5elgGP4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-fYG3tVOXIs:-GdI5elgGP4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6469113318496682509
title: Users Can Be Just As Dangerous As Hackers
uri: Users-Can-Be-Just-As-Dangerous-As-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6469113318496682509
content:
Among the problems stemming from our systemic failure with cybersecurity, which ranges from decades-old software-development practices to Chinese and Russian cyber-attacks, one problem gets far less attention than it should—the insider threat.
But the reality is that most organizations should be at least as worried about user management as they are about Bond villain-type hackers launching <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPLIPcSTomU:eoIqh56N2HU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPLIPcSTomU:eoIqh56N2HU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPLIPcSTomU:eoIqh56N2HU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XPLIPcSTomU:eoIqh56N2HU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPLIPcSTomU:eoIqh56N2HU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XPLIPcSTomU:eoIqh56N2HU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPLIPcSTomU:eoIqh56N2HU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XPLIPcSTomU:eoIqh56N2HU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8658999736059799016
title: Beware! New Android Malware Hacks Thousands of Facebook Accounts
uri: Beware-New-Android-Malware-Hacks-Thousands-of-Facebook-Accounts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8658999736059799016
content:
A new Android trojan has been found to compromise Facebook accounts of over 10,000 users in at least 144 countries since March 2021 via fraudulent apps distributed through Google Play Store and other third-party app marketplaces.
Dubbed "FlyTrap," the previously undocumented malware is believed to be part of a family of trojans that employ social engineering tricks to breach Facebook accounts as<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t01JuDf1npI:toAh1h6qD4g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t01JuDf1npI:toAh1h6qD4g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t01JuDf1npI:toAh1h6qD4g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t01JuDf1npI:toAh1h6qD4g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t01JuDf1npI:toAh1h6qD4g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t01JuDf1npI:toAh1h6qD4g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t01JuDf1npI:toAh1h6qD4g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t01JuDf1npI:toAh1h6qD4g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7939181196730571829
title: Hackers Exploiting New Auth Bypass Bug Affecting Millions of Arcadyan Routers
uri: Hackers-Exploiting-New-Auth-Bypass-Bug-Affecting-Millions-of-Arcadyan
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7939181196730571829
content:
Unidentified threat actors are actively exploiting a critical authentication bypass vulnerability to hijack home routers as part of an effort to co-opt them to a Mirai-variant botnet used for carrying out DDoS attacks, merely two days after its public disclosure.
Tracked as CVE-2021-20090 (CVSS score: 9.9), the weakness concerns a path traversal vulnerability in the web interfaces of routers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PSEnonM3NZY:OR7rAFkJllk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PSEnonM3NZY:OR7rAFkJllk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PSEnonM3NZY:OR7rAFkJllk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PSEnonM3NZY:OR7rAFkJllk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PSEnonM3NZY:OR7rAFkJllk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PSEnonM3NZY:OR7rAFkJllk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PSEnonM3NZY:OR7rAFkJllk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PSEnonM3NZY:OR7rAFkJllk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4239537522491508422
title: Experts Believe Chinese Hackers Are Behind Several Attacks Targeting Israel
uri: Experts-Believe-Chinese-Hackers-Are-Behind-Several-Attacks-Targeting-I
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4239537522491508422
content:
A Chinese cyber espionage group has been linked to a string of intrusion activities targeting Israeli government institutions, IT providers, and telecommunications companies at least since 2019.
FireEye's Mandiant threat intelligence arm attributed the campaign to an operator it tracks as "UNC215", a Chinese espionage operation that's believed to have singled out organizations around the world <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JctNSW8ldNg:am0LYHi0c7I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JctNSW8ldNg:am0LYHi0c7I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JctNSW8ldNg:am0LYHi0c7I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JctNSW8ldNg:am0LYHi0c7I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JctNSW8ldNg:am0LYHi0c7I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JctNSW8ldNg:am0LYHi0c7I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JctNSW8ldNg:am0LYHi0c7I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JctNSW8ldNg:am0LYHi0c7I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8672980540984766239
title: Microsoft Releases Windows Updates to Patch Actively Exploited Vulnerability
uri: Microsoft-Releases-Windows-Updates-to-Patch-Actively-Exploited-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8672980540984766239
content:
Microsoft on Tuesday rolled out security updates to address a total of 44 security issues affecting its software products and services, one of which it says is an actively exploited zero-day in the wild.
The update, which is the smallest release since December 2019, squashes seven Critical and 37 Important bugs in Windows, .NET Core &amp; Visual Studio, Azure, Microsoft Graphics Component, Microsoft<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4mv7EFxnJEI:sOXYrPSZP3s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4mv7EFxnJEI:sOXYrPSZP3s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4mv7EFxnJEI:sOXYrPSZP3s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4mv7EFxnJEI:sOXYrPSZP3s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4mv7EFxnJEI:sOXYrPSZP3s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4mv7EFxnJEI:sOXYrPSZP3s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4mv7EFxnJEI:sOXYrPSZP3s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4mv7EFxnJEI:sOXYrPSZP3s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8796606660629252924
title: Magento Update Released to Fix Critical Flaws Affecting E-Commerce Sites
uri: Magento-Update-Released-to-Fix-Critical-Flaws-Affecting-E-Commerce-Sit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8796606660629252924
content:
Adobe on Tuesday shipped security updates to remediate multiple critical vulnerabilities in its Magento e-commerce platform that could be abused by an attacker to execute arbitrary code and take control of a vulnerable system.
The issues affect 2.3.7, 2.4.2-p1, 2.4.2, and earlier versions of Magento Commerce, and 2.3.7, 2.4.2-p1, and all prior versions of Magento Open Source edition. Of the 26 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lL6pwO4Cx8Q:-U0hxhSdSb4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lL6pwO4Cx8Q:-U0hxhSdSb4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lL6pwO4Cx8Q:-U0hxhSdSb4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lL6pwO4Cx8Q:-U0hxhSdSb4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lL6pwO4Cx8Q:-U0hxhSdSb4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lL6pwO4Cx8Q:-U0hxhSdSb4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lL6pwO4Cx8Q:-U0hxhSdSb4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lL6pwO4Cx8Q:-U0hxhSdSb4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7628381799922628614
title: Hackers Steal Over $600 Million Worth of Cryptocurrencies from Poly Network
uri: Hackers-Steal-Over-600-Million-Worth-of-Cryptocurrencies-from-Poly-Ne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7628381799922628614
content:
Hackers have siphoned $611 million worth of cryptocurrencies from a blockchain-based financial network in what's believed to be one of the largest heists targeting the digital asset industry, putting it ahead of breaches of exchanges Coincheck and Mt. Gox.
Poly Network, a cross-chain decentralized finance (DeFi) platform for swapping tokens across multiple blockchains such as Bitcoin, Ethereum, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yZrdjLtjybI:gDFCWUqhWO8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yZrdjLtjybI:gDFCWUqhWO8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yZrdjLtjybI:gDFCWUqhWO8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yZrdjLtjybI:gDFCWUqhWO8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yZrdjLtjybI:gDFCWUqhWO8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yZrdjLtjybI:gDFCWUqhWO8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yZrdjLtjybI:gDFCWUqhWO8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yZrdjLtjybI:gDFCWUqhWO8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5378287181700488550
title: Bugs in Managed DNS Services Cloud Let Attackers Spy On DNS Traffic
uri: Bugs-in-Managed-DNS-Services-Cloud-Let-Attackers-Spy-On-DNS-Traffic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5378287181700488550
content:
Cybersecurity researchers have disclosed a new class of vulnerabilities impacting major DNS-as-a-Service (DNSaaS) providers that could allow attackers to exfiltrate sensitive information from corporate networks.
"We found a simple loophole that allowed us to intercept a portion of worldwide dynamic DNS traffic going through managed DNS providers like Amazon and Google," researchers Shir Tamari <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GstMO8w_2S0:BGH_MDjq1ko:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GstMO8w_2S0:BGH_MDjq1ko:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GstMO8w_2S0:BGH_MDjq1ko:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GstMO8w_2S0:BGH_MDjq1ko:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GstMO8w_2S0:BGH_MDjq1ko:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GstMO8w_2S0:BGH_MDjq1ko:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GstMO8w_2S0:BGH_MDjq1ko:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GstMO8w_2S0:BGH_MDjq1ko:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-843652245189428765
title: Microsoft Security Bulletin Warns of New Windows Print Spooler RCE Vulnerability
uri: Microsoft-Security-Bulletin-Warns-of-New-Windows-Print-Spooler-RCE-Vul
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/843652245189428765
content:
A day after releasing Patch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, adding that it's working to remediate the issue in an upcoming security update.
Tracked as CVE-2021-36958 (CVSS score: 7.3), the unpatched flaw is the latest to join a list of bugs collectively known as PrintNightmare that have plagued the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BUny5E1KVCI:EbtCxXH8jO4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BUny5E1KVCI:EbtCxXH8jO4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BUny5E1KVCI:EbtCxXH8jO4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BUny5E1KVCI:EbtCxXH8jO4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BUny5E1KVCI:EbtCxXH8jO4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BUny5E1KVCI:EbtCxXH8jO4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BUny5E1KVCI:EbtCxXH8jO4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BUny5E1KVCI:EbtCxXH8jO4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7325231988831704726
title: IT Giant Accenture Hit by LockBit Ransomware; Hackers Threaten to Leak Data
uri: IT-Giant-Accenture-Hit-by-LockBit-Ransomware-Hackers-Threaten-to-Leak
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7325231988831704726
content:
Global IT consultancy giant Accenture has become the latest company to be hit by the LockBit ransomware gang, according to a post made by the operators on their dark web portal, likely filling a void left in the wake of DarkSide and REvil shutdown.
"These people are beyond privacy and security. I really hope that their services are better than what I saw as an insider," read a message posted on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-dBiHPwLMU:VtR9-di1WHI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-dBiHPwLMU:VtR9-di1WHI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-dBiHPwLMU:VtR9-di1WHI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-dBiHPwLMU:VtR9-di1WHI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-dBiHPwLMU:VtR9-di1WHI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-dBiHPwLMU:VtR9-di1WHI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-dBiHPwLMU:VtR9-di1WHI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-dBiHPwLMU:VtR9-di1WHI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5804866237228761856
title: How Companies Can Protect Themselves from Password Spraying Attacks
uri: How-Companies-Can-Protect-Themselves-from-Password-Spraying-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5804866237228761856
content:
Attackers are using many types of attacks to compromise business-critical data. These can include zero-day attacks, supply chain attacks, and others. However, one of the most common ways that hackers get into your environment is by compromising passwords.
The password spraying attack is a special kind of password attack that can prove effective in compromising your environment. Let's look closer<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SCX28s7hCmw:QYK0EFuFYmU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SCX28s7hCmw:QYK0EFuFYmU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SCX28s7hCmw:QYK0EFuFYmU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SCX28s7hCmw:QYK0EFuFYmU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SCX28s7hCmw:QYK0EFuFYmU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SCX28s7hCmw:QYK0EFuFYmU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SCX28s7hCmw:QYK0EFuFYmU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SCX28s7hCmw:QYK0EFuFYmU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5544356496573276110
title: Experts Shed Light On New Russian Malware-as-a-Service Written in Rust
uri: Experts-Shed-Light-On-New-Russian-Malware-as-a-Service-Written-in-Rust
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5544356496573276110
content:
A nascent information-stealing malware sold and distributed on underground Russian underground forums has been written in Rust, signalling a new trend where threat actors are increasingly adopting exotic programming languages to bypass security protections, evade analysis, and hamper reverse engineering efforts.
Dubbed "Ficker Stealer," it's notable for being propagated via Trojanized web links <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=15nGpY5992E:8bfbYwJ1A8k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=15nGpY5992E:8bfbYwJ1A8k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=15nGpY5992E:8bfbYwJ1A8k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=15nGpY5992E:8bfbYwJ1A8k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=15nGpY5992E:8bfbYwJ1A8k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=15nGpY5992E:8bfbYwJ1A8k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=15nGpY5992E:8bfbYwJ1A8k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=15nGpY5992E:8bfbYwJ1A8k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7972592101252458347
title: Ransomware Gangs Exploiting Windows Print Spooler Vulnerabilities
uri: Ransomware-Gangs-Exploiting-Windows-Print-Spooler-Vulnerabilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7972592101252458347
content:
Ransomware operators such as Magniber and Vice Society are actively exploiting vulnerabilities in Windows Print Spooler to compromise victims and spread laterally across a victim's network to deploy file-encrypting payloads on targeted systems.
"Multiple, distinct threat actors view this vulnerability as attractive to use during their attacks and may indicate that this vulnerability will <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmEiFIQP68:CfnF32oN634:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmEiFIQP68:CfnF32oN634:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmEiFIQP68:CfnF32oN634:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vVmEiFIQP68:CfnF32oN634:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmEiFIQP68:CfnF32oN634:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vVmEiFIQP68:CfnF32oN634:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vVmEiFIQP68:CfnF32oN634:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vVmEiFIQP68:CfnF32oN634:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4507460481781021323
title: Hackers Actively Searching for Unpatched Microsoft Exchange Servers
uri: Hackers-Actively-Searching-for-Unpatched-Microsoft-Exchange-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4507460481781021323
content:
Threat actors are actively carrying out opportunistic scanning and exploitation of Exchange servers using a new exploit chain leveraging a trio of flaws affecting on-premises installations, making them the latest set of bugs after ProxyLogon vulnerabilities were exploited en masse at the start of the year.
The remote code execution flaws have been collectively dubbed "ProxyShell." At least <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6H5XVqU5W0:WcBrcvYQOCw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6H5XVqU5W0:WcBrcvYQOCw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6H5XVqU5W0:WcBrcvYQOCw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o6H5XVqU5W0:WcBrcvYQOCw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6H5XVqU5W0:WcBrcvYQOCw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o6H5XVqU5W0:WcBrcvYQOCw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=o6H5XVqU5W0:WcBrcvYQOCw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=o6H5XVqU5W0:WcBrcvYQOCw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7849130523154477379
title: Hackers Spotted Using Morse Code in Phishing Attacks to Evade Detection
uri: Hackers-Spotted-Using-Morse-Code-in-Phishing-Attacks-to-Evade-Detectio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7849130523154477379
content:
Microsoft has disclosed details of an evasive year-long social engineering campaign wherein the operators kept changing their obfuscation and encryption mechanisms every 37 days on average, including relying on Morse code, in an attempt to cover their tracks and surreptitiously harvest user credentials.
The phishing attacks take the form of invoice-themed lures mimicking financial-related <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wfPLnvmlFL4:4kOjXt0YSTc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wfPLnvmlFL4:4kOjXt0YSTc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wfPLnvmlFL4:4kOjXt0YSTc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wfPLnvmlFL4:4kOjXt0YSTc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wfPLnvmlFL4:4kOjXt0YSTc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wfPLnvmlFL4:4kOjXt0YSTc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wfPLnvmlFL4:4kOjXt0YSTc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wfPLnvmlFL4:4kOjXt0YSTc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3721856919920491325
title: Why Is There A Surge In Ransomware Attacks?
uri: Why-Is-There-A-Surge-In-Ransomware-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3721856919920491325
content:
The U.S. is presently combating two pandemics--coronavirus and ransomware attacks. Both have partially shut down parts of the economy. However, in the case of cybersecurity, lax security measures allow hackers to have an easy way to rake in millions.
It's pretty simple for hackers to gain financially, using malicious software to access and encrypt data and hold it hostage until the victim pays <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yiYCfRluqF0:ZdFTUsU2vBo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yiYCfRluqF0:ZdFTUsU2vBo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yiYCfRluqF0:ZdFTUsU2vBo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yiYCfRluqF0:ZdFTUsU2vBo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yiYCfRluqF0:ZdFTUsU2vBo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yiYCfRluqF0:ZdFTUsU2vBo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yiYCfRluqF0:ZdFTUsU2vBo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yiYCfRluqF0:ZdFTUsU2vBo:F7zBnMyn0Lo" border="0"></img></a>
</div>


