# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7317816849508847678
title: FIN8 Hackers Return With More Powerful Version of BADHATCH PoS Malware
uri: FIN8-Hackers-Return-With-More-Powerful-Version-of-BADHATCH-PoS-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7317816849508847678
content:
Threat actors known for keeping a low profile do so by ceasing operations for prolonged periods in between to evade attracting any attention as well as constantly refining their toolsets to fly below the radar of many detection technologies.
One such group is FIN8, a financially motivated threat actor that's back in action after a year-and-a-half hiatus with a powerful version of a backdoor with<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D27RnOZIuu8:jsOGC-haqI0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D27RnOZIuu8:jsOGC-haqI0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D27RnOZIuu8:jsOGC-haqI0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D27RnOZIuu8:jsOGC-haqI0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D27RnOZIuu8:jsOGC-haqI0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D27RnOZIuu8:jsOGC-haqI0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D27RnOZIuu8:jsOGC-haqI0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D27RnOZIuu8:jsOGC-haqI0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3291812844062289652
title: Researchers Unveil New Linux Malware Linked to Chinese Hackers
uri: Researchers-Unveil-New-Linux-Malware-Linked-to-Chinese-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3291812844062289652
content:
Cybersecurity researchers on Wednesday shed light on a new sophisticated backdoor targeting Linux endpoints and servers that's believed to be the work of Chinese nation-state actors.
Dubbed "RedXOR" by Intezer, the backdoor masquerades as a polkit daemon, with similarities found between the malware and those previously associated with the Winnti Umbrella (or Axiom) threat group such as ​PWNLNX, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bE5DhgOuekg:0NqLbKHrFOA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bE5DhgOuekg:0NqLbKHrFOA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bE5DhgOuekg:0NqLbKHrFOA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bE5DhgOuekg:0NqLbKHrFOA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bE5DhgOuekg:0NqLbKHrFOA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bE5DhgOuekg:0NqLbKHrFOA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bE5DhgOuekg:0NqLbKHrFOA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bE5DhgOuekg:0NqLbKHrFOA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2169363237345651766
title: Critical Pre-Auth RCE Flaw Found in F5 Big-IP Platform — Patch ASAP!
uri: Critical-Pre-Auth-RCE-Flaw-Found-in-F5-Big-IP-Platform-Patch-ASAP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2169363237345651766
content:
Application security company F5 Networks on Wednesday published an advisory warning of four critical vulnerabilities impacting multiple products that could result in a denial of service (DoS) attack and even unauthenticated remote code execution on target networks.
The patches concern a total of seven related flaws (from CVE-2021-22986 through CVE-2021-22992), two of which were discovered and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X45NpSJZntQ:GnY4Ixo8GbQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X45NpSJZntQ:GnY4Ixo8GbQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X45NpSJZntQ:GnY4Ixo8GbQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X45NpSJZntQ:GnY4Ixo8GbQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X45NpSJZntQ:GnY4Ixo8GbQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X45NpSJZntQ:GnY4Ixo8GbQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X45NpSJZntQ:GnY4Ixo8GbQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X45NpSJZntQ:GnY4Ixo8GbQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4246273444977362943
title: ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks
uri: ProxyLogon-PoC-Exploit-Released-Likely-to-Fuel-More-Disruptive-Cyber
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4246273444977362943
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Wednesday issued a joint advisory warning of active exploitation of vulnerabilities in Microsoft Exchange on-premises products by nation-state actors and cybercriminals.
"CISA and FBI assess that adversaries could exploit these vulnerabilities to compromise networks, steal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RLLH3Q2VKfw:8ZsJTX2TJ1Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RLLH3Q2VKfw:8ZsJTX2TJ1Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RLLH3Q2VKfw:8ZsJTX2TJ1Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RLLH3Q2VKfw:8ZsJTX2TJ1Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RLLH3Q2VKfw:8ZsJTX2TJ1Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RLLH3Q2VKfw:8ZsJTX2TJ1Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RLLH3Q2VKfw:8ZsJTX2TJ1Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RLLH3Q2VKfw:8ZsJTX2TJ1Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6202845541532360218
title: Fixing the Weakest Link — The Passwords — in Cybersecurity Today
uri: Fixing-the-Weakest-Link-The-Passwords-in-Cybersecurity-Today
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6202845541532360218
content:
Password security has long been an issue for businesses and their cybersecurity standards. Account passwords are often the weakest link in the overall security posture for many organizations.
Many companies have used Microsoft's default password policies for decades. While these can be customized, businesses often accept the default values for their organization.
The Windows default password <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fRiSRVzlfWQ:oHCKP3qvyx0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fRiSRVzlfWQ:oHCKP3qvyx0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fRiSRVzlfWQ:oHCKP3qvyx0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fRiSRVzlfWQ:oHCKP3qvyx0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fRiSRVzlfWQ:oHCKP3qvyx0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fRiSRVzlfWQ:oHCKP3qvyx0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fRiSRVzlfWQ:oHCKP3qvyx0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fRiSRVzlfWQ:oHCKP3qvyx0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6901948621310586722
title: New Browser Attack Allows Tracking Users Online With JavaScript Disabled
uri: New-Browser-Attack-Allows-Tracking-Users-Online-With-JavaScript-Disabl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6901948621310586722
content:
Researchers have discovered a new side-channel that they say can be reliably exploited to leak information from web browsers that could then be leveraged to track users even when JavaScript is completely disabled.
"This is a side-channel attack which doesn't require any JavaScript to run," the researchers said. "This means script blockers cannot stop it. The attacks work even if you strip out <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ABjGBrLXfHY:DsXiCBngSI4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ABjGBrLXfHY:DsXiCBngSI4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ABjGBrLXfHY:DsXiCBngSI4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ABjGBrLXfHY:DsXiCBngSI4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ABjGBrLXfHY:DsXiCBngSI4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ABjGBrLXfHY:DsXiCBngSI4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ABjGBrLXfHY:DsXiCBngSI4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ABjGBrLXfHY:DsXiCBngSI4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3914589185630395534
title: Hackers Are Targeting Microsoft Exchange Servers With Ransomware
uri: Hackers-Are-Targeting-Microsoft-Exchange-Servers-With-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3914589185630395534
content:
It didn't take long. Intelligence agencies and cybersecurity researchers had been warning that unpatched Exchange Servers could open the pathway for ransomware infections in the wake of swift escalation of the attacks since last week.
Now it appears that threat actors have caught up. 
According to the latest reports, cybercriminals are leveraging the heavily exploited ProxyLogon Exchange Server <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YNZgPucSGkw:4jmNeU2WTbw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YNZgPucSGkw:4jmNeU2WTbw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YNZgPucSGkw:4jmNeU2WTbw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YNZgPucSGkw:4jmNeU2WTbw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YNZgPucSGkw:4jmNeU2WTbw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YNZgPucSGkw:4jmNeU2WTbw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YNZgPucSGkw:4jmNeU2WTbw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YNZgPucSGkw:4jmNeU2WTbw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2501770919323157346
title: Researchers Spotted Malware Written in Nim Programming Language
uri: Researchers-Spotted-Malware-Written-in-Nim-Programming-Language
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2501770919323157346
content:
Cybersecurity researchers have unwrapped an "interesting email campaign" undertaken by a threat actor that has taken to distributing a new malware written in Nim programming language.
Dubbed "NimzaLoader" by Proofpoint researchers, the development marks one of the rare instances of Nim malware discovered in the threat landscape.
"Malware developers may choose to use a rare programming language <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vfLSeMs-hIk:gw3tKIBPyZE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vfLSeMs-hIk:gw3tKIBPyZE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vfLSeMs-hIk:gw3tKIBPyZE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vfLSeMs-hIk:gw3tKIBPyZE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vfLSeMs-hIk:gw3tKIBPyZE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vfLSeMs-hIk:gw3tKIBPyZE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vfLSeMs-hIk:gw3tKIBPyZE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vfLSeMs-hIk:gw3tKIBPyZE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4445597140913948906
title: Another Google Chrome 0-Day Bug Found Actively Exploited In-the-Wild
uri: Another-Google-Chrome-0-Day-Bug-Found-Actively-Exploited-In-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4445597140913948906
content:
Google has addressed yet another actively exploited zero-day in Chrome browser, marking the second such fix released by the company within a month.
The browser maker on Friday shipped 89.0.4389.90 for Windows, Mac, and Linux, which is expected to be rolling out over the coming days/weeks to all users.
While the update contains a total of five security fixes, the most important flaw rectified by <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFwTxY4JQgo:IfeEg2VFKCc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFwTxY4JQgo:IfeEg2VFKCc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFwTxY4JQgo:IfeEg2VFKCc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lFwTxY4JQgo:IfeEg2VFKCc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFwTxY4JQgo:IfeEg2VFKCc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lFwTxY4JQgo:IfeEg2VFKCc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFwTxY4JQgo:IfeEg2VFKCc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lFwTxY4JQgo:IfeEg2VFKCc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3350227056354233982
title: CompTIA Security Certification Prep — Lifetime Access for just $30
uri: CompTIA-Security-Certification-Prep-Lifetime-Access-for-just-30
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3350227056354233982
content:
At long last, top companies are starting to take cybersecurity seriously. As a consequence, technical recruiters are looking for people with hacking skills and certifications to prove it.
CompTIA is seen as the gold standard when it comes to cybersecurity exams, with several certifications to choose from.
If you would like to scoop them all, The CompTIA Security Infrastructure Expert Bundle is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ONtxaN4To1s:MgypoN5FAM0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ONtxaN4To1s:MgypoN5FAM0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ONtxaN4To1s:MgypoN5FAM0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ONtxaN4To1s:MgypoN5FAM0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ONtxaN4To1s:MgypoN5FAM0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ONtxaN4To1s:MgypoN5FAM0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ONtxaN4To1s:MgypoN5FAM0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ONtxaN4To1s:MgypoN5FAM0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5554703619611314594
title: Rising Demand for DDoS Protection Software Market By 2020-2028
uri: Rising-Demand-for-DDoS-Protection-Software-Market-By-2020-2028
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5554703619611314594
content:
Distributed Denial of Service (DDoS) attack is a malicious form of attack that disrupts the regular network traffic by overwhelming the website with more traffic than the server can handle. The main aim of this kind of cyberattack is to render the website inoperable.
Over recent years, these kinds of attacks are increasing, fueling the demand for the best DDoS protection software solutions. Many<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u1CbAtlEw4:OK9s80FbYqA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u1CbAtlEw4:OK9s80FbYqA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u1CbAtlEw4:OK9s80FbYqA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2u1CbAtlEw4:OK9s80FbYqA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u1CbAtlEw4:OK9s80FbYqA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2u1CbAtlEw4:OK9s80FbYqA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2u1CbAtlEw4:OK9s80FbYqA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2u1CbAtlEw4:OK9s80FbYqA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7471694446106019243
title: CEO of Encrypted Chat Platform Indicted for Aiding Organised Criminals
uri: CEO-of-Encrypted-Chat-Platform-Indicted-for-Aiding-Organised-Criminals
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7471694446106019243
content:
The U.S. Department of Justice (DoJ) on Friday announced an indictment against Jean-Francois Eap, the CEO of encrypted messaging company Sky Global, and an associate for wilfully participating in a criminal enterprise to help international drug traffickers avoid law enforcement.
Eap (also known as "888888") and Thomas Herdman, a former high-level distributor of Sky Global devices, have been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRbADNfQFhg:whX8OKTRFm8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRbADNfQFhg:whX8OKTRFm8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRbADNfQFhg:whX8OKTRFm8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SRbADNfQFhg:whX8OKTRFm8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRbADNfQFhg:whX8OKTRFm8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SRbADNfQFhg:whX8OKTRFm8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SRbADNfQFhg:whX8OKTRFm8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SRbADNfQFhg:whX8OKTRFm8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7167673545435497757
title: Use This One-Click Mitigation Tool from Microsoft to Prevent Exchange Attacks
uri: Use-This-One-Click-Mitigation-Tool-from-Microsoft-to-Prevent-Exchange
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7167673545435497757
content:
Microsoft on Monday released a one-click mitigation software that applies all the necessary countermeasures to secure vulnerable environments against the ongoing widespread ProxyLogon Exchange Server cyberattacks.
Called Exchange On-premises Mitigation Tool (EOMT), the PowerShell-based script serves to mitigate against current known attacks using CVE-2021-26855, scan the Exchange Server using <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p8LpbYfeMfQ:noZgvT3sBgc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p8LpbYfeMfQ:noZgvT3sBgc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p8LpbYfeMfQ:noZgvT3sBgc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p8LpbYfeMfQ:noZgvT3sBgc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p8LpbYfeMfQ:noZgvT3sBgc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p8LpbYfeMfQ:noZgvT3sBgc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p8LpbYfeMfQ:noZgvT3sBgc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p8LpbYfeMfQ:noZgvT3sBgc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-711479461715744745
title: New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild
uri: New-Mirai-Variant-and-ZHtrap-Botnet-Malware-Emerge-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/711479461715744745
content:
Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy Mirai variants on compromised systems.
"Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection behaviors such as downloading and executing Mirai variants and brute-forcers," Palo Alto Networks' Unit 42 Threat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80_YoxS7Ydw:2hIoAkJ94eI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80_YoxS7Ydw:2hIoAkJ94eI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80_YoxS7Ydw:2hIoAkJ94eI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=80_YoxS7Ydw:2hIoAkJ94eI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80_YoxS7Ydw:2hIoAkJ94eI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=80_YoxS7Ydw:2hIoAkJ94eI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80_YoxS7Ydw:2hIoAkJ94eI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=80_YoxS7Ydw:2hIoAkJ94eI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9124529926469545494
title: 18-Year-Old Hacker Gets 3 Years in Prison for Massive Twitter 'Bitcoin Scam' Hack
uri: 18-Year-Old-Hacker-Gets-3-Years-in-Prison-for-Massive-Twitter-Bitcoin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9124529926469545494
content:
A Florida teen accused of masterminding the hacks of several high-profile Twitter accounts last summer as part of a widespread cryptocurrency scam pled guilty to fraud charges in exchange for a three-year prison sentence.
Graham Ivan Clark, 18, will also serve an additional three years on probation.
The development comes after the U.S. Department of Justice (DoJ) charged Mason Sheppard (aka <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThZAyWsulzw:1MuKRAB3x5w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThZAyWsulzw:1MuKRAB3x5w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThZAyWsulzw:1MuKRAB3x5w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ThZAyWsulzw:1MuKRAB3x5w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThZAyWsulzw:1MuKRAB3x5w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ThZAyWsulzw:1MuKRAB3x5w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThZAyWsulzw:1MuKRAB3x5w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ThZAyWsulzw:1MuKRAB3x5w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7684191489235938820
title: Apple May Start Delivering Security Patches Separately From Other OS Updates
uri: Apple-May-Start-Delivering-Security-Patches-Separately-From-Other-OS-U
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7684191489235938820
content:
Apple may be changing the way it delivers security patches to its devices running iOS and iPadOS mobile operating systems.
According to code spotted in iOS 14.5, the iPhone maker is reportedly working on a method for delivering security fixes independently of other OS updates. 
The changes were first reported by the 9to5Mac website.
&lt;!--adsense--&gt;
While Google's Android has had monthly security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT-nJM5YFv4:kCZHe-j5zDE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT-nJM5YFv4:kCZHe-j5zDE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT-nJM5YFv4:kCZHe-j5zDE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TT-nJM5YFv4:kCZHe-j5zDE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT-nJM5YFv4:kCZHe-j5zDE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TT-nJM5YFv4:kCZHe-j5zDE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TT-nJM5YFv4:kCZHe-j5zDE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TT-nJM5YFv4:kCZHe-j5zDE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1199364363865653128
title: Mimecast Finds SolarWinds Hackers Stole Some of Its Source Code
uri: Mimecast-Finds-SolarWinds-Hackers-Stole-Some-of-Its-Source-Code
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1199364363865653128
content:
Email security firm Mimecast on Tuesday revealed that the state-sponsored SolarWinds hackers who broke into its internal network also downloaded source code out of a limited number of repositories.
"The threat actor did access a subset of email addresses and other contact information and hashed and salted credentials," the company said in a write-up detailing its investigation, adding the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60RWdsHMC3A:G6NB402EqtI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60RWdsHMC3A:G6NB402EqtI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60RWdsHMC3A:G6NB402EqtI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=60RWdsHMC3A:G6NB402EqtI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60RWdsHMC3A:G6NB402EqtI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=60RWdsHMC3A:G6NB402EqtI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60RWdsHMC3A:G6NB402EqtI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=60RWdsHMC3A:G6NB402EqtI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4159553731316335851
title: [Webinar] Oy Vey, We Hired a Large, Hairy Hacker…
uri: Webinar-Oy-Vey-We-Hired-a-Large-Hairy-Hacker
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4159553731316335851
content:
It's not every day that one of the best-known independent cybersecurity individuals joins a cybersecurity company. The two are generally on opposite sides of the coin, with little crossover.
After all, they're usually concerned with different parts of the cybersecurity puzzle – one providing platforms and tools to defend organizations, the other keeping them accountable and looking for blind <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ak8_mBs4dAE:Guy6Bzp0H_w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ak8_mBs4dAE:Guy6Bzp0H_w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ak8_mBs4dAE:Guy6Bzp0H_w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ak8_mBs4dAE:Guy6Bzp0H_w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ak8_mBs4dAE:Guy6Bzp0H_w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ak8_mBs4dAE:Guy6Bzp0H_w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ak8_mBs4dAE:Guy6Bzp0H_w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ak8_mBs4dAE:Guy6Bzp0H_w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3682931570870581325
title: Flaws in Two Popular WordPress Plugins Affect Over 7 Million Websites
uri: Flaws-in-Two-Popular-WordPress-Plugins-Affect-Over-7-Million-Websites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3682931570870581325
content:
Researchers have disclosed vulnerabilities in multiple WordPress plugins that, if successfully exploited, could allow an attacker to run arbitrary code and take over a website in certain scenarios.
The flaws were uncovered in Elementor, a website builder plugin used on more than seven million sites, and WP Super Cache, a tool used to serve cached pages of a WordPress site.
According to Wordfence<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZK4H-I7KXts:wQyp3gh8css:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZK4H-I7KXts:wQyp3gh8css:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZK4H-I7KXts:wQyp3gh8css:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZK4H-I7KXts:wQyp3gh8css:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZK4H-I7KXts:wQyp3gh8css:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZK4H-I7KXts:wQyp3gh8css:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZK4H-I7KXts:wQyp3gh8css:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZK4H-I7KXts:wQyp3gh8css:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-721314004121161672
title: Google Reveals What Personal Data Chrome and It's Apps Collect On You
uri: Google-Reveals-What-Personal-Data-Chrome-and-It-s-Apps-Collect-On-You
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/721314004121161672
content:
Privacy-focused search engine DuckDuckGo called out rival Google for "spying" on users after the search giant updated its flagship app to spell out the exact kinds of information it collects for personalization and marketing purposes.
"After months of stalling, Google finally revealed how much personal data they collect in Chrome and the Google app. No wonder they wanted to hide it," the company<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tOm5mpGLo9M:bZM4zUjMS3M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tOm5mpGLo9M:bZM4zUjMS3M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tOm5mpGLo9M:bZM4zUjMS3M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tOm5mpGLo9M:bZM4zUjMS3M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tOm5mpGLo9M:bZM4zUjMS3M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tOm5mpGLo9M:bZM4zUjMS3M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tOm5mpGLo9M:bZM4zUjMS3M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tOm5mpGLo9M:bZM4zUjMS3M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7384739837778252359
title: Why Cached Credentials Can Cause Account Lockouts and How to Stop it
uri: Why-Cached-Credentials-Can-Cause-Account-Lockouts-and-How-to-Stop-it
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7384739837778252359
content:
When a user account becomes locked out, the cause is often attributed to a user who has simply entered an old or incorrect password too many times. However, this is far from being the only thing that can cause an account to become locked.
Another common cause, for example, is an application or script that is configured to log into the system using an old password. Perhaps the most easily <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JzAL1PE51yc:o3Q7ijeS-Co:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JzAL1PE51yc:o3Q7ijeS-Co:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JzAL1PE51yc:o3Q7ijeS-Co:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JzAL1PE51yc:o3Q7ijeS-Co:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JzAL1PE51yc:o3Q7ijeS-Co:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JzAL1PE51yc:o3Q7ijeS-Co:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JzAL1PE51yc:o3Q7ijeS-Co:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JzAL1PE51yc:o3Q7ijeS-Co:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2840732413747440761
title: How to Successfully Pursue a Career in Malware Analysis
uri: How-to-Successfully-Pursue-a-Career-in-Malware-Analysis
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2840732413747440761
content:
Are you looking to becoming a malware analyst? Then continue reading to discover how to gain the training you need and start a career in malware analysis career.Did you know that new malware is released every seven seconds?
As more and more systems become reliant on the internet, the proliferation of malware becomes increasingly destructive. Once upon a time, a computer virus might cause <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aS2XNcnsEj8:2R2BOHjccds:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aS2XNcnsEj8:2R2BOHjccds:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aS2XNcnsEj8:2R2BOHjccds:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aS2XNcnsEj8:2R2BOHjccds:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aS2XNcnsEj8:2R2BOHjccds:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aS2XNcnsEj8:2R2BOHjccds:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aS2XNcnsEj8:2R2BOHjccds:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aS2XNcnsEj8:2R2BOHjccds:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5453605897894687662
title: Critical RCE Flaw Reported in MyBB Forum Software—Patch Your Sites
uri: Critical-RCE-Flaw-Reported-in-MyBB-Forum-Software-Patch-Your-Sites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5453605897894687662
content:
A pair of critical vulnerabilities in a popular bulletin board software called MyBB could have been chained together to achieve remote code execution (RCE) without the need for prior access to a privileged account.
The flaws, which were discovered by independent security researchers Simon Scannell and Carl Smith, were reported to the MyBB Team on February 22, following which it released an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GZfyE8kIgrM:N2Mq_81Busc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GZfyE8kIgrM:N2Mq_81Busc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GZfyE8kIgrM:N2Mq_81Busc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GZfyE8kIgrM:N2Mq_81Busc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GZfyE8kIgrM:N2Mq_81Busc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GZfyE8kIgrM:N2Mq_81Busc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GZfyE8kIgrM:N2Mq_81Busc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GZfyE8kIgrM:N2Mq_81Busc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1905261739103418371
title: New Zoom Screen-Sharing Bug Lets Other Users Access Restricted Apps
uri: New-Zoom-Screen-Sharing-Bug-Lets-Other-Users-Access-Restricted-Apps
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1905261739103418371
content:
A newly discovered glitch in Zoom's screen sharing feature can accidentally leak sensitive information to other attendees in a call, according to the latest findings.
Tracked as CVE-2021-28133, the unpatched security vulnerability makes it possible to reveal contents of applications that are not shared, but only briefly, thereby making it harder to exploit it in the wild.
It's worth pointing out<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7UpEvEbiRHg:B-tJ38Z09y8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7UpEvEbiRHg:B-tJ38Z09y8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7UpEvEbiRHg:B-tJ38Z09y8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7UpEvEbiRHg:B-tJ38Z09y8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7UpEvEbiRHg:B-tJ38Z09y8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7UpEvEbiRHg:B-tJ38Z09y8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7UpEvEbiRHg:B-tJ38Z09y8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7UpEvEbiRHg:B-tJ38Z09y8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8953822318035233340
title: Hackers Infecting Apple App Developers With Trojanized Xcode Projects
uri: Hackers-Infecting-Apple-App-Developers-With-Trojanized-Xcode-Projects
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8953822318035233340
content:
Cybersecurity researchers on Thursday disclosed a new attack wherein threat actors are leveraging Xcode as an attack vector to compromise Apple platform developers with a backdoor, adding to a growing trend that involves targeting developers and researchers with malicious attacks.
Dubbed "XcodeSpy," the trojanized Xcode project is a tainted version of a legitimate, open-source project available <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3hFlRb3HEek:RUQkfCx_YTM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3hFlRb3HEek:RUQkfCx_YTM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3hFlRb3HEek:RUQkfCx_YTM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3hFlRb3HEek:RUQkfCx_YTM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3hFlRb3HEek:RUQkfCx_YTM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3hFlRb3HEek:RUQkfCx_YTM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3hFlRb3HEek:RUQkfCx_YTM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3hFlRb3HEek:RUQkfCx_YTM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5822994450094602152
title: Tesla Ransomware Hacker Pleads Guilty; Swiss Hacktivist Charged for Fraud
uri: Tesla-Ransomware-Hacker-Pleads-Guilty-Swiss-Hacktivist-Charged-for-Fr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5822994450094602152
content:
The U.S. Department of Justice yesterday announced updates on two separate cases involving cyberattacks—a Swiss hacktivist and a Russian hacker who planned to plant malware in the Tesla company.
A Swiss hacker who was involved in the intrusion of cloud-based surveillance firm Verkada and exposed camera footage from its customers was charged by the U.S. Department of Justice (DoJ) on Thursday <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4DI80ylR8E:9lAyNqH30Ic:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4DI80ylR8E:9lAyNqH30Ic:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4DI80ylR8E:9lAyNqH30Ic:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X4DI80ylR8E:9lAyNqH30Ic:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4DI80ylR8E:9lAyNqH30Ic:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X4DI80ylR8E:9lAyNqH30Ic:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X4DI80ylR8E:9lAyNqH30Ic:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X4DI80ylR8E:9lAyNqH30Ic:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4484676817340914976
title: Critical F5 BIG-IP Bug Under Active Attacks After PoC Exploit Posted Online
uri: Critical-F5-BIG-IP-Bug-Under-Active-Attacks-After-PoC-Exploit-Posted-O
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4484676817340914976
content:
Almost 10 days after application security company F5 Networks released patches for critical vulnerabilities in its BIG-IP and BIG-IQ products, adversaries have begun opportunistically mass scanning and targeting exposed and unpatched networking devices to break into enterprise networks.
News of in the wild exploitation development comes on the heels of a proof-of-concept exploit code that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdV2DXTqVo0:MM1uF_1FloQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdV2DXTqVo0:MM1uF_1FloQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdV2DXTqVo0:MM1uF_1FloQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hdV2DXTqVo0:MM1uF_1FloQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdV2DXTqVo0:MM1uF_1FloQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hdV2DXTqVo0:MM1uF_1FloQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdV2DXTqVo0:MM1uF_1FloQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hdV2DXTqVo0:MM1uF_1FloQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1181101098758493970
title: Critical RCE Vulnerability Found in Apache OFBiz ERP Software—Patch Now
uri: Critical-RCE-Vulnerability-Found-in-Apache-OFBiz-ERP-Software-Patch
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1181101098758493970
content:
The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remotely seize control of the open-source enterprise resource planning (ERP) system.
Tracked as CVE-2021-26295, the flaw affects all versions of the software prior to 17.12.06 and employs an "unsafe deserialization" as an attack vector to permit<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=janQ8BlZzXo:_aPQpaIqerU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=janQ8BlZzXo:_aPQpaIqerU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=janQ8BlZzXo:_aPQpaIqerU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=janQ8BlZzXo:_aPQpaIqerU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=janQ8BlZzXo:_aPQpaIqerU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=janQ8BlZzXo:_aPQpaIqerU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=janQ8BlZzXo:_aPQpaIqerU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=janQ8BlZzXo:_aPQpaIqerU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5261953573175914797
title: Popular Netop Remote Learning Software Found Vulnerable to Hacking
uri: Popular-Netop-Remote-Learning-Software-Found-Vulnerable-to-Hacking
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5261953573175914797
content:
Cybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers.
"These findings allow for elevation of privileges and ultimately remote code execution which could be used by a malicious attacker within the same network to gain <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ob3mF2xQbTw:NEIwEePXzrY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ob3mF2xQbTw:NEIwEePXzrY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ob3mF2xQbTw:NEIwEePXzrY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ob3mF2xQbTw:NEIwEePXzrY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ob3mF2xQbTw:NEIwEePXzrY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ob3mF2xQbTw:NEIwEePXzrY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ob3mF2xQbTw:NEIwEePXzrY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ob3mF2xQbTw:NEIwEePXzrY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8815083128051135697
title: WARNING: A New Android Zero-Day Vulnerability Is Under Active Attack
uri: WARNING-A-New-Android-Zero-Day-Vulnerability-Is-Under-Active-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8815083128051135697
content:
Google has disclosed that a now-patched vulnerability affecting Android devices that use Qualcomm chipsets is being weaponized by attackers to launch targeted attacks.
Tracked as CVE-2020-11261 (CVSS score 8.4), the flaw concerns an "improper input validation" issue in Qualcomm's Graphics component that could be exploited to trigger memory corruption when an attacker-engineered app requests <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cM0rJWRj0Ew:MYnmNp_TjgI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cM0rJWRj0Ew:MYnmNp_TjgI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cM0rJWRj0Ew:MYnmNp_TjgI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cM0rJWRj0Ew:MYnmNp_TjgI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cM0rJWRj0Ew:MYnmNp_TjgI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cM0rJWRj0Ew:MYnmNp_TjgI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cM0rJWRj0Ew:MYnmNp_TjgI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cM0rJWRj0Ew:MYnmNp_TjgI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1337351196156723372
title: Critical Flaws Affecting GE's Universal Relay Pose Threat to Electric Utilities
uri: Critical-Flaws-Affecting-GE-s-Universal-Relay-Pose-Threat-to-Electric
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1337351196156723372
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of critical security shortcomings in GE's Universal Relay (UR) family of power management devices.
"Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition," the agency said in an advisory <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jPOsIkgDITA:It5ijql-tqY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jPOsIkgDITA:It5ijql-tqY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jPOsIkgDITA:It5ijql-tqY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jPOsIkgDITA:It5ijql-tqY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jPOsIkgDITA:It5ijql-tqY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jPOsIkgDITA:It5ijql-tqY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jPOsIkgDITA:It5ijql-tqY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jPOsIkgDITA:It5ijql-tqY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5734697400918219375
title: Purple Fox Rootkit Can Now Spread Itself to Other Windows Computers
uri: Purple-Fox-Rootkit-Can-Now-Spread-Itself-to-Other-Windows-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5734697400918219375
content:
Purple Fox, a Windows malware previously known for infecting machines by using exploit kits and phishing emails, has now added a new technique to its arsenal that gives it worm-like propagation capabilities.
The ongoing campaign makes use of a "novel spreading technique via indiscriminate port scanning and exploitation of exposed SMB services with weak passwords and hashes," according to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_p_rxxPRdEY:aRP9yqdwXU4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_p_rxxPRdEY:aRP9yqdwXU4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_p_rxxPRdEY:aRP9yqdwXU4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_p_rxxPRdEY:aRP9yqdwXU4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_p_rxxPRdEY:aRP9yqdwXU4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_p_rxxPRdEY:aRP9yqdwXU4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_p_rxxPRdEY:aRP9yqdwXU4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_p_rxxPRdEY:aRP9yqdwXU4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6388306352146593904
title: Chinese Hackers Used Facebook to Hack Uighur Muslims Living Abroad
uri: Chinese-Hackers-Used-Facebook-to-Hack-Uighur-Muslims-Living-Abroad
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6388306352146593904
content:
Facebook may be banned in China, but the company on Wednesday said it has disrupted a network of bad actors using its platform to target the Uyghur community and lure them into downloading malicious software that would allow surveillance of their devices.
"They targeted activists, journalists and dissidents predominantly among Uyghurs from Xinjiang in China primarily living abroad in Turkey, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P53tgElVVbQ:yRHwEbbyCd8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P53tgElVVbQ:yRHwEbbyCd8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P53tgElVVbQ:yRHwEbbyCd8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P53tgElVVbQ:yRHwEbbyCd8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P53tgElVVbQ:yRHwEbbyCd8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P53tgElVVbQ:yRHwEbbyCd8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P53tgElVVbQ:yRHwEbbyCd8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P53tgElVVbQ:yRHwEbbyCd8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1328255692310014440
title: Critical Cisco Jabber Bug Could Let Attackers Hack Remote Systems
uri: Critical-Cisco-Jabber-Bug-Could-Let-Attackers-Hack-Remote-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1328255692310014440
content:
Cisco on Wednesday released software updates to address multiple vulnerabilities affecting its Jabber messaging clients across Windows, macOS, Android, and iOS.
Successful exploitation of the flaws could permit an "attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zZ8OBayrdV4:J9aisqrVByQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zZ8OBayrdV4:J9aisqrVByQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zZ8OBayrdV4:J9aisqrVByQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zZ8OBayrdV4:J9aisqrVByQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zZ8OBayrdV4:J9aisqrVByQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zZ8OBayrdV4:J9aisqrVByQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zZ8OBayrdV4:J9aisqrVByQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zZ8OBayrdV4:J9aisqrVByQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2651422201601158135
title: Forcing Self-Service Password Reset (SSPR) Registration to Increase ROI
uri: Forcing-Self-Service-Password-Reset-(SSPR)-Registration-to-Increase-RO
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2651422201601158135
content:
When your organization invests in a new product or service, it is essential that you take advantage of all the features it has to offer. This will help you to maximize your return on investment (ROI). If you have purchased or are thinking about purchasing a self-service password reset (SSPR) tool, one of the most important things you will need to do is make sure that 100% of users are registered<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KLCnlUNmIGE:lEGCNOSgzr8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KLCnlUNmIGE:lEGCNOSgzr8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KLCnlUNmIGE:lEGCNOSgzr8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KLCnlUNmIGE:lEGCNOSgzr8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KLCnlUNmIGE:lEGCNOSgzr8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KLCnlUNmIGE:lEGCNOSgzr8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KLCnlUNmIGE:lEGCNOSgzr8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KLCnlUNmIGE:lEGCNOSgzr8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7339609135349053351
title: Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers
uri: Black-Kingdom-Ransomware-Hunting-Unpatched-Microsoft-Exchange-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7339609135349053351
content:
More than a week after Microsoft released a one-click mitigation tool to mitigate cyberattacks targeting on-premises Exchange servers, the company disclosed that patches have been applied to 92% of all internet-facing servers affected by the ProxyLogon vulnerabilities.
The development, a 43% improvement from the previous week, caps off a whirlwind of espionage and malware campaigns that hit <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gpZG_Qu02c:VG-LqsDitNE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gpZG_Qu02c:VG-LqsDitNE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gpZG_Qu02c:VG-LqsDitNE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9gpZG_Qu02c:VG-LqsDitNE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gpZG_Qu02c:VG-LqsDitNE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9gpZG_Qu02c:VG-LqsDitNE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9gpZG_Qu02c:VG-LqsDitNE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9gpZG_Qu02c:VG-LqsDitNE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5757928771012992193
title: Another Critical RCE Flaw Discovered in SolarWinds Orion Platform
uri: Another-Critical-RCE-Flaw-Discovered-in-SolarWinds-Orion-Platform
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5757928771012992193
content:
IT infrastructure management provider SolarWinds on Thursday released a new update to its Orion networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be exploited by an authenticated attacker to achieve remote code execution (RCE).
Chief among them is a JSON deserialization flaw that allows an authenticated user to execute arbitrary code via <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGekw-vTDig:hrx3c8L_SWM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGekw-vTDig:hrx3c8L_SWM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGekw-vTDig:hrx3c8L_SWM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGekw-vTDig:hrx3c8L_SWM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGekw-vTDig:hrx3c8L_SWM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGekw-vTDig:hrx3c8L_SWM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NGekw-vTDig:hrx3c8L_SWM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NGekw-vTDig:hrx3c8L_SWM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7814707113355247140
title: New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks
uri: New-5G-Flaw-Exposes-Priority-Networks-to-Location-Tracking-and-Other-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7814707113355247140
content:
New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between different network slices on a mobile operator's 5G network.
AdaptiveMobile shared its findings with the GSM Association (GSMA) on February 4, 2021, following which the weaknesses were <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i-QzgWDishU:tXihtwmaGK4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i-QzgWDishU:tXihtwmaGK4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i-QzgWDishU:tXihtwmaGK4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i-QzgWDishU:tXihtwmaGK4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i-QzgWDishU:tXihtwmaGK4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i-QzgWDishU:tXihtwmaGK4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i-QzgWDishU:tXihtwmaGK4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i-QzgWDishU:tXihtwmaGK4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4845312624544603254
title: OpenSSL Releases Patches for 2 High-Severity Security Vulnerabilities
uri: OpenSSL-Releases-Patches-for-2-High-Severity-Security-Vulnerabilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4845312624544603254
content:
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS) attacks and bypass certificate verification.
Tracked as CVE-2021-3449 and CVE-2021-3450, both the vulnerabilities have been resolved in an update (version OpenSSL 1.1.1k) released on Thursday. While CVE-2021-3449 affects all OpenSSL <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6GpLb1eYkLo:0_EKSWLdy2k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6GpLb1eYkLo:0_EKSWLdy2k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6GpLb1eYkLo:0_EKSWLdy2k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6GpLb1eYkLo:0_EKSWLdy2k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6GpLb1eYkLo:0_EKSWLdy2k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6GpLb1eYkLo:0_EKSWLdy2k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6GpLb1eYkLo:0_EKSWLdy2k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6GpLb1eYkLo:0_EKSWLdy2k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8169142047591202868
title: Watch Out! That Android System Update May Contain A Powerful Spyware
uri: Watch-Out-That-Android-System-Update-May-Contain-A-Powerful-Spyware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8169142047591202868
content:
Researchers have discovered a new information-stealing trojan, which targets Android devices with an onslaught of data-exfiltration capabilities — from collecting browser searches to recording audio and phone calls.
While malware on Android has previously taken the guise of copycat apps, which go under names similar to legitimate pieces of software, this sophisticated new malicious app <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sc5Jk2R4HqI:0FqOyMf0Xzk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sc5Jk2R4HqI:0FqOyMf0Xzk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sc5Jk2R4HqI:0FqOyMf0Xzk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sc5Jk2R4HqI:0FqOyMf0Xzk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sc5Jk2R4HqI:0FqOyMf0Xzk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sc5Jk2R4HqI:0FqOyMf0Xzk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sc5Jk2R4HqI:0FqOyMf0Xzk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sc5Jk2R4HqI:0FqOyMf0Xzk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5921817636742786973
title: Apple Issues Urgent Patch Update for Another Zero‑Day Under Attack
uri: Apple-Issues-Urgent-Patch-Update-for-Another-Zero-Day-Under-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5921817636742786973
content:
Merely weeks after releasing out-of-band patches for iOS, iPadOS, macOS and watchOS, Apple has issued yet another security update for iPhone, iPad, and Apple Watch to fix a critical zero-day weakness that it says is being actively exploited in the wild.
Tracked as CVE-2021-1879, the vulnerability relates to a WebKit flaw that could enable adversaries to process maliciously crafted web content <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xR_aHfkOkh4:FHf8OyOy-Yw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xR_aHfkOkh4:FHf8OyOy-Yw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xR_aHfkOkh4:FHf8OyOy-Yw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xR_aHfkOkh4:FHf8OyOy-Yw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xR_aHfkOkh4:FHf8OyOy-Yw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xR_aHfkOkh4:FHf8OyOy-Yw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xR_aHfkOkh4:FHf8OyOy-Yw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xR_aHfkOkh4:FHf8OyOy-Yw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7956171644504137608
title: PHP's Git Server Hacked to Insert Secret Backdoor to Its Source code
uri: PHP-s-Git-Server-Hacked-to-Insert-Secret-Backdoor-to-Its-Source-code
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7956171644504137608
content:
In yet another instance of a software supply chain attack, someone hacked the official Git server of the PHP programming language and pushed unauthorized updates to insert a secret backdoor into its source code.
The two malicious commits were pushed to the self-hosted "php-src" repository hosted on the git.php.net server, illicitly using the names of Rasmus Lerdorf, the author of the programming<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TvkgDL4f7dk:5zWswHMKBFE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TvkgDL4f7dk:5zWswHMKBFE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TvkgDL4f7dk:5zWswHMKBFE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TvkgDL4f7dk:5zWswHMKBFE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TvkgDL4f7dk:5zWswHMKBFE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TvkgDL4f7dk:5zWswHMKBFE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TvkgDL4f7dk:5zWswHMKBFE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TvkgDL4f7dk:5zWswHMKBFE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7902203358525882475
title: New Bugs Could Let Hackers Bypass Spectre Attack Mitigations On Linux Systems
uri: New-Bugs-Could-Let-Hackers-Bypass-Spectre-Attack-Mitigations-On-Linux
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7902203358525882475
content:
Cybersecurity researchers on Monday disclosed two new vulnerabilities in Linux-based operating systems that, if successfully exploited, could let attackers circumvent mitigations for speculative attacks such as Spectre and obtain sensitive information from kernel memory.
Discovered by Piotr Krysiuk of Symantec's Threat Hunter team, the flaws — tracked as CVE-2020-27170 and CVE-2020-27171 (CVSS <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ubnH9EGr4lY:9jR6iYZ451s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ubnH9EGr4lY:9jR6iYZ451s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ubnH9EGr4lY:9jR6iYZ451s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ubnH9EGr4lY:9jR6iYZ451s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ubnH9EGr4lY:9jR6iYZ451s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ubnH9EGr4lY:9jR6iYZ451s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ubnH9EGr4lY:9jR6iYZ451s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ubnH9EGr4lY:9jR6iYZ451s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4872321614100134004
title: How to Effectively Prevent Email Spoofing Attacks in 2021?
uri: How-to-Effectively-Prevent-Email-Spoofing-Attacks-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4872321614100134004
content:
Email spoofing is a growing problem for an organization's security. Spoofing occurs when a hacker sends an email that appears to have been sent from a trusted source/domain. Email spoofing is not a new concept. Defined as "the forgery of an email address header to make the message appear as if it was sent from a person or location other than the actual sender," it has plagued brands for decades.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AADBv4YIjM:9io9tOXhVx8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AADBv4YIjM:9io9tOXhVx8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AADBv4YIjM:9io9tOXhVx8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5AADBv4YIjM:9io9tOXhVx8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AADBv4YIjM:9io9tOXhVx8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5AADBv4YIjM:9io9tOXhVx8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5AADBv4YIjM:9io9tOXhVx8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5AADBv4YIjM:9io9tOXhVx8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6698452776091239560
title: Flaws in Ovarro TBox RTUs Could Open Industrial Systems to Remote Attacks
uri: Flaws-in-Ovarro-TBox-RTUs-Could-Open-Industrial-Systems-to-Remote-Atta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6698452776091239560
content:
As many as five vulnerabilities have been uncovered in Ovarro's TBox remote terminal units (RTUs) that, if left unpatched, could open the door for escalating attacks against critical infrastructures, like remote code execution and denial-of-service.
"Successful exploitation of these vulnerabilities could result in remote code execution, which may cause a denial-of-service condition," the U.S. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vErPzoJgNQk:JoRKz4zvJrs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vErPzoJgNQk:JoRKz4zvJrs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vErPzoJgNQk:JoRKz4zvJrs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vErPzoJgNQk:JoRKz4zvJrs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vErPzoJgNQk:JoRKz4zvJrs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vErPzoJgNQk:JoRKz4zvJrs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vErPzoJgNQk:JoRKz4zvJrs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vErPzoJgNQk:JoRKz4zvJrs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5884277395700500266
title: MobiKwik Suffers Major Breach — KYC Data of 3.5 Million Users Exposed
uri: MobiKwik-Suffers-Major-Breach-KYC-Data-of-3-5-Million-Users-Expose
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5884277395700500266
content:
Popular Indian mobile payments service MobiKwik on Monday came under fire after 8.2 terabytes (TB) of data belonging to millions of its users began circulating on the dark web in the aftermath of a major data breach that came to light earlier this month.
The leaked data includes sensitive personal information such as:customer names,hashed passwords,email addresses,residential addresses,GPS <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WeIZsd2S4g:ZHYT2T05ysE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WeIZsd2S4g:ZHYT2T05ysE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WeIZsd2S4g:ZHYT2T05ysE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1WeIZsd2S4g:ZHYT2T05ysE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WeIZsd2S4g:ZHYT2T05ysE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1WeIZsd2S4g:ZHYT2T05ysE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1WeIZsd2S4g:ZHYT2T05ysE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1WeIZsd2S4g:ZHYT2T05ysE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6262947071291453428
title: Hackers are implanting multiple backdoors at industrial targets in Japan
uri: Hackers-are-implanting-multiple-backdoors-at-industrial-targets-in-Jap
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6262947071291453428
content:
Cybersecurity researchers on Tuesday disclosed details of a sophisticated campaign that deploys malicious backdoors for the purpose of exfiltrating information from a number of industry sectors located in Japan.
Dubbed "A41APT" by Kaspersky researchers, the findings delve into a new slew of attacks undertaken by APT10 (aka Stone Panda or Cicada) using previously undocumented malware to deliver <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M8y5bq-NcEM:xE7Td31CsSE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M8y5bq-NcEM:xE7Td31CsSE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M8y5bq-NcEM:xE7Td31CsSE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M8y5bq-NcEM:xE7Td31CsSE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M8y5bq-NcEM:xE7Td31CsSE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M8y5bq-NcEM:xE7Td31CsSE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M8y5bq-NcEM:xE7Td31CsSE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M8y5bq-NcEM:xE7Td31CsSE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4597858992847427752
title: Decided to move on from your NGAV/EDR? A Guide for Small Security Teams to What's Next
uri: Decided-to-move-on-from-your-NGAV-EDR-A-Guide-for-Small-Security-Team
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4597858992847427752
content:
You're fully aware of the need to stop threats at the front door and then hunt any that got through that first gate, so your company installed an EPP/ EDR solution.
But like most companies, you've already come across its shortcoming – and these are amplified since you have a small security team. More than likely, you noticed that it has its share of detection blind spots and limitations for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cUJy-mah6Yo:DuVGj0PMJPA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cUJy-mah6Yo:DuVGj0PMJPA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cUJy-mah6Yo:DuVGj0PMJPA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cUJy-mah6Yo:DuVGj0PMJPA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cUJy-mah6Yo:DuVGj0PMJPA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cUJy-mah6Yo:DuVGj0PMJPA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cUJy-mah6Yo:DuVGj0PMJPA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cUJy-mah6Yo:DuVGj0PMJPA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-315776057727703626
title: Hackers Set Up a Fake Cybersecurity Firm to Target Security Experts
uri: Hackers-Set-Up-a-Fake-Cybersecurity-Firm-to-Target-Security-Experts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/315776057727703626
content:
A North Korean government-backed campaign targeting cybersecurity researchers with malware has re-emerged with new tactics in their arsenal as part of a fresh social engineering attack.
In an update shared on Wednesday, Google's Threat Analysis Group said the attackers behind the operation set up a fake security company called SecuriElite and a slew of social media accounts across Twitter and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UAlf3w8WGrg:nSU0GEfuScI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UAlf3w8WGrg:nSU0GEfuScI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UAlf3w8WGrg:nSU0GEfuScI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UAlf3w8WGrg:nSU0GEfuScI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UAlf3w8WGrg:nSU0GEfuScI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UAlf3w8WGrg:nSU0GEfuScI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UAlf3w8WGrg:nSU0GEfuScI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UAlf3w8WGrg:nSU0GEfuScI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6897446893646717016
title: 22-Year-Old Charged With Hacking Water System and Endangering Lives
uri: 22-Year-Old-Charged-With-Hacking-Water-System-and-Endangering-Lives
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6897446893646717016
content:
A 22-year-old man from the U.S. state of Kansas has been indicted on charges that he unauthorizedly accessed a public water facility's computer system, jeopardizing the residents' safety and health in the local community.
Wyatt A. Travnichek, 22, of Ellsworth County, Kansas, has been charged with one count of tampering with a public water system and one count of reckless damage to a protected <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=irlhrQ6fjFA:924l45VGriA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=irlhrQ6fjFA:924l45VGriA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=irlhrQ6fjFA:924l45VGriA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=irlhrQ6fjFA:924l45VGriA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=irlhrQ6fjFA:924l45VGriA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=irlhrQ6fjFA:924l45VGriA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=irlhrQ6fjFA:924l45VGriA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=irlhrQ6fjFA:924l45VGriA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7903238800708081695
title: How to Vaccinate Against the Poor Password Policy Pandemic
uri: How-to-Vaccinate-Against-the-Poor-Password-Policy-Pandemic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7903238800708081695
content:
Data breaches remain a constant threat, and no industry or organization is immune from the risks. From Fortune 500 companies to startups, password-related breaches continue to spread seemingly unchecked.
As a result of the volume of data breaches and cybersecurity incidents, hackers now have access to a vast swathe of credentials that they can use to power various password-related attacks.
One <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yzK7xcn7LU:NL0jDugSWkA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yzK7xcn7LU:NL0jDugSWkA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yzK7xcn7LU:NL0jDugSWkA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_yzK7xcn7LU:NL0jDugSWkA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yzK7xcn7LU:NL0jDugSWkA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_yzK7xcn7LU:NL0jDugSWkA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_yzK7xcn7LU:NL0jDugSWkA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_yzK7xcn7LU:NL0jDugSWkA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5691018033427331066
title: Hackers Using a Windows OS Feature to Evade Firewall and Gain Persistence
uri: Hackers-Using-a-Windows-OS-Feature-to-Evade-Firewall-and-Gain-Persiste
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5691018033427331066
content:
A novel technique adopted by attackers finds ways to use Microsoft's Background Intelligent Transfer Service (BITS) so as to deploy malicious payloads on Windows machines stealthily.
In 2020, hospitals, retirement communities, and medical centers bore the brunt of an ever-shifting phishing campaign that distributed custom backdoors such as KEGTAP, which ultimately paved the way for RYUK <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1wlTtxM0c_U:6kD2H_6Njb8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1wlTtxM0c_U:6kD2H_6Njb8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1wlTtxM0c_U:6kD2H_6Njb8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1wlTtxM0c_U:6kD2H_6Njb8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1wlTtxM0c_U:6kD2H_6Njb8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1wlTtxM0c_U:6kD2H_6Njb8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1wlTtxM0c_U:6kD2H_6Njb8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1wlTtxM0c_U:6kD2H_6Njb8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4809897701937351140
title: DeepDotWeb Admin Pleads Guilty to Money Laundering Charges
uri: DeepDotWeb-Admin-Pleads-Guilty-to-Money-Laundering-Charges
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4809897701937351140
content:
The U.S. Department of Justice (DoJ) on Wednesday said that an Israeli national pleaded guilty for his role as an "administrator" of a portal called DeepDotWeb (DDW), a "news" website that "served as a gateway to numerous dark web marketplaces."
According to the unsealed court documents, Tal Prihar, 37, an Israeli citizen residing in Brazil, operated DDW alongside Michael Phan, 34, of Israel, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jDMXf3h3vwc:5UexjBHGOD8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jDMXf3h3vwc:5UexjBHGOD8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jDMXf3h3vwc:5UexjBHGOD8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jDMXf3h3vwc:5UexjBHGOD8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jDMXf3h3vwc:5UexjBHGOD8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jDMXf3h3vwc:5UexjBHGOD8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jDMXf3h3vwc:5UexjBHGOD8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jDMXf3h3vwc:5UexjBHGOD8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3939885601258848398
title: How Cyrebro Can Unify Multiple Cybersecurity Defenses to Optimize Protection
uri: How-Cyrebro-Can-Unify-Multiple-Cybersecurity-Defenses-to-Optimize-Prot
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3939885601258848398
content:
Many enterprises rely on more than one security tool to protect their technology assets, devices, and networks. This is particularly true for organizations that use hybrid systems or a combination of cloud and local applications. Likewise, companies whose networks include a multitude of smartphones and IoT devices are likely to deploy multiple security solutions suitable for different scenarios.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TcNJi30SmF8:VNYVnHQtrFg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TcNJi30SmF8:VNYVnHQtrFg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TcNJi30SmF8:VNYVnHQtrFg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TcNJi30SmF8:VNYVnHQtrFg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TcNJi30SmF8:VNYVnHQtrFg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TcNJi30SmF8:VNYVnHQtrFg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TcNJi30SmF8:VNYVnHQtrFg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TcNJi30SmF8:VNYVnHQtrFg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8156341425037416510
title: Google limits which apps can access the list of installed apps on your device
uri: Google-limits-which-apps-can-access-the-list-of-installed-apps-on-your
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8156341425037416510
content:
Apps on Android have been able to infer the presence of specific apps, or even collect the full list of installed apps on the device. What's more, an app can also set to be notified when a new app is installed.
Apart from all the usual concerns about misuse of such a data grab, the information can be abused by a potentially harmful app to fingerprint other installed apps, check for the presence <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y023qY0rWLQ:U4TmDl6j6wM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y023qY0rWLQ:U4TmDl6j6wM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y023qY0rWLQ:U4TmDl6j6wM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y023qY0rWLQ:U4TmDl6j6wM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y023qY0rWLQ:U4TmDl6j6wM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y023qY0rWLQ:U4TmDl6j6wM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y023qY0rWLQ:U4TmDl6j6wM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y023qY0rWLQ:U4TmDl6j6wM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7585261299724031393
title: 533 Million Facebook Users' Phone Numbers and Personal Data Leaked Online
uri: 533-Million-Facebook-Users-Phone-Numbers-and-Personal-Data-Leaked-Onl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7585261299724031393
content:
In what's likely to be a goldmine for bad actors, personal information associated with approximately 533 million Facebook users worldwide has been leaked on a popular cybercrime forum for free—which was harvested by hackers in 2019 using a Facebook vulnerability.
The leaked data includes full names, Facebook IDs, mobile numbers, locations, email addresses, gender, occupation, city, country, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZlP1eei4dw:_KFRHhM4EJQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZlP1eei4dw:_KFRHhM4EJQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZlP1eei4dw:_KFRHhM4EJQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nZlP1eei4dw:_KFRHhM4EJQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZlP1eei4dw:_KFRHhM4EJQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nZlP1eei4dw:_KFRHhM4EJQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nZlP1eei4dw:_KFRHhM4EJQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nZlP1eei4dw:_KFRHhM4EJQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9203076548076127651
title: How the Work-From-Home Shift Impacts SaaS Security
uri: How-the-Work-From-Home-Shift-Impacts-SaaS-Security
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9203076548076127651
content:
The data is in. According to IBM Security's 2020 Cost of a Data Breach Report, there is a 50% increase in cloud usage for enterprises across all industries. The number of threats targeting cloud services, predominantly collaboration services like Office 365,hasi ncreased 630%.
Moreover, 75% of respondents report that discovery and recovery time from data breaches has significantly increased due <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHKqS9VD5z0:dvxvIf-JTiU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHKqS9VD5z0:dvxvIf-JTiU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHKqS9VD5z0:dvxvIf-JTiU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wHKqS9VD5z0:dvxvIf-JTiU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHKqS9VD5z0:dvxvIf-JTiU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wHKqS9VD5z0:dvxvIf-JTiU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHKqS9VD5z0:dvxvIf-JTiU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wHKqS9VD5z0:dvxvIf-JTiU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3710504217651592903
title: Hackers Targeting professionals With 'more_eggs' Malware via LinkedIn Job Offers
uri: Hackers-Targeting-professionals-With-more_eggs-Malware-via-LinkedIn
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3710504217651592903
content:
A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called "more_eggs."
To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the same name as that of the victims' job titles taken from their LinkedIn profiles.
"For example, if the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VAkqTu6syGo:QF5MuBpjABk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VAkqTu6syGo:QF5MuBpjABk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VAkqTu6syGo:QF5MuBpjABk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VAkqTu6syGo:QF5MuBpjABk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VAkqTu6syGo:QF5MuBpjABk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VAkqTu6syGo:QF5MuBpjABk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VAkqTu6syGo:QF5MuBpjABk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VAkqTu6syGo:QF5MuBpjABk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8017581865096344378
title: Hackers From China Target Vietnamese Military and Government
uri: Hackers-From-China-Target-Vietnamese-Military-and-Government
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8017581865096344378
content:
A hacking group related to a Chinese-speaking threat actor has been linked to an advanced cyberespionage campaign targeting government and military organizations in Vietnam.
The attacks have been attributed with low confidence to the advanced persistent threat (APT) called Cycldek (or Goblin Panda, Hellsing, APT 27, and Conimes), which is known for using spear-phishing techniques to compromise <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yRLDSpQms2c:u-mk253vHhM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yRLDSpQms2c:u-mk253vHhM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yRLDSpQms2c:u-mk253vHhM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yRLDSpQms2c:u-mk253vHhM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yRLDSpQms2c:u-mk253vHhM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yRLDSpQms2c:u-mk253vHhM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yRLDSpQms2c:u-mk253vHhM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yRLDSpQms2c:u-mk253vHhM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5053473461983628558
title: MITRE Madness: A Guide to Weathering the Upcoming Vendor Positioning Storm
uri: MITRE-Madness-A-Guide-to-Weathering-the-Upcoming-Vendor-Positioning-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5053473461983628558
content:
April is usually a whirlwind month for the cybersecurity industry as it coincides with the release of the highly regarded and influential MITRE ATT&amp;CK test results. The ATT&amp;CK test measures cybersecurity platforms' abilities to detect and react to emulated, multistep attacks that can be used as a barometer of platform effectiveness. 
This means that every cybersecurity vendor will be tripping <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NfKdI57H5aA:VZE1MoYrPaE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NfKdI57H5aA:VZE1MoYrPaE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NfKdI57H5aA:VZE1MoYrPaE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NfKdI57H5aA:VZE1MoYrPaE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NfKdI57H5aA:VZE1MoYrPaE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NfKdI57H5aA:VZE1MoYrPaE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NfKdI57H5aA:VZE1MoYrPaE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NfKdI57H5aA:VZE1MoYrPaE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7071780274617543186
title: Watch Out! Mission Critical SAP Applications Are Under Active Attack
uri: Watch-Out-Mission-Critical-SAP-Applications-Are-Under-Active-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7071780274617543186
content:
Cyber attackers are actively setting their sights on unsecured SAP applications in an attempt to steal information and sabotage critical processes, according to new research.
"Observed exploitation could lead in many cases to full control of the unsecured SAP application, bypassing common security and compliance controls, and enabling attackers to steal sensitive information, perform financial <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ss-fNmj9p2Q:0mJl29L3-7c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ss-fNmj9p2Q:0mJl29L3-7c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ss-fNmj9p2Q:0mJl29L3-7c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ss-fNmj9p2Q:0mJl29L3-7c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ss-fNmj9p2Q:0mJl29L3-7c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ss-fNmj9p2Q:0mJl29L3-7c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ss-fNmj9p2Q:0mJl29L3-7c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ss-fNmj9p2Q:0mJl29L3-7c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6820540332075063858
title: Critical Auth Bypass Bug Found in VMWare Data Centre Security Product
uri: Critical-Auth-Bypass-Bug-Found-in-VMWare-Data-Centre-Security-Product
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6820540332075063858
content:
A critical vulnerability in the VMware Carbon Black Cloud Workload appliance could be exploited to bypass authentication and take control of vulnerable systems.
Tracked as CVE-2021-21982, the flaw is rated 9.1 out of a maximum of 10 in the CVSS scoring system and affects all versions of the product prior to 1.0.1. 
Carbon Black Cloud Workload is a data center security product from VMware that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XlxXgXJA31s:XfSDDZZtqi0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XlxXgXJA31s:XfSDDZZtqi0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XlxXgXJA31s:XfSDDZZtqi0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XlxXgXJA31s:XfSDDZZtqi0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XlxXgXJA31s:XfSDDZZtqi0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XlxXgXJA31s:XfSDDZZtqi0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XlxXgXJA31s:XfSDDZZtqi0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XlxXgXJA31s:XfSDDZZtqi0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1284032212221398162
title: Pre-Installed Malware Dropper Found On German Gigaset Android Phones
uri: Pre-Installed-Malware-Dropper-Found-On-German-Gigaset-Android-Phones
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1284032212221398162
content:
In what appears to be a fresh twist in Android malware, users of Gigaset mobile devices are encountering unwanted apps that are being downloaded and installed through a pre-installed system update app.
"The culprit installing these malware apps is the Update app, package name com.redstone.ota.ui, which is a pre-installed system app," Malwarebytes researcher Nathan Collier said. "This app is not <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xtKZieC-9R8:HphnPMSLDSs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xtKZieC-9R8:HphnPMSLDSs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xtKZieC-9R8:HphnPMSLDSs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xtKZieC-9R8:HphnPMSLDSs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xtKZieC-9R8:HphnPMSLDSs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xtKZieC-9R8:HphnPMSLDSs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xtKZieC-9R8:HphnPMSLDSs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xtKZieC-9R8:HphnPMSLDSs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-713027772429385592
title: Experts uncover a new Banking Trojan targeting Latin American users
uri: Experts-uncover-a-new-Banking-Trojan-targeting-Latin-American-users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/713027772429385592
content:
Researchers on Tuesday revealed details of a new banking trojan targeting corporate users in Brazil at least since 2019 across various sectors such as engineering, healthcare, retail, manufacturing, finance, transportation, and government.
Dubbed "Janeleiro" by Slovak cybersecurity firm ESET, the malware aims to disguise its true intent via lookalike pop-up windows that are designed to resemble <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9zERzM6xf90:sBQFja1BN0s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9zERzM6xf90:sBQFja1BN0s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9zERzM6xf90:sBQFja1BN0s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9zERzM6xf90:sBQFja1BN0s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9zERzM6xf90:sBQFja1BN0s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9zERzM6xf90:sBQFja1BN0s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9zERzM6xf90:sBQFja1BN0s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9zERzM6xf90:sBQFja1BN0s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5799709775754056243
title: 11 Useful Security Tips for Securing Your AWS Environment
uri: 11-Useful-Security-Tips-for-Securing-Your-AWS-Environment
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5799709775754056243
content:
Want to take advantage of excellent cloud services? Amazon Web Services may be the perfect solution, but don't forget about AWS security.
Whether you want to use AWS for a few things or everything, you need to protect access to it. Then you can make sure your business can run smoothly.
Read on to learn some important AWS security tips.
Use Multi-Factor authentication
When setting up your AWS <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6UPpSi73zg8:A3gaAgkgoJA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6UPpSi73zg8:A3gaAgkgoJA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6UPpSi73zg8:A3gaAgkgoJA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6UPpSi73zg8:A3gaAgkgoJA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6UPpSi73zg8:A3gaAgkgoJA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6UPpSi73zg8:A3gaAgkgoJA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6UPpSi73zg8:A3gaAgkgoJA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6UPpSi73zg8:A3gaAgkgoJA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7698552885346809924
title: WhatsApp-based wormable Android malware spotted on the Google Play Store
uri: WhatsApp-based-wormable-Android-malware-spotted-on-the-Google-Play-Sto
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7698552885346809924
content:
Cybersecurity researchers have discovered yet another piece of wormable Android malware—but this time downloadable directly from the official Google Play Store—that's capable of propagating via WhatsApp messages.
Disguised as a rogue Netflix app under the name of "FlixOnline," the malware comes with features that allow it to automatically reply to a victim's incoming WhatsApp messages with a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0QL0J7LsNsU:P0zh-1fE0F4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0QL0J7LsNsU:P0zh-1fE0F4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0QL0J7LsNsU:P0zh-1fE0F4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0QL0J7LsNsU:P0zh-1fE0F4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0QL0J7LsNsU:P0zh-1fE0F4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0QL0J7LsNsU:P0zh-1fE0F4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0QL0J7LsNsU:P0zh-1fE0F4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0QL0J7LsNsU:P0zh-1fE0F4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7919915559509032364
title: Android to Support Rust Programming Language to Prevent Memory Flaws
uri: Android-to-Support-Rust-Programming-Language-to-Prevent-Memory-Flaws
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7919915559509032364
content:
Google on Tuesday announced that its open source version of the Android operating system will add support for Rust programming language in a bid to prevent memory safety bugs.
To that end, the company has been building parts of the Android Open Source Project (AOSP) with Rust for the past 18 months, with plans in the pipeline to scale this initiative to cover more aspects of the operating system<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AcKUYiQTRwE:FLXfnzwMJKg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AcKUYiQTRwE:FLXfnzwMJKg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AcKUYiQTRwE:FLXfnzwMJKg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AcKUYiQTRwE:FLXfnzwMJKg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AcKUYiQTRwE:FLXfnzwMJKg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AcKUYiQTRwE:FLXfnzwMJKg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AcKUYiQTRwE:FLXfnzwMJKg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AcKUYiQTRwE:FLXfnzwMJKg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7103739031986634738
title: PHP Site's User Database Was Hacked In Recent Source Code Backdoor Attack
uri: PHP-Site-s-User-Database-Was-Hacked-In-Recent-Source-Code-Backdoor-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7103739031986634738
content:
The maintainers of the PHP programming language have issued an update regarding the security incident that came to light late last month, stating that the actors may have gotten hold of a user database containing their passwords to make unauthorized changes to the repository.
"We no longer believe the git.php.net server has been compromised. However, it is possible that the master.php.net user <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=__u9zz5iI6c:4-GgW5zw7Kg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=__u9zz5iI6c:4-GgW5zw7Kg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=__u9zz5iI6c:4-GgW5zw7Kg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=__u9zz5iI6c:4-GgW5zw7Kg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=__u9zz5iI6c:4-GgW5zw7Kg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=__u9zz5iI6c:4-GgW5zw7Kg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=__u9zz5iI6c:4-GgW5zw7Kg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=__u9zz5iI6c:4-GgW5zw7Kg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8767111681626748438
title: Researchers uncover a new Iranian malware used in recent cyberattacks
uri: Researchers-uncover-a-new-Iranian-malware-used-in-recent-cyberattacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8767111681626748438
content:
An Iranian threat actor has unleashed a new cyberespionage campaign against a possible Lebanese target with a backdoor capable of exfiltrating sensitive information from compromised systems.
Cybersecurity firm Check Point attributed the operation to APT34, citing similarities with previous techniques used by the threat actor as well as based on its pattern of victimology.
APT34 (aka OilRig) is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hz96-cUbfVk:5oG_EuMCqPA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hz96-cUbfVk:5oG_EuMCqPA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hz96-cUbfVk:5oG_EuMCqPA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hz96-cUbfVk:5oG_EuMCqPA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hz96-cUbfVk:5oG_EuMCqPA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hz96-cUbfVk:5oG_EuMCqPA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hz96-cUbfVk:5oG_EuMCqPA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hz96-cUbfVk:5oG_EuMCqPA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6902979313205357026
title: Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets
uri: Hackers-Exploit-Unpatched-VPNs-to-Install-Ransomware-on-Industrial-Tar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6902979313205357026
content:
Unpatched Fortinet VPN devices are being targeted in a series of attacks against industrial enterprises in Europe to deploy a new strain of ransomware called "Cring" inside corporate networks.
At least one of the hacking incidents led to the temporary shutdown of a production site, said cybersecurity firm Kaspersky in a report published on Wednesday, without publicly naming the victim.
The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=beu4xIOf1T8:jlo3BxdDsuc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=beu4xIOf1T8:jlo3BxdDsuc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=beu4xIOf1T8:jlo3BxdDsuc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=beu4xIOf1T8:jlo3BxdDsuc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=beu4xIOf1T8:jlo3BxdDsuc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=beu4xIOf1T8:jlo3BxdDsuc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=beu4xIOf1T8:jlo3BxdDsuc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=beu4xIOf1T8:jlo3BxdDsuc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3855282658034447651
title: NIST and HIPAA: Is There a Password Connection?
uri: NIST-and-HIPAA-Is-There-a-Password-Connection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3855282658034447651
content:
When dealing with user data, it's essential that we design our password policies around compliance. These policies are defined both internally and externally.
While companies uphold their own password standards, outside forces like HIPAA and NIST have a heavy influence. Impacts are defined by industry and one's unique infrastructure. How do IT departments maintain compliance with NIST and HIPAA?<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wIpPed6ruFE:UWLPQ4cv5zQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wIpPed6ruFE:UWLPQ4cv5zQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wIpPed6ruFE:UWLPQ4cv5zQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wIpPed6ruFE:UWLPQ4cv5zQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wIpPed6ruFE:UWLPQ4cv5zQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wIpPed6ruFE:UWLPQ4cv5zQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wIpPed6ruFE:UWLPQ4cv5zQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wIpPed6ruFE:UWLPQ4cv5zQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5848116265622297196
title: Cisco Will Not Patch Critical RCE Flaw Affecting End-of-Life Business Routers
uri: Cisco-Will-Not-Patch-Critical-RCE-Flaw-Affecting-End-of-Life-Business
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5848116265622297196
content:
Networking equipment major Cisco Systems has said it does not plan to fix a critical security vulnerability affecting some of its Small Business routers, instead urging users to replace the devices.
The bug, tracked as CVE-2021-1459, is rated with a CVSS score of 9.8 out of 10, and affects RV110W VPN firewall and Small Business RV130, RV130W, and RV215W routers, allowing an unauthenticated, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XoACclVN3nU:A-egZ-s2XIs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XoACclVN3nU:A-egZ-s2XIs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XoACclVN3nU:A-egZ-s2XIs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XoACclVN3nU:A-egZ-s2XIs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XoACclVN3nU:A-egZ-s2XIs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XoACclVN3nU:A-egZ-s2XIs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XoACclVN3nU:A-egZ-s2XIs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XoACclVN3nU:A-egZ-s2XIs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3159495675069681537
title: Gigaset Android Update Server Hacked to Install Malware on Users' Devices
uri: Gigaset-Android-Update-Server-Hacked-to-Install-Malware-on-Users-Devi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3159495675069681537
content:
Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider.
Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 (plus), and GS370 (plus) series — the malware took the form of multiple unwanted apps that were downloaded and installed through a pre-installed system update <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGtF30YKp_w:e8tgaASUboo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGtF30YKp_w:e8tgaASUboo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGtF30YKp_w:e8tgaASUboo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OGtF30YKp_w:e8tgaASUboo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGtF30YKp_w:e8tgaASUboo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OGtF30YKp_w:e8tgaASUboo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OGtF30YKp_w:e8tgaASUboo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OGtF30YKp_w:e8tgaASUboo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1570728813837284582
title: Alert — There's A New Malware Out There Snatching Users' Passwords
uri: Alert-There-s-A-New-Malware-Out-There-Snatching-Users-Passwords
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1570728813837284582
content:
A previously undocumented malware downloader has been spotted in the wild in phishing attacks to deploy credential stealers and other malicious payloads.
Dubbed "Saint Bot," the malware is said to have first appeared on the scene in January 2021, with indications that it's under active development.
"Saint Bot is a downloader that appeared quite recently, and slowly is getting momentum. It was <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qp1Nruco_Oc:gGmiwR3UgPE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qp1Nruco_Oc:gGmiwR3UgPE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qp1Nruco_Oc:gGmiwR3UgPE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qp1Nruco_Oc:gGmiwR3UgPE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qp1Nruco_Oc:gGmiwR3UgPE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qp1Nruco_Oc:gGmiwR3UgPE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qp1Nruco_Oc:gGmiwR3UgPE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qp1Nruco_Oc:gGmiwR3UgPE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-138018554019149864
title: [WHITEPAPER] How to Achieve CMMC Security Compliance for Your Business
uri: WHITEPAPER-How-to-Achieve-CMMC-Security-Compliance-for-Your-Business
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/138018554019149864
content:
For organizations that deal with the defense infrastructure – cybersecurity is more than just a buzzword.
Recently the US Department of Defense (DoD) created a new certification process – the Cybersecurity Maturity Model Certificate (CMMC) – to ensure that all its vendors and contractors follow established best cybersecurity practices.
For organizations that work along the DoD supply chain, this<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urjIGeyPkDI:UkFxnnt_89w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urjIGeyPkDI:UkFxnnt_89w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urjIGeyPkDI:UkFxnnt_89w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=urjIGeyPkDI:UkFxnnt_89w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urjIGeyPkDI:UkFxnnt_89w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=urjIGeyPkDI:UkFxnnt_89w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urjIGeyPkDI:UkFxnnt_89w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=urjIGeyPkDI:UkFxnnt_89w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1843873323742423455
title: Hackers Tampered With APKPure Store to Distribute Malware Apps
uri: Hackers-Tampered-With-APKPure-Store-to-Distribute-Malware-Apps
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1843873323742423455
content:
APKPure, one of the largest alternative app stores outside of the Google Play Store, was infected with malware this week, allowing threat actors to distribute Trojans to Android devices.
In an incident that's similar to that of German telecommunications equipment manufacturer Gigaset, the APKPure client version 3.17.18 is said to have been tampered with in an attempt to trick unsuspecting users <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CXDk3hukdOM:jAtXaDO-j2k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CXDk3hukdOM:jAtXaDO-j2k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CXDk3hukdOM:jAtXaDO-j2k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CXDk3hukdOM:jAtXaDO-j2k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CXDk3hukdOM:jAtXaDO-j2k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CXDk3hukdOM:jAtXaDO-j2k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CXDk3hukdOM:jAtXaDO-j2k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CXDk3hukdOM:jAtXaDO-j2k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1837003824605726851
title: Windows, Ubuntu, Zoom, Safari, MS Exchange Hacked at Pwn2Own 2021
uri: Windows-Ubuntu-Zoom-Safari-MS-Exchange-Hacked-at-Pwn2Own-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1837003824605726851
content:
The 2021 spring edition of Pwn2Own hacking contest concluded last week on April 8 with a three-way tie between Team Devcore, OV, and Computest researchers Daan Keuper and Thijs Alkemade.
A total of $1.2 million was awarded for 16 high-profile exploits over the course of the three-day virtual event organized by the Zero Day Initiative (ZDI).
Targets with successful attempts included Zoom, Apple <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TuK9jskRo3A:AMv6NnoQ-8w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TuK9jskRo3A:AMv6NnoQ-8w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TuK9jskRo3A:AMv6NnoQ-8w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TuK9jskRo3A:AMv6NnoQ-8w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TuK9jskRo3A:AMv6NnoQ-8w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TuK9jskRo3A:AMv6NnoQ-8w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TuK9jskRo3A:AMv6NnoQ-8w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TuK9jskRo3A:AMv6NnoQ-8w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3837357633391357108
title: What Does It Take To Be a Cybersecurity Researcher?
uri: What-Does-It-Take-To-Be-a-Cybersecurity-Researcher
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3837357633391357108
content:
Behind the strategies and solutions needed to counter today's cyber threats are—dedicated cybersecurity researchers. They spend their lives dissecting code and analyzing incident reports to discover how to stop the bad guys. 
But what drives these specialists? To understand the motivations for why these cybersecurity pros do what they do, we decided to talk with cybersecurity analysts from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-kUty1AlDI8:URhQ8oVQLTw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-kUty1AlDI8:URhQ8oVQLTw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-kUty1AlDI8:URhQ8oVQLTw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-kUty1AlDI8:URhQ8oVQLTw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-kUty1AlDI8:URhQ8oVQLTw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-kUty1AlDI8:URhQ8oVQLTw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-kUty1AlDI8:URhQ8oVQLTw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-kUty1AlDI8:URhQ8oVQLTw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-341293710405045117
title: Indian Brokerage Firm Upstox Suffers Data Breach Leaking 2.5 Millions Users' Data
uri: Indian-Brokerage-Firm-Upstox-Suffers-Data-Breach-Leaking-2-5-Millions
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/341293710405045117
content:
Online trading and discount brokerage platform Upstox has become the latest Indian company to suffer a security breach of its systems, resulting in the exposure of sensitive information of approximately 2.5 million users on the dark web.
The leaked information includes names, email addresses, dates of birth, bank account information, and about 56 million know your customer (KYC) documents pulled<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7qeEyWoS1pM:MreRCukxL1M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7qeEyWoS1pM:MreRCukxL1M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7qeEyWoS1pM:MreRCukxL1M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7qeEyWoS1pM:MreRCukxL1M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7qeEyWoS1pM:MreRCukxL1M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7qeEyWoS1pM:MreRCukxL1M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7qeEyWoS1pM:MreRCukxL1M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7qeEyWoS1pM:MreRCukxL1M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6376914843525152641
title: BRATA Malware Poses as Android Security Scanners on Google Play Store
uri: BRATA-Malware-Poses-as-Android-Security-Scanners-on-Google-Play-Store
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6376914843525152641
content:
A new set of malicious Android apps have been caught posing as app security scanners on the official Play Store to distribute a backdoor capable of gathering sensitive information.
"These malicious apps urge users to update Chrome, WhatsApp, or a PDF reader, yet instead of updating the app in question, they take full control of the device by abusing accessibility services," cybersecurity firm <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVz8kvM3if8:U8Q30Dq_ofM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVz8kvM3if8:U8Q30Dq_ofM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVz8kvM3if8:U8Q30Dq_ofM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cVz8kvM3if8:U8Q30Dq_ofM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVz8kvM3if8:U8Q30Dq_ofM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cVz8kvM3if8:U8Q30Dq_ofM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVz8kvM3if8:U8Q30Dq_ofM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cVz8kvM3if8:U8Q30Dq_ofM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3921999536189776120
title: RCE Exploit Released for Unpatched Chrome, Opera, and Brave Browsers
uri: RCE-Exploit-Released-for-Unpatched-Chrome-Opera-and-Brave-Browsers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3921999536189776120
content:
An Indian security researcher has publicly published a proof-of-concept (PoC) exploit code for a newly discovered flaw impacting Google Chrome and other Chromium-based browsers like Microsoft Edge, Opera, and Brave.
Released by Rajvardhan Agarwal, the working exploit concerns a remote code execution vulnerability in the V8 JavaScript rendering engine that powers the web browsers. It is believed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xnTh85fU5Rk:QSQ68yfQckM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xnTh85fU5Rk:QSQ68yfQckM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xnTh85fU5Rk:QSQ68yfQckM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xnTh85fU5Rk:QSQ68yfQckM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xnTh85fU5Rk:QSQ68yfQckM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xnTh85fU5Rk:QSQ68yfQckM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xnTh85fU5Rk:QSQ68yfQckM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xnTh85fU5Rk:QSQ68yfQckM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2298672499308939234
title: Detecting the "Next" SolarWinds-Style Cyber Attack
uri: Detecting-the-Next-SolarWinds-Style-Cyber-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2298672499308939234
content:
The SolarWinds attack, which succeeded by utilizing the sunburst malware, shocked the cyber-security industry. This attack achieved persistence and was able to evade internal systems long enough to gain access to the source code of the victim.
Because of the far-reaching SolarWinds deployments, the perpetrators were also able to infiltrate many other organizations, looking for intellectual <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E54HufS4xFI:hYy_W6NgsJ8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E54HufS4xFI:hYy_W6NgsJ8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E54HufS4xFI:hYy_W6NgsJ8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E54HufS4xFI:hYy_W6NgsJ8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E54HufS4xFI:hYy_W6NgsJ8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E54HufS4xFI:hYy_W6NgsJ8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E54HufS4xFI:hYy_W6NgsJ8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E54HufS4xFI:hYy_W6NgsJ8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1847646670473910378
title: New NAME:WRECK Vulnerabilities Impact Nearly 100 Million IoT Devices
uri: New-NAME-WRECK-Vulnerabilities-Impact-Nearly-100-Million-IoT-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1847646670473910378
content:
Security researchers have uncovered nine vulnerabilities affecting four TCP/IP stacks impacting more than 100 million consumer and enterprise devices that could be exploited by an attacker to take control of a vulnerable system.
Dubbed "NAME:WRECK" by Forescout and JSOF, the flaws are the latest in series of studies undertaken as part of an initiative called Project Memoria to study the security<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIF1NSjySrQ:uMYT3Bn4xkw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIF1NSjySrQ:uMYT3Bn4xkw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIF1NSjySrQ:uMYT3Bn4xkw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XIF1NSjySrQ:uMYT3Bn4xkw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIF1NSjySrQ:uMYT3Bn4xkw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XIF1NSjySrQ:uMYT3Bn4xkw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XIF1NSjySrQ:uMYT3Bn4xkw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XIF1NSjySrQ:uMYT3Bn4xkw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2510255639871144543
title: Hackers Using Website's Contact Forms to Deliver IcedID Malware
uri: Hackers-Using-Website-s-Contact-Forms-to-Deliver-IcedID-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2510255639871144543
content:
Microsoft has warned organizations of a "unique" attack campaign that abuses contact forms published on websites to deliver malicious links to businesses via emails containing fake legal threats, in what's yet another instance of adversaries abusing legitimate infrastructure to mount evasive campaigns that bypass security protections.
"The emails instruct recipients to click a link to review <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zVzBu5SMqGo:fbLQf7z24qA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zVzBu5SMqGo:fbLQf7z24qA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zVzBu5SMqGo:fbLQf7z24qA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zVzBu5SMqGo:fbLQf7z24qA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zVzBu5SMqGo:fbLQf7z24qA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zVzBu5SMqGo:fbLQf7z24qA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zVzBu5SMqGo:fbLQf7z24qA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zVzBu5SMqGo:fbLQf7z24qA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4141392897734951514
title: 2 New Chrome 0-Days Under Attack — Update Your Browser ASAP!
uri: 2-New-Chrome-0-Days-Under-Attack-Update-Your-Browser-ASAP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4141392897734951514
content:
Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with fixes for two security vulnerabilities, both of which it says are under active exploitation.
One of the two flaws concerns an insufficient validation of untrusted input in its V8 JavaScript rendering engine (CVE-2021-21220), which was demonstrated by Dataflow Security's Bruno Keith and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QXZolEuZKPg:hRfXt65DQbs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QXZolEuZKPg:hRfXt65DQbs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QXZolEuZKPg:hRfXt65DQbs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QXZolEuZKPg:hRfXt65DQbs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QXZolEuZKPg:hRfXt65DQbs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QXZolEuZKPg:hRfXt65DQbs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QXZolEuZKPg:hRfXt65DQbs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QXZolEuZKPg:hRfXt65DQbs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-552162165974190063
title: NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers
uri: NSA-Discovers-New-Vulnerabilities-Affecting-Microsoft-Exchange-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/552162165974190063
content:
In its April slate of patches, Microsoft rolled out fixes for a total of 114 security flaws, including an actively exploited zero-day and four remote code execution bugs in Exchange Server.
Of the 114 flaws, 19 are rated as Critical, 88 are rated Important, and one is rated Moderate in severity.
Chief among them is CVE-2021-28310, a privilege escalation vulnerability in Win32k that's said to be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s2V5STIU49k:vt5hyb5I4IM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s2V5STIU49k:vt5hyb5I4IM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s2V5STIU49k:vt5hyb5I4IM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s2V5STIU49k:vt5hyb5I4IM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s2V5STIU49k:vt5hyb5I4IM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s2V5STIU49k:vt5hyb5I4IM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s2V5STIU49k:vt5hyb5I4IM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s2V5STIU49k:vt5hyb5I4IM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8605290353894015177
title: Simplify, then Add Lightness – Consolidating the Technology to Better Defend Ourselves
uri: Simplify-then-Add-Lightness-Consolidating-the-Technology-to-Bette
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8605290353894015177
content:
One of the biggest consequences of the rapidly evolving cybersecurity threat landscape is that defenses must constantly build bigger systems to defend themselves. 
This leads to both more complex systems and often less communication between them. More importantly, it can lead companies to invest in disparate “best in class” components instead of finding the best fit for their needs.
The constant<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t3hKpk1tsqY:zjqTluA_6dU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t3hKpk1tsqY:zjqTluA_6dU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t3hKpk1tsqY:zjqTluA_6dU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t3hKpk1tsqY:zjqTluA_6dU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t3hKpk1tsqY:zjqTluA_6dU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t3hKpk1tsqY:zjqTluA_6dU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t3hKpk1tsqY:zjqTluA_6dU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t3hKpk1tsqY:zjqTluA_6dU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7061133727922023587
title: New WhatsApp Bugs Could've Let Attackers Hack Your Phone Remotely
uri: New-WhatsApp-Bugs-Could-ve-Let-Attackers-Hack-Your-Phone-Remotely
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7061133727922023587
content:
Facebook-owned WhatsApp recently addressed two security vulnerabilities in its messaging app for Android that could have been exploited to execute malicious code remotely on the device and even compromise encrypted communications.
The flaws take aim at devices running Android versions up to and including Android 9 by carrying out what's known as a "man-in-the-disk" attack that makes it possible <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qPhYThzKAzI:VzNLD5QUdEw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qPhYThzKAzI:VzNLD5QUdEw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qPhYThzKAzI:VzNLD5QUdEw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qPhYThzKAzI:VzNLD5QUdEw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qPhYThzKAzI:VzNLD5QUdEw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qPhYThzKAzI:VzNLD5QUdEw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qPhYThzKAzI:VzNLD5QUdEw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qPhYThzKAzI:VzNLD5QUdEw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3293136794075532650
title: New JavaScript Exploit Can Now Carry Out DDR4 Rowhammer Attacks
uri: New-JavaScript-Exploit-Can-Now-Carry-Out-DDR4-Rowhammer-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3293136794075532650
content:
Academics from Vrije University in Amsterdam and ETH Zurich have published a new research paper describing yet another variation of the Rowhammer attack.
Dubbed SMASH (Synchronized MAny-Sided Hammering), the technique can be used to successfully trigger the attack from JavaScript on modern DDR4 RAM cards, notwithstanding extensive mitigations that have been put in place by manufacturers over the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0d5i69wqLJU:y3C7ZrqN_1E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0d5i69wqLJU:y3C7ZrqN_1E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0d5i69wqLJU:y3C7ZrqN_1E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0d5i69wqLJU:y3C7ZrqN_1E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0d5i69wqLJU:y3C7ZrqN_1E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0d5i69wqLJU:y3C7ZrqN_1E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0d5i69wqLJU:y3C7ZrqN_1E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0d5i69wqLJU:y3C7ZrqN_1E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1771938817536075948
title: YIKES! Hackers flood the web with 100,000 pages offering malicious PDFs
uri: YIKES-Hackers-flood-the-web-with-100-000-pages-offering-malicious-PDF
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1771938817536075948
content:
Cybercriminals are resorting to search engine poisoning techniques to lure business professionals into seemingly legitimate Google sites that install a Remote Access Trojan (RAT) capable of carrying out a wide range of attacks.
The attack works by leveraging searches for business forms such as invoices, templates, questionnaires, and receipts as a stepping stone toward infiltrating the systems. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OJUqyXnH4yI:6SqwwHvBrdg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OJUqyXnH4yI:6SqwwHvBrdg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OJUqyXnH4yI:6SqwwHvBrdg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OJUqyXnH4yI:6SqwwHvBrdg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OJUqyXnH4yI:6SqwwHvBrdg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OJUqyXnH4yI:6SqwwHvBrdg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OJUqyXnH4yI:6SqwwHvBrdg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OJUqyXnH4yI:6SqwwHvBrdg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8700348651017762359
title: 1-Click Hack Found in Popular Desktop Apps — Check If You're Using Them
uri: 1-Click-Hack-Found-in-Popular-Desktop-Apps-Check-If-You-re-Using-T
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8700348651017762359
content:
Multiple one-click vulnerabilities have been discovered across a variety of popular software applications, allowing an attacker to potentially execute arbitrary code on target systems.
The issues were discovered by Positive Security researchers Fabian Bräunlein and Lukas Euler and affect apps like Telegram, Nextcloud, VLC, LibreOffice, OpenOffice, Bitcoin/Dogecoin Wallets, Wireshark, and Mumble.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YY9_4CI-gLI:r6jEo9iOSBg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YY9_4CI-gLI:r6jEo9iOSBg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YY9_4CI-gLI:r6jEo9iOSBg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YY9_4CI-gLI:r6jEo9iOSBg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YY9_4CI-gLI:r6jEo9iOSBg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YY9_4CI-gLI:r6jEo9iOSBg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YY9_4CI-gLI:r6jEo9iOSBg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YY9_4CI-gLI:r6jEo9iOSBg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8241425984947904741
title: Malware Variants: More Sophisticated, Prevalent and Evolving in 2021
uri: Malware-Variants-More-Sophisticated-Prevalent-and-Evolving-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8241425984947904741
content:
A malicious program intended to cause havoc with IT systems—malware—is becoming more and more sophisticated every year. The year 2021 is no exception, as recent trends indicate that several new variants of malware are making their way into the world of cybersecurity.
While smarter security solutions are popping up, modern malware still eludes and challenges cybersecurity experts. 
The evolution <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=psl9ITlxJwU:ODvv6R7qkv0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=psl9ITlxJwU:ODvv6R7qkv0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=psl9ITlxJwU:ODvv6R7qkv0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=psl9ITlxJwU:ODvv6R7qkv0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=psl9ITlxJwU:ODvv6R7qkv0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=psl9ITlxJwU:ODvv6R7qkv0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=psl9ITlxJwU:ODvv6R7qkv0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=psl9ITlxJwU:ODvv6R7qkv0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-280531978821261506
title: US Sanctions Russia and Expels 10 Diplomats Over SolarWinds Cyberattack
uri: US-Sanctions-Russia-and-Expels-10-Diplomats-Over-SolarWinds-Cyberattac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/280531978821261506
content:
The U.S. and U.K. on Thursday formally attributed the supply chain attack of IT infrastructure management company SolarWinds with "high confidence" to government operatives working for Russia's Foreign Intelligence Service (SVR).
"Russia's pattern of malign behaviour around the world – whether in cyberspace, in election interference or in the aggressive operations of their intelligence services <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5swuhQjhJKU:QGbn7nEuvK4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5swuhQjhJKU:QGbn7nEuvK4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5swuhQjhJKU:QGbn7nEuvK4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5swuhQjhJKU:QGbn7nEuvK4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5swuhQjhJKU:QGbn7nEuvK4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5swuhQjhJKU:QGbn7nEuvK4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5swuhQjhJKU:QGbn7nEuvK4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5swuhQjhJKU:QGbn7nEuvK4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2801634234539894638
title: Severe Bugs Reported in EtherNet/IP Stack for Industrial Systems
uri: Severe-Bugs-Reported-in-EtherNet-IP-Stack-for-Industrial-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2801634234539894638
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday issued an advisory warning of multiple vulnerabilities in the OpENer EtherNet/IP stack that could expose industrial systems to denial-of-service (DoS) attacks, data leaks, and remote code execution.
All OpENer commits and versions prior to February 10, 2021, are affected, although there are no known public exploits that<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dK0vMTIZer0:4A54nIjFojI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dK0vMTIZer0:4A54nIjFojI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dK0vMTIZer0:4A54nIjFojI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dK0vMTIZer0:4A54nIjFojI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dK0vMTIZer0:4A54nIjFojI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dK0vMTIZer0:4A54nIjFojI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dK0vMTIZer0:4A54nIjFojI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dK0vMTIZer0:4A54nIjFojI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1466251386799611541
title: SysAdmin of Billion-Dollar Hacking Group Gets 10-Year Sentence
uri: SysAdmin-of-Billion-Dollar-Hacking-Group-Gets-10-Year-Sentence
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1466251386799611541
content:
A high-level manager and systems administrator associated with the FIN7 threat actor has been sentenced to 10 years in prison, the U.S. Department of Justice announced Friday.
Fedir Hladyr, a 35-year-old Ukrainian national, is said to have played a crucial role in a criminal scheme that compromised tens of millions of debit and credit cards, in addition to aggregating the stolen information, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=36kinOM_Cpg:c-rHNnKbTMA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=36kinOM_Cpg:c-rHNnKbTMA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=36kinOM_Cpg:c-rHNnKbTMA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=36kinOM_Cpg:c-rHNnKbTMA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=36kinOM_Cpg:c-rHNnKbTMA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=36kinOM_Cpg:c-rHNnKbTMA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=36kinOM_Cpg:c-rHNnKbTMA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=36kinOM_Cpg:c-rHNnKbTMA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5645269359434404135
title: What are the different roles within cybersecurity?
uri: What-are-the-different-roles-within-cybersecurity
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5645269359434404135
content:
People talk about the cybersecurity job market like it's a monolith, but there are a number of different roles within cybersecurity, depending not only on your skill level and experience but on what you like to do.
In fact, Cybercrime Magazine came up with a list of 50 cybersecurity job titles, while CyberSN, a recruiting organization, came up with its own list of 45 cybersecurity job categories<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rlVSDhJ2V8I:D4RFSpZB_Oc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rlVSDhJ2V8I:D4RFSpZB_Oc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rlVSDhJ2V8I:D4RFSpZB_Oc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rlVSDhJ2V8I:D4RFSpZB_Oc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rlVSDhJ2V8I:D4RFSpZB_Oc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rlVSDhJ2V8I:D4RFSpZB_Oc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rlVSDhJ2V8I:D4RFSpZB_Oc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rlVSDhJ2V8I:D4RFSpZB_Oc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-952887306964368696
title: Passwordless: More Mirage Than Reality
uri: Passwordless-More-Mirage-Than-Reality
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/952887306964368696
content:
The concept of "passwordless" authentication has been gaining significant industry and media attention. And for a good reason. Our digital lives are demanding an ever-increasing number of online accounts and services, with security best practices dictating that each requires a strong, unique password in order to ensure data stays safe. Who wouldn't want an easier way?
That's the premise behind <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PBZrO95kqJ8:8p8FQRE0GGY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PBZrO95kqJ8:8p8FQRE0GGY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PBZrO95kqJ8:8p8FQRE0GGY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PBZrO95kqJ8:8p8FQRE0GGY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PBZrO95kqJ8:8p8FQRE0GGY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PBZrO95kqJ8:8p8FQRE0GGY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PBZrO95kqJ8:8p8FQRE0GGY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PBZrO95kqJ8:8p8FQRE0GGY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6031797079117627278
title: Malware That Spreads Via Xcode Projects Now Targeting Apple's M1-based Macs
uri: Malware-That-Spreads-Via-Xcode-Projects-Now-Targeting-Apple-s-M1-based
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6031797079117627278
content:
A Mac malware campaign targeting Xcode developers has been retooled to add support for Apple's new M1 chips and expand its features to steal confidential information from cryptocurrency apps.
XCSSET came into the spotlight in August 2020 after it was found to spread via modified Xcode IDE projects, which, upon the building, were configured to execute the payload. The malware repackages payload <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HQSDSF0JqhY:q0R8Q5uPfng:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HQSDSF0JqhY:q0R8Q5uPfng:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HQSDSF0JqhY:q0R8Q5uPfng:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HQSDSF0JqhY:q0R8Q5uPfng:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HQSDSF0JqhY:q0R8Q5uPfng:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HQSDSF0JqhY:q0R8Q5uPfng:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HQSDSF0JqhY:q0R8Q5uPfng:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HQSDSF0JqhY:q0R8Q5uPfng:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8390561665007908251
title: Lazarus APT Hackers are now using BMP images to hide RAT malware
uri: Lazarus-APT-Hackers-are-now-using-BMP-images-to-hide-RAT-malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8390561665007908251
content:
A spear-phishing attack operated by a North Korean threat actor targeting its southern counterpart has been found to conceal its malicious code within a bitmap (.BMP) image file to drop a remote access trojan (RAT) capable of stealing sensitive information.
Attributing the attack to the Lazarus Group based on similarities to prior tactics adopted by the adversary, researchers from Malwarebytes <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHc4_FCN43Y:Qbh0r6Cc7bg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHc4_FCN43Y:Qbh0r6Cc7bg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHc4_FCN43Y:Qbh0r6Cc7bg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wHc4_FCN43Y:Qbh0r6Cc7bg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHc4_FCN43Y:Qbh0r6Cc7bg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wHc4_FCN43Y:Qbh0r6Cc7bg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wHc4_FCN43Y:Qbh0r6Cc7bg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wHc4_FCN43Y:Qbh0r6Cc7bg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8608137268631787482
title: [eBook] Why Autonomous XDR Is Going to Replace NGAV/EDR
uri: eBook-Why-Autonomous-XDR-Is-Going-to-Replace-NGAV-EDR
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8608137268631787482
content:
For most organizations today, endpoint protection is the primary security concern. This is not unreasonable – endpoints tend to be the weakest points in an environment – but it also misses the forest for the trees. As threat surfaces expand, security professionals are harder pressed to detect threats that target other parts of an environment and can easily miss a real vulnerability by focusing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLeFTAxIXJ0:HdRrp5bsy9I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLeFTAxIXJ0:HdRrp5bsy9I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLeFTAxIXJ0:HdRrp5bsy9I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xLeFTAxIXJ0:HdRrp5bsy9I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLeFTAxIXJ0:HdRrp5bsy9I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xLeFTAxIXJ0:HdRrp5bsy9I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xLeFTAxIXJ0:HdRrp5bsy9I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xLeFTAxIXJ0:HdRrp5bsy9I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2670285878243566122
title: 120 Compromised Ad Servers Target Millions of Internet Users
uri: 120-Compromised-Ad-Servers-Target-Millions-of-Internet-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2670285878243566122
content:
An ongoing malvertising campaign tracked as "Tag Barnakle" has been behind the breach of more than 120 ad servers over the past year to sneakily inject code in an attempt to serve malicious advertisements that redirect users to rogue websites, thus exposing victims to scamware or malware.
Unlike other operators who set about their task by infiltrating the ad-tech ecosystem using "convincing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hOzKgHpYjXk:OxzkHoVK0Xs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hOzKgHpYjXk:OxzkHoVK0Xs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hOzKgHpYjXk:OxzkHoVK0Xs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hOzKgHpYjXk:OxzkHoVK0Xs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hOzKgHpYjXk:OxzkHoVK0Xs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hOzKgHpYjXk:OxzkHoVK0Xs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hOzKgHpYjXk:OxzkHoVK0Xs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hOzKgHpYjXk:OxzkHoVK0Xs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7060862044440062395
title: Over 750,000 Users Downloaded New Billing Fraud Apps From Google Play Store
uri: Over-750-000-Users-Downloaded-New-Billing-Fraud-Apps-From-Google-Play
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7060862044440062395
content:
Researchers have uncovered a new set of fraudulent Android apps in the Google Play store that were found to hijack SMS message notifications for carrying out billing fraud.
The apps in question primarily targeted users in Southwest Asia and the Arabian Peninsula, attracting a total of 700,000 downloads before they were discovered and removed from the platform.
The findings were reported <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqinvgKL80E:TMgKYqM0IHY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqinvgKL80E:TMgKYqM0IHY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqinvgKL80E:TMgKYqM0IHY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kqinvgKL80E:TMgKYqM0IHY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqinvgKL80E:TMgKYqM0IHY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kqinvgKL80E:TMgKYqM0IHY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kqinvgKL80E:TMgKYqM0IHY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kqinvgKL80E:TMgKYqM0IHY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7083559399050512653
title: 3 Zero-Day Exploits Hit SonicWall Enterprise Email Security Appliances
uri: 3-Zero-Day-Exploits-Hit-SonicWall-Enterprise-Email-Security-Appliances
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7083559399050512653
content:
SonicWall has addressed three critical security vulnerabilities in its hosted and on-premises email security (ES) product that are being actively exploited in the wild.
Tracked as CVE-2021-20021 and CVE-2021-20022, the flaws were discovered and reported to the company by FireEye's Mandiant subsidiary on March 26, 2021, after the cybersecurity firm detected post-exploitation web shell activity on<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJZxGWLjL1k:Cquc1aFI66c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJZxGWLjL1k:Cquc1aFI66c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJZxGWLjL1k:Cquc1aFI66c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZJZxGWLjL1k:Cquc1aFI66c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJZxGWLjL1k:Cquc1aFI66c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZJZxGWLjL1k:Cquc1aFI66c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJZxGWLjL1k:Cquc1aFI66c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZJZxGWLjL1k:Cquc1aFI66c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1744609994337919011
title: WARNING: Hackers Exploit Unpatched Pulse Secure 0-Day to Breach Organizations
uri: WARNING-Hackers-Exploit-Unpatched-Pulse-Secure-0-Day-to-Breach-Organi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1744609994337919011
content:
If the Pulse Connect Secure gateway is part of your organization network, you need to be aware of a newly discovered critical zero-day authentication bypass vulnerability (CVE-2021-22893) that is currently being exploited in the wild and for which there is no patch yet.
At least two threat actors have been behind a series of intrusions targeting defense, government, and financial organizations <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikaH7G4KoXI:xZz02bSmPM8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikaH7G4KoXI:xZz02bSmPM8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikaH7G4KoXI:xZz02bSmPM8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ikaH7G4KoXI:xZz02bSmPM8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikaH7G4KoXI:xZz02bSmPM8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ikaH7G4KoXI:xZz02bSmPM8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ikaH7G4KoXI:xZz02bSmPM8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ikaH7G4KoXI:xZz02bSmPM8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8365055761616400710
title: Update Your Chrome Browser ASAP to Patch a Week Old Public Exploit
uri: Update-Your-Chrome-Browser-ASAP-to-Patch-a-Week-Old-Public-Exploit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8365055761616400710
content:
Google on Tuesday released an update for Chrome web browser for Windows, Mac, and Linux, with a total of seven security fixes, including one flaw for which it says an exploit exists in the wild.
Tracked as CVE-2021-21224, the flaw concerns a type confusion vulnerability in V8 open-source JavaScript engine that was reported to the company by security researcher Jose Martinez on April 5
According <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hVL_IDfGjL0:qsMBzL9BmH8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hVL_IDfGjL0:qsMBzL9BmH8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hVL_IDfGjL0:qsMBzL9BmH8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hVL_IDfGjL0:qsMBzL9BmH8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hVL_IDfGjL0:qsMBzL9BmH8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hVL_IDfGjL0:qsMBzL9BmH8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hVL_IDfGjL0:qsMBzL9BmH8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hVL_IDfGjL0:qsMBzL9BmH8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3183803509598876635
title: Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn't paid
uri: Hackers-threaten-to-leak-stolen-Apple-blueprints-if-50-million-ransom
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3183803509598876635
content:
Prominent Apple supplier Quanta on Wednesday said it suffered a ransomware attack from the REvil ransomware group, which is now demanding the iPhone maker pay a ransom of $50 million to prevent leaking sensitive files on the dark web.
In a post shared on its deep web "Happy Blog" portal, the threat actor said it came into possession of schematics of the U.S. company's products such as MacBooks <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zx5467J790k:RWwFq3MOprM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zx5467J790k:RWwFq3MOprM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zx5467J790k:RWwFq3MOprM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zx5467J790k:RWwFq3MOprM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zx5467J790k:RWwFq3MOprM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zx5467J790k:RWwFq3MOprM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zx5467J790k:RWwFq3MOprM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zx5467J790k:RWwFq3MOprM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4051089961860140987
title: Improve Your Cyber Security Posture by Combining State of the Art Security Tools
uri: Improve-Your-Cyber-Security-Posture-by-Combining-State-of-the-Art-Secu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4051089961860140987
content:
Today there are plenty of cybersecurity tools on the market. It is now more important than ever that the tools you decide to use work well together. If they don't, you will not get the complete picture, and you won't be able to analyze the entire system from a holistic perspective. 
This means that you won't be able to do the right mitigations to improve your security posture. Here are examples <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1LmlCKojjjA:rGJ3pc8Zo_Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1LmlCKojjjA:rGJ3pc8Zo_Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1LmlCKojjjA:rGJ3pc8Zo_Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1LmlCKojjjA:rGJ3pc8Zo_Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1LmlCKojjjA:rGJ3pc8Zo_Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1LmlCKojjjA:rGJ3pc8Zo_Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1LmlCKojjjA:rGJ3pc8Zo_Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1LmlCKojjjA:rGJ3pc8Zo_Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4130883153648539668
title: Facebook Busts Palestinian Hackers' Operation Spreading Mobile Spyware
uri: Facebook-Busts-Palestinian-Hackers-Operation-Spreading-Mobile-Spyware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4130883153648539668
content:
Facebook on Wednesday said it took steps to dismantle malicious activities perpetrated by two state-sponsored hacking groups operating out of Palestine that abused its platform to distribute malware.
The social media giant attributed the attacks to a network connected to the Preventive Security Service (PSS), the security apparatus of the State of Palestine, and another threat actor known as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OFz5y_4fN-g:jnHHoAjAzOo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OFz5y_4fN-g:jnHHoAjAzOo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OFz5y_4fN-g:jnHHoAjAzOo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OFz5y_4fN-g:jnHHoAjAzOo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OFz5y_4fN-g:jnHHoAjAzOo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OFz5y_4fN-g:jnHHoAjAzOo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OFz5y_4fN-g:jnHHoAjAzOo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OFz5y_4fN-g:jnHHoAjAzOo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7172970719812675342
title: Cybercriminals Using Telegram Messenger to Control ToxicEye Malware
uri: Cybercriminals-Using-Telegram-Messenger-to-Control-ToxicEye-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7172970719812675342
content:
Adversaries are increasingly abusing Telegram as a "command-and-control" system to distribute malware into organizations that could then be used to capture sensitive information from targeted systems.
"Even when Telegram is not installed or being used, the system allows hackers to send malicious commands and operations remotely via the instant messaging app," said researchers from cybersecurity <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=siCL9SA0ank:hnDfqiYpxgY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=siCL9SA0ank:hnDfqiYpxgY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=siCL9SA0ank:hnDfqiYpxgY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=siCL9SA0ank:hnDfqiYpxgY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=siCL9SA0ank:hnDfqiYpxgY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=siCL9SA0ank:hnDfqiYpxgY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=siCL9SA0ank:hnDfqiYpxgY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=siCL9SA0ank:hnDfqiYpxgY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7442777773931436398
title: Researchers Find Additional Infrastructure Used By SolarWinds Hackers
uri: Researchers-Find-Additional-Infrastructure-Used-By-SolarWinds-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7442777773931436398
content:
The sprawling SolarWinds cyberattack which came to light last December was known for its sophistication in the breadth of tactics used to infiltrate and persist in the target infrastructure, so much so that Microsoft went on to call the threat actor behind the campaign "skillful and methodic operators who follow operations security (OpSec) best practices to minimize traces, stay under the radar,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZACTdO9INHs:HPbhyO3kbG0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZACTdO9INHs:HPbhyO3kbG0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZACTdO9INHs:HPbhyO3kbG0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZACTdO9INHs:HPbhyO3kbG0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZACTdO9INHs:HPbhyO3kbG0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZACTdO9INHs:HPbhyO3kbG0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZACTdO9INHs:HPbhyO3kbG0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZACTdO9INHs:HPbhyO3kbG0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9121637658020108943
title: Cost of Account Unlocks, and Password Resets Add Up
uri: Cost-of-Account-Unlocks-and-Password-Resets-Add-Up
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9121637658020108943
content:
There are many labor-intensive tasks that the IT service desk carries out on a daily basis. None as tedious and costly as resetting passwords.
Modern IT service desks spend a significant amount of time both unlocking and resetting passwords for end-users. This issue has been exacerbated by the COVID-19 pandemic.
Causes of account lockouts and password resets
End-user password policies, such as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3IFEN-pmisg:yMihQqz8VSo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3IFEN-pmisg:yMihQqz8VSo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3IFEN-pmisg:yMihQqz8VSo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3IFEN-pmisg:yMihQqz8VSo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3IFEN-pmisg:yMihQqz8VSo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3IFEN-pmisg:yMihQqz8VSo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3IFEN-pmisg:yMihQqz8VSo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3IFEN-pmisg:yMihQqz8VSo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6722996460350610275
title: Hackers Exploit VPN to Deploy SUPERNOVA malware on SolarWinds Orion
uri: Hackers-Exploit-VPN-to-Deploy-SUPERNOVA-malware-on-SolarWinds-Orion
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6722996460350610275
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has disclosed details of a new advanced persistent threat (APT) that's leveraging the Supernova backdoor to compromise SolarWinds Orion installations after gaining access to the network through a connection to a Pulse Secure VPN device.
"The threat actor connected to the entity's network via a Pulse Secure virtual private network (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LE_Df1CsM5o:DBQjCAfB2Ss:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LE_Df1CsM5o:DBQjCAfB2Ss:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LE_Df1CsM5o:DBQjCAfB2Ss:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LE_Df1CsM5o:DBQjCAfB2Ss:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LE_Df1CsM5o:DBQjCAfB2Ss:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LE_Df1CsM5o:DBQjCAfB2Ss:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LE_Df1CsM5o:DBQjCAfB2Ss:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LE_Df1CsM5o:DBQjCAfB2Ss:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7430522312926923930
title: Prometei Botnet Exploiting Unpatched Microsoft Exchange Servers
uri: Prometei-Botnet-Exploiting-Unpatched-Microsoft-Exchange-Servers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7430522312926923930
content:
Attackers are exploiting the ProxyLogon Microsoft Exchange Server flaws to co-opt vulnerable machines to a cryptocurrency botnet named Prometei, according to new research.
"Prometei exploits the recently disclosed Microsoft Exchange vulnerabilities associated with the HAFNIUM attacks to penetrate the network for malware deployment, credential harvesting and more," Boston-based cybersecurity firm<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzitt_8-kGM:CSfvSRS3zvc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzitt_8-kGM:CSfvSRS3zvc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzitt_8-kGM:CSfvSRS3zvc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fzitt_8-kGM:CSfvSRS3zvc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzitt_8-kGM:CSfvSRS3zvc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fzitt_8-kGM:CSfvSRS3zvc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzitt_8-kGM:CSfvSRS3zvc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fzitt_8-kGM:CSfvSRS3zvc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8052745325862837727
title: New QNAP NAS Flaws Exploited In Recent Ransomware Attacks - Patch It!
uri: New-QNAP-NAS-Flaws-Exploited-In-Recent-Ransomware-Attacks-Patch-It
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8052745325862837727
content:
A new ransomware strain called "Qlocker" is targeting QNAP network attached storage (NAS) devices as part of an ongoing campaign and encrypting files in password-protected 7zip archives.
First reports of the infections emerged on April 20, with the adversaries behind the operations demanding a bitcoin payment (0.01 bitcoins or about $500.57) to receive the decryption key.
In response to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W5IcB_zGd4E:WWV7jjQUBM4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W5IcB_zGd4E:WWV7jjQUBM4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W5IcB_zGd4E:WWV7jjQUBM4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W5IcB_zGd4E:WWV7jjQUBM4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W5IcB_zGd4E:WWV7jjQUBM4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W5IcB_zGd4E:WWV7jjQUBM4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W5IcB_zGd4E:WWV7jjQUBM4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W5IcB_zGd4E:WWV7jjQUBM4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4021532107445026809
title: Passwordstate Password Manager Update Hijacked to Install Backdoor on Thousands of PCs
uri: Passwordstate-Password-Manager-Update-Hijacked-to-Install-Backdoor-on
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4021532107445026809
content:
Click Studios, the Australian software company behind the Passwordstate password management application, has notified customers to reset their passwords following a software supply chain attack.
The Adelaide-based firm said a bad actor used sophisticated techniques to compromise the software's update mechanism and used it to drop malware on user computers.
The breach is said to have occurred <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N8mi3pz9fwc:K-Fs2o_ivmQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N8mi3pz9fwc:K-Fs2o_ivmQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N8mi3pz9fwc:K-Fs2o_ivmQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N8mi3pz9fwc:K-Fs2o_ivmQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N8mi3pz9fwc:K-Fs2o_ivmQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N8mi3pz9fwc:K-Fs2o_ivmQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=N8mi3pz9fwc:K-Fs2o_ivmQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=N8mi3pz9fwc:K-Fs2o_ivmQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3708408296584342643
title: Critical RCE Bug Found in Homebrew Package Manager for macOS and Linux
uri: Critical-RCE-Bug-Found-in-Homebrew-Package-Manager-for-macOS-and-Linux
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3708408296584342643
content:
A recently identified security vulnerability in the official Homebrew Cask repository could have been exploited by an attacker to execute arbitrary code on users' machines that have Homebrew installed.
The issue, which was reported to the maintainers on April 18 by a Japanese security researcher named RyotaK, stemmed from the way code changes in its GitHub repository were handled, resulting in a<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgNcfCyhnCE:RJAjIvjChM8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgNcfCyhnCE:RJAjIvjChM8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgNcfCyhnCE:RJAjIvjChM8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JgNcfCyhnCE:RJAjIvjChM8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgNcfCyhnCE:RJAjIvjChM8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JgNcfCyhnCE:RJAjIvjChM8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JgNcfCyhnCE:RJAjIvjChM8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JgNcfCyhnCE:RJAjIvjChM8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6412342146594485212
title: 3.2 Billion Leaked Passwords Contain 1.5 Million Records with Government Emails
uri: 3-2-Billion-Leaked-Passwords-Contain-1-5-Million-Records-with-Governme
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6412342146594485212
content:
A staggering number of 3.28 billion passwords linked to 2.18 billion unique email addresses were exposed in what's one of the largest data dumps of breached usernames and passwords.
In addition, the leak includes 1,502,909 passwords associated with email addresses from government domains across the world, with the U.S. government alone taking up 625,505 of the exposed passwords, followed by the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WJDalXYqXlU:uBSEamSUS5E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WJDalXYqXlU:uBSEamSUS5E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WJDalXYqXlU:uBSEamSUS5E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WJDalXYqXlU:uBSEamSUS5E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WJDalXYqXlU:uBSEamSUS5E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WJDalXYqXlU:uBSEamSUS5E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WJDalXYqXlU:uBSEamSUS5E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WJDalXYqXlU:uBSEamSUS5E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5216056123817958198
title: Emotet Malware Destroys Itself From All Infected Computers
uri: Emotet-Malware-Destroys-Itself-From-All-Infected-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5216056123817958198
content:
Emotet, the notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks, was automatically wiped from infected computers en masse following a European law enforcement operation.
The development comes three months after a coordinated disruption of Emotet as part of "Operation Ladybird" to seize control of servers used to run and maintain the malware <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d1is2yvvbGA:yy3KaUSWU0M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d1is2yvvbGA:yy3KaUSWU0M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d1is2yvvbGA:yy3KaUSWU0M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d1is2yvvbGA:yy3KaUSWU0M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d1is2yvvbGA:yy3KaUSWU0M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d1is2yvvbGA:yy3KaUSWU0M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d1is2yvvbGA:yy3KaUSWU0M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d1is2yvvbGA:yy3KaUSWU0M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4573053637579784363
title: Apple AirDrop Bug Could Leak Your Personal Info to Anyone Nearby
uri: Apple-AirDrop-Bug-Could-Leak-Your-Personal-Info-to-Anyone-Nearby
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4573053637579784363
content:
New research has uncovered privacy weaknesses in Apple's wireless file-sharing protocol that could result in the exposure of a user's contact information such as email addresses and phone numbers.
"As an attacker, it is possible to learn the phone numbers and email addresses of AirDrop users – even as a complete stranger," said a team of academics from the Technical University of Darmstadt, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cmx9jOnotUU:uxfXP_10c2I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cmx9jOnotUU:uxfXP_10c2I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cmx9jOnotUU:uxfXP_10c2I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cmx9jOnotUU:uxfXP_10c2I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cmx9jOnotUU:uxfXP_10c2I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cmx9jOnotUU:uxfXP_10c2I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cmx9jOnotUU:uxfXP_10c2I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cmx9jOnotUU:uxfXP_10c2I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1655583397242314401
title: How to Test and Improve Your Domain's Email Security?
uri: How-to-Test-and-Improve-Your-Domain-s-Email-Security
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1655583397242314401
content:
No matter which type of business you are in, whether small, medium, or large, email has become an irrefutable tool for communicating with your employees, partners, and customers.
Emails are sent and received each day in bulk by companies from various sources. In addition, organizations may also employ third-party vendors who may be authorized to send emails on behalf of the company. As a result,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3uotKaXtrI4:5mK_ORBguVg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3uotKaXtrI4:5mK_ORBguVg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3uotKaXtrI4:5mK_ORBguVg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3uotKaXtrI4:5mK_ORBguVg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3uotKaXtrI4:5mK_ORBguVg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3uotKaXtrI4:5mK_ORBguVg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3uotKaXtrI4:5mK_ORBguVg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3uotKaXtrI4:5mK_ORBguVg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3395925386456787818
title: Minnesota University Apologizes for Contributing Malicious Code to the Linux Project
uri: Minnesota-University-Apologizes-for-Contributing-Malicious-Code-to-the
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3395925386456787818
content:
Researchers from the University of Minnesota apologized to the maintainers of Linux Kernel Project on Saturday for intentionally including vulnerabilities in the project's code, which led to the school being banned from contributing to the open-source project in the future.
"While our goal was to improve the security of Linux, we now understand that it was hurtful to the community to make it a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8J5hz08RVNU:nehPk_4WBmA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8J5hz08RVNU:nehPk_4WBmA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8J5hz08RVNU:nehPk_4WBmA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8J5hz08RVNU:nehPk_4WBmA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8J5hz08RVNU:nehPk_4WBmA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8J5hz08RVNU:nehPk_4WBmA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8J5hz08RVNU:nehPk_4WBmA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8J5hz08RVNU:nehPk_4WBmA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8420207042669002431
title: FBI, CISA Uncover Tactics Employed by Russian Intelligence Hackers
uri: FBI-CISA-Uncover-Tactics-Employed-by-Russian-Intelligence-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8420207042669002431
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS), and the Federal Bureau of Investigation (FBI) on Monday published a new joint advisory as part of their latest attempts to expose the tactics, techniques, and procedures (TTPs) adopted by the Russian Foreign Intelligence Service (SVR) in its attacks targeting the U.S and foreign entities.
By <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gql6Rn6PrQ0:8gsJjLiYdCA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gql6Rn6PrQ0:8gsJjLiYdCA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gql6Rn6PrQ0:8gsJjLiYdCA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gql6Rn6PrQ0:8gsJjLiYdCA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gql6Rn6PrQ0:8gsJjLiYdCA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gql6Rn6PrQ0:8gsJjLiYdCA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gql6Rn6PrQ0:8gsJjLiYdCA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gql6Rn6PrQ0:8gsJjLiYdCA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4061463526729097736
title: Cybersecurity Webinar: Understanding the 2020 MITRE ATT&CK Results
uri: Cybersecurity-Webinar-Understanding-the-2020-MITRE-ATT-CK-Results
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4061463526729097736
content:
The release of MITRE Engenuity's Carbanak+Fin7 ATT&amp;CK evaluations every year is a benchmark for the cybersecurity industry.
The organization's tests measure how well security vendors can detect and respond to threats and offers an independent metric for customers and security leaders to understand how well vendors perform on a variety of tasks.
However, for the uninitiated, the results can be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jHo3cQ6rtwc:UecC57LLPZM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jHo3cQ6rtwc:UecC57LLPZM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jHo3cQ6rtwc:UecC57LLPZM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jHo3cQ6rtwc:UecC57LLPZM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jHo3cQ6rtwc:UecC57LLPZM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jHo3cQ6rtwc:UecC57LLPZM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jHo3cQ6rtwc:UecC57LLPZM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jHo3cQ6rtwc:UecC57LLPZM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-137533337640706994
title: Hackers Exploit 0-Day Gatekeeper Flaw to Attack MacOS Computers
uri: Hackers-Exploit-0-Day-Gatekeeper-Flaw-to-Attack-MacOS-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/137533337640706994
content:
Security is only as strong as the weakest link. As further proof of this, Apple released an update to macOS operating systems to address an actively exploited zero-day vulnerability that could circumvent all security protections, thus permitting unapproved software to run on Macs.
The macOS flaw, identified as CVE-2021-30657, was discovered and reported to Apple by security engineer Cedric Owens<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PL-XrPanlV8:AlqljLt44LI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PL-XrPanlV8:AlqljLt44LI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PL-XrPanlV8:AlqljLt44LI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PL-XrPanlV8:AlqljLt44LI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PL-XrPanlV8:AlqljLt44LI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PL-XrPanlV8:AlqljLt44LI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PL-XrPanlV8:AlqljLt44LI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PL-XrPanlV8:AlqljLt44LI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2185714508349281962
title: Hackers Threaten to Leak D.C. Police Informants' Info If Ransom Is Not Paid
uri: Hackers-Threaten-to-Leak-D-C-Police-Informants-Info-If-Ransom-Is-Not
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2185714508349281962
content:
The Metropolitan Police Department (MPD) of the District of Columbia has become the latest high-profile government agency to fall victim to a ransomware attack.
The Babuk Locker gang claimed in a post on the dark web that they had compromised the DC Police's networks and stolen 250 GB of unencrypted files. Screenshots shared by the group, and seen by The Hacker News, include various folders <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QBc0VG2h23k:g3TztlaXIjw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QBc0VG2h23k:g3TztlaXIjw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QBc0VG2h23k:g3TztlaXIjw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QBc0VG2h23k:g3TztlaXIjw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QBc0VG2h23k:g3TztlaXIjw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QBc0VG2h23k:g3TztlaXIjw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QBc0VG2h23k:g3TztlaXIjw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QBc0VG2h23k:g3TztlaXIjw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4480285220375729332
title: Attention! FluBot Android Banking Malware Spreads Quickly Across Europe
uri: Attention-FluBot-Android-Banking-Malware-Spreads-Quickly-Across-Europ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4480285220375729332
content:
Attention, Android users! A banking malware capable of stealing sensitive information is "spreading rapidly" across Europe, with the U.S. likely to be the next target.
According to a new analysis by Proofpoint, the threat actors behind FluBot (aka Cabassous) have branched out beyond Spain to target the U.K., Germany, Hungary, Italy, and Poland. The English-language campaign alone has been <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EPhL03PVSqI:bbX_7Nx4MgI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EPhL03PVSqI:bbX_7Nx4MgI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EPhL03PVSqI:bbX_7Nx4MgI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EPhL03PVSqI:bbX_7Nx4MgI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EPhL03PVSqI:bbX_7Nx4MgI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EPhL03PVSqI:bbX_7Nx4MgI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EPhL03PVSqI:bbX_7Nx4MgI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EPhL03PVSqI:bbX_7Nx4MgI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-692168340069556284
title: F5 BIG-IP Found Vulnerable to Kerberos KDC Spoofing Vulnerability
uri: F5-BIG-IP-Found-Vulnerable-to-Kerberos-KDC-Spoofing-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/692168340069556284
content:
Cybersecurity researchers on Wednesday disclosed a new bypass vulnerability in the Kerberos Key Distribution Center (KDC) security feature impacting F5 Big-IP application delivery services.
"The KDC Spoofing vulnerability allows an attacker to bypass the Kerberos authentication to Big-IP Access Policy Manager (APM), bypass security policies and gain unfettered access to sensitive workloads," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1p6xjm1W0w:z6wbz7OieXA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1p6xjm1W0w:z6wbz7OieXA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1p6xjm1W0w:z6wbz7OieXA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F1p6xjm1W0w:z6wbz7OieXA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1p6xjm1W0w:z6wbz7OieXA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F1p6xjm1W0w:z6wbz7OieXA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F1p6xjm1W0w:z6wbz7OieXA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F1p6xjm1W0w:z6wbz7OieXA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2275121866119373576
title: Cybercriminals Widely Abusing Excel 4.0 Macro to Distribute Malware
uri: Cybercriminals-Widely-Abusing-Excel-4-0-Macro-to-Distribute-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2275121866119373576
content:
Threat actors are increasingly adopting Excel 4.0 documents as an initial stage vector to distribute malware such as ZLoader and Quakbot, according to new research.
The findings come from an analysis of 160,000 Excel 4.0 documents between November 2020 and March 2021, out of which more than 90% were classified as malicious or suspicious.
&lt;!--adsense--&gt;
"The biggest risk for the targeted <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=20QcOf9fqo0:BgrbA8du4bU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=20QcOf9fqo0:BgrbA8du4bU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=20QcOf9fqo0:BgrbA8du4bU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=20QcOf9fqo0:BgrbA8du4bU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=20QcOf9fqo0:BgrbA8du4bU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=20QcOf9fqo0:BgrbA8du4bU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=20QcOf9fqo0:BgrbA8du4bU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=20QcOf9fqo0:BgrbA8du4bU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3989464392026101854
title: Researchers Uncover Stealthy Linux Malware That Went Undetected for 3 Years
uri: Researchers-Uncover-Stealthy-Linux-Malware-That-Went-Undetected-for-3
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3989464392026101854
content:
A previously undocumented Linux malware with backdoor capabilities has managed to stay under the radar for about three years, allowing the threat actor behind to harvest and exfiltrate sensitive information from infected systems.
Dubbed "RotaJakiro" by researchers from Qihoo 360 NETLAB, the backdoor targets Linux X64 machines, and is so named after the fact that "the family uses rotate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQiWx7KwV8g:N2y09goMsZo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQiWx7KwV8g:N2y09goMsZo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQiWx7KwV8g:N2y09goMsZo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AQiWx7KwV8g:N2y09goMsZo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQiWx7KwV8g:N2y09goMsZo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AQiWx7KwV8g:N2y09goMsZo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQiWx7KwV8g:N2y09goMsZo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AQiWx7KwV8g:N2y09goMsZo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4632481907568693203
title: How to Conduct Vulnerability Assessments: An Essential Guide for 2021
uri: How-to-Conduct-Vulnerability-Assessments-An-Essential-Guide-for-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4632481907568693203
content:
Hackers are scanning the internet for weaknesses all the time, and if you don't want your organization to fall victim, you need to be the first to find these weak spots. In other words, you have to adopt a proactive approach to managing your vulnerabilities, and a crucial first step in achieving this is performing a vulnerability assessment.
Read this guide to learn how to perform vulnerability <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OWMKXQvd4Lk:bnTaVWd-gnw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OWMKXQvd4Lk:bnTaVWd-gnw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OWMKXQvd4Lk:bnTaVWd-gnw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OWMKXQvd4Lk:bnTaVWd-gnw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OWMKXQvd4Lk:bnTaVWd-gnw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OWMKXQvd4Lk:bnTaVWd-gnw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OWMKXQvd4Lk:bnTaVWd-gnw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OWMKXQvd4Lk:bnTaVWd-gnw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-187848853925747918
title: Chinese Hackers Attacking Military Organizations With New Backdoor
uri: Chinese-Hackers-Attacking-Military-Organizations-With-New-Backdoor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/187848853925747918
content:
Cybersecurity researchers on Wednesday exposed a new cyberespionage campaign targeting military organizations in Southeast Asia.
Attributing the attacks to a threat actor dubbed "Naikon APT," cybersecurity firm Bitdefender laid out the ever-changing tactics, techniques, and procedures adopted by the group, including weaving new backdoors named "Nebulae" and "RainyDay" into their data-stealing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkNn6-LJ5CA:jCRt0x5NUIk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkNn6-LJ5CA:jCRt0x5NUIk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkNn6-LJ5CA:jCRt0x5NUIk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RkNn6-LJ5CA:jCRt0x5NUIk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkNn6-LJ5CA:jCRt0x5NUIk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RkNn6-LJ5CA:jCRt0x5NUIk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RkNn6-LJ5CA:jCRt0x5NUIk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RkNn6-LJ5CA:jCRt0x5NUIk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1156803156552468224
title: A New PHP Composer Bug Could Enable Widespread Supply-Chain Attacks
uri: A-New-PHP-Composer-Bug-Could-Enable-Widespread-Supply-Chain-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1156803156552468224
content:
The maintainers of Composer, a package manager for PHP, have shipped an update to address a critical vulnerability that could have allowed an attacker to execute arbitrary commands and "backdoor every PHP package," resulting in a supply-chain attack.
Tracked as CVE-2021-29472, the security issue was discovered and reported on April 22 by researchers from SonarSource, following which a hotfix was<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9-OFZ0yuO0:NaCCgyGflqM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9-OFZ0yuO0:NaCCgyGflqM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9-OFZ0yuO0:NaCCgyGflqM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H9-OFZ0yuO0:NaCCgyGflqM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9-OFZ0yuO0:NaCCgyGflqM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H9-OFZ0yuO0:NaCCgyGflqM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H9-OFZ0yuO0:NaCCgyGflqM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H9-OFZ0yuO0:NaCCgyGflqM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6185919954446066277
title: LuckyMouse Hackers Target Banks, Companies and Governments in 2020
uri: LuckyMouse-Hackers-Target-Banks-Companies-and-Governments-in-2020
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6185919954446066277
content:
An adversary known for its watering hole attacks against government entities has been linked to a slew of newly detected intrusions targeting various organizations in Central Asia and the Middle East.
The malicious activity, collectively named "EmissarySoldier," has been attributed to a threat actor called LuckyMouse, and is said to have happened in 2020 with the goal of obtaining geopolitical <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y7CPVO3mJQI:InsKUvXZlYo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y7CPVO3mJQI:InsKUvXZlYo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y7CPVO3mJQI:InsKUvXZlYo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y7CPVO3mJQI:InsKUvXZlYo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y7CPVO3mJQI:InsKUvXZlYo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y7CPVO3mJQI:InsKUvXZlYo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y7CPVO3mJQI:InsKUvXZlYo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y7CPVO3mJQI:InsKUvXZlYo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9029262501351402485
title: Passwordstate Warns of Ongoing Phishing Attacks Following Data Breach
uri: Passwordstate-Warns-of-Ongoing-Phishing-Attacks-Following-Data-Breach
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9029262501351402485
content:
Click Studios, the Australian software firm which confirmed a supply chain attack affecting its Passwordstate password management application, has warned customers of an ongoing phishing attack by an unknown threat actor.
"We have been advised a bad actor has commenced a phishing attack with a small number of customers having received emails requesting urgent action," the company said in an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7GQI-1KUe-E:6MyfXbYKa2s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7GQI-1KUe-E:6MyfXbYKa2s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7GQI-1KUe-E:6MyfXbYKa2s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7GQI-1KUe-E:6MyfXbYKa2s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7GQI-1KUe-E:6MyfXbYKa2s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7GQI-1KUe-E:6MyfXbYKa2s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7GQI-1KUe-E:6MyfXbYKa2s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7GQI-1KUe-E:6MyfXbYKa2s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6659267798739238258
title: Here's A New Forum for Cybersecurity Leaders Outside of the Fortune 2000
uri: Here-s-A-New-Forum-for-Cybersecurity-Leaders-Outside-of-the-Fortune-20
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6659267798739238258
content:
Perhaps due to the nature of the position, the InfoSec leadership roles tend to be solitary ones. CISOs, or their equivalent decision-makers in organizations without the role, have so many constant drains on their attention – keeping their knowledge fresh, building plans to secure their organizations further – that they often find themselves on an island.
It’s even more challenging for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p5SeVvWjMQc:sByJdvBFaIM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p5SeVvWjMQc:sByJdvBFaIM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p5SeVvWjMQc:sByJdvBFaIM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p5SeVvWjMQc:sByJdvBFaIM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p5SeVvWjMQc:sByJdvBFaIM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p5SeVvWjMQc:sByJdvBFaIM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p5SeVvWjMQc:sByJdvBFaIM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p5SeVvWjMQc:sByJdvBFaIM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1759648327441271838
title: Microsoft Finds 'BadAlloc' Flaws Affecting Wide-Range of IoT and OT Devices
uri: Microsoft-Finds-BadAlloc-Flaws-Affecting-Wide-Range-of-IoT-and-OT-De
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1759648327441271838
content:
Microsoft researchers on Thursday disclosed two dozen vulnerabilities affecting a wide range of Internet of Things (IoT) and Operational Technology (OT) devices used in industrial, medical, and enterprise networks that could be abused by adversaries to execute arbitrary code and even cause critical systems to crash.
"These remote code execution (RCE) vulnerabilities cover more than 25 CVEs and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D2K998NRIkY:W7f5gbPgjLs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D2K998NRIkY:W7f5gbPgjLs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D2K998NRIkY:W7f5gbPgjLs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D2K998NRIkY:W7f5gbPgjLs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D2K998NRIkY:W7f5gbPgjLs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D2K998NRIkY:W7f5gbPgjLs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=D2K998NRIkY:W7f5gbPgjLs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=D2K998NRIkY:W7f5gbPgjLs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5650114573826322141
title: Hackers Exploit SonicWall Zero-Day Bug in FiveHands Ransomware Attacks
uri: Hackers-Exploit-SonicWall-Zero-Day-Bug-in-FiveHands-Ransomware-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5650114573826322141
content:
An "aggressive" financially motivated threat group tapped into a zero-day flaw in SonicWall VPN appliances prior to it being patched by the company to deploy a new strain of ransomware called FIVEHANDS.
The group, tracked by cybersecurity firm Mandiant as UNC2447, took advantage of an "improper SQL command neutralization" flaw in the SSL-VPN SMA100 product (CVE-2021-20016, CVSS score 9.8) that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7fqYDpresAU:AAZYdG4v1yI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7fqYDpresAU:AAZYdG4v1yI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7fqYDpresAU:AAZYdG4v1yI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7fqYDpresAU:AAZYdG4v1yI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7fqYDpresAU:AAZYdG4v1yI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7fqYDpresAU:AAZYdG4v1yI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7fqYDpresAU:AAZYdG4v1yI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7fqYDpresAU:AAZYdG4v1yI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-718030630141012619
title: New Chinese Malware Targeted Russia's Largest Nuclear Submarine Designer
uri: New-Chinese-Malware-Targeted-Russia-s-Largest-Nuclear-Submarine-Design
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/718030630141012619
content:
A threat actor believed to be working on behalf of Chinese state-sponsored interests was recently observed targeting a Russia-based defense contractor involved in designing nuclear submarines for the naval arm of the Russian Armed Forces.
The phishing attack, which singled out a general director working at the Rubin Design Bureau, leveraged the infamous "Royal Road" Rich Text Format (RTF) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s-l7b3ufsIQ:z81T9IgTZS4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s-l7b3ufsIQ:z81T9IgTZS4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s-l7b3ufsIQ:z81T9IgTZS4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s-l7b3ufsIQ:z81T9IgTZS4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s-l7b3ufsIQ:z81T9IgTZS4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s-l7b3ufsIQ:z81T9IgTZS4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s-l7b3ufsIQ:z81T9IgTZS4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s-l7b3ufsIQ:z81T9IgTZS4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6405219246094679172
title: Researchers Uncover Iranian State-Sponsored Ransomware Operation
uri: Researchers-Uncover-Iranian-State-Sponsored-Ransomware-Operation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6405219246094679172
content:
Iran has been linked to yet another state-sponsored ransomware operation through a contracting company based in the country, according to new analysis.
"Iran's Islamic Revolutionary Guard Corps (IRGC) was operating a state-sponsored ransomware campaign through an Iranian contracting company called 'Emen Net Pasargard' (ENP)," cybersecurity firm Flashpoint said in its findings summarizing three <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=skbq_thGts0:JC080m-t6Sw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=skbq_thGts0:JC080m-t6Sw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=skbq_thGts0:JC080m-t6Sw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=skbq_thGts0:JC080m-t6Sw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=skbq_thGts0:JC080m-t6Sw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=skbq_thGts0:JC080m-t6Sw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=skbq_thGts0:JC080m-t6Sw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=skbq_thGts0:JC080m-t6Sw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8174774352555782086
title: A Rust-based Buer Malware Variant Has Been Spotted in the Wild
uri: A-Rust-based-Buer-Malware-Variant-Has-Been-Spotted-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8174774352555782086
content:
Cybersecurity researchers on Monday disclosed a new malspam campaign distributing a fresh variant of a malware loader called 'Buer' written in Rust, illustrating how adversaries are constantly honing their malware toolsets to evade analysis.
Dubbed "RustyBuer," the malware is distributed via emails masquerading as shipping notices from DHL Support, and is said to have affected no fewer than 200 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbZFRJaCdOQ:Bv9e4RI4IVE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbZFRJaCdOQ:Bv9e4RI4IVE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbZFRJaCdOQ:Bv9e4RI4IVE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CbZFRJaCdOQ:Bv9e4RI4IVE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbZFRJaCdOQ:Bv9e4RI4IVE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CbZFRJaCdOQ:Bv9e4RI4IVE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbZFRJaCdOQ:Bv9e4RI4IVE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CbZFRJaCdOQ:Bv9e4RI4IVE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5284934298549608315
title: Over 40 Apps With More Than 100 Million Installs Found Leaking AWS Keys
uri: Over-40-Apps-With-More-Than-100-Million-Installs-Found-Leaking-AWS-Key
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5284934298549608315
content:
Most mobile app users tend to blindly trust that the apps they download from app stores are safe and secure. But that isn't always the case.
To demonstrate the pitfalls and identify vulnerabilities on a large scale, cybersecurity and machine intelligence company CloudSEK recently provided a platform called BeVigil where individuals can search and check app security ratings and other security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gm80NS7QKA0:lROBoHJvGDQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gm80NS7QKA0:lROBoHJvGDQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gm80NS7QKA0:lROBoHJvGDQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gm80NS7QKA0:lROBoHJvGDQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gm80NS7QKA0:lROBoHJvGDQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gm80NS7QKA0:lROBoHJvGDQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gm80NS7QKA0:lROBoHJvGDQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gm80NS7QKA0:lROBoHJvGDQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1312470577274041288
title: Apple Releases Urgent Security Patches For Zero‑Day Bugs Under Active Attacks
uri: Apple-Releases-Urgent-Security-Patches-For-Zero-Day-Bugs-Under-Activ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1312470577274041288
content:
Apple on Monday released security updates for iOS, macOS, and watchOS to address three zero-day flaws and expand patches for a fourth vulnerability that the company said might have been exploited in the wild.
&lt;!--adsense--&gt;
The weaknesses all concern WebKit, the browser engine which powers Safari and other third-party web browsers in iOS, allowing an adversary to execute arbitrary code on target<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zcZi1Zqjmcc:dReBML7TTM0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zcZi1Zqjmcc:dReBML7TTM0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zcZi1Zqjmcc:dReBML7TTM0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zcZi1Zqjmcc:dReBML7TTM0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zcZi1Zqjmcc:dReBML7TTM0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zcZi1Zqjmcc:dReBML7TTM0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zcZi1Zqjmcc:dReBML7TTM0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zcZi1Zqjmcc:dReBML7TTM0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2350306280125962830
title: Critical Patch Out for Month-Old Pulse Secure VPN 0-Day Under Attack
uri: Critical-Patch-Out-for-Month-Old-Pulse-Secure-VPN-0-Day-Under-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2350306280125962830
content:
Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being actively exploited in the wild by at least two different threat actors.
Tracked as CVE-2021-22893 (CVSS score 10), the flaw concerns "multiple use after free" issues in Pulse Connect Secure that could allow a remote unauthenticated attacker to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOT8b4d4qz0:TU7Sg_GxxnI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOT8b4d4qz0:TU7Sg_GxxnI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOT8b4d4qz0:TU7Sg_GxxnI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cOT8b4d4qz0:TU7Sg_GxxnI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOT8b4d4qz0:TU7Sg_GxxnI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cOT8b4d4qz0:TU7Sg_GxxnI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cOT8b4d4qz0:TU7Sg_GxxnI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cOT8b4d4qz0:TU7Sg_GxxnI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4321906729351807079
title: New Pingback Malware Using ICMP Tunneling to Evade C&C Detection
uri: New-Pingback-Malware-Using-ICMP-Tunneling-to-Evade-C-C-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4321906729351807079
content:
Researchers on Tuesday disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems.
Called 'Pingback,' the Windows malware leverages Internet Control Message Protocol (ICMP) tunneling for covert bot communications, allowing the adversary to utilize ICMP packets to piggyback <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9afjY854iY:R4XDLcOr0Bw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9afjY854iY:R4XDLcOr0Bw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9afjY854iY:R4XDLcOr0Bw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W9afjY854iY:R4XDLcOr0Bw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9afjY854iY:R4XDLcOr0Bw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W9afjY854iY:R4XDLcOr0Bw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=W9afjY854iY:R4XDLcOr0Bw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=W9afjY854iY:R4XDLcOr0Bw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-863299738257690782
title: How Should the Service Desk Reset Passwords?
uri: How-Should-the-Service-Desk-Reset-Passwords
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/863299738257690782
content:
Ask the average helpdesk technician what they do all day, and they will probably answer by saying that they reset passwords. Sure, helpdesk technicians do plenty of other things too, but in many organizations, a disproportionate number of helpdesk calls are tied to password resets.
On the surface, having a helpdesk technician reset a user’s password probably doesn’t seem like a big deal. After <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gqJjSjlfCk8:Vckak__WOyw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gqJjSjlfCk8:Vckak__WOyw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gqJjSjlfCk8:Vckak__WOyw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gqJjSjlfCk8:Vckak__WOyw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gqJjSjlfCk8:Vckak__WOyw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gqJjSjlfCk8:Vckak__WOyw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gqJjSjlfCk8:Vckak__WOyw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gqJjSjlfCk8:Vckak__WOyw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-876704872533569892
title: ALERT — New 21Nails Exim Bugs Expose Millions of Email Servers to Hacking
uri: ALERT-New-21Nails-Exim-Bugs-Expose-Millions-of-Email-Servers-to-Ha
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/876704872533569892
content:
The maintainers of Exim have released patches to remediate as many as 21 security vulnerabilities in its software that could enable unauthenticated attackers to achieve complete remote code execution and gain root privileges.
Collectively named '21Nails,' the flaws include 11 vulnerabilities that require local access to the server and 10 other weaknesses that could be exploited remotely. The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=71ykmtStIUg:aQcBems6aiw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=71ykmtStIUg:aQcBems6aiw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=71ykmtStIUg:aQcBems6aiw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=71ykmtStIUg:aQcBems6aiw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=71ykmtStIUg:aQcBems6aiw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=71ykmtStIUg:aQcBems6aiw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=71ykmtStIUg:aQcBems6aiw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=71ykmtStIUg:aQcBems6aiw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8746662305217277147
title: BIOS PrivEsc Bugs Affect Hundreds of Millions of Dell PCs Worldwide
uri: BIOS-PrivEsc-Bugs-Affect-Hundreds-of-Millions-of-Dell-PCs-Worldwide
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8746662305217277147
content:
PC maker Dell has issued an update to fix multiple critical privilege escalation vulnerabilities that went undetected since 2009, potentially allowing attackers to gain kernel-mode privileges and cause a denial-of-service condition.
The issues, reported to Dell by researchers from SentinelOne on Dec. 1, 2020, reside in a firmware update driver named "dbutil_2_3.sys" that comes pre-installed on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSuO8npEbgI:QAD5xTmPVCM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSuO8npEbgI:QAD5xTmPVCM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSuO8npEbgI:QAD5xTmPVCM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BSuO8npEbgI:QAD5xTmPVCM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSuO8npEbgI:QAD5xTmPVCM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BSuO8npEbgI:QAD5xTmPVCM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSuO8npEbgI:QAD5xTmPVCM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BSuO8npEbgI:QAD5xTmPVCM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-169920177635822098
title: New Study Warns of Security Threats Linked to Recycled Phone Numbers
uri: New-Study-Warns-of-Security-Threats-Linked-to-Recycled-Phone-Numbers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/169920177635822098
content:
A new academic study has highlighted a number of privacy and security pitfalls associated with recycling mobile phone numbers that could be abused to stage a variety of exploits, including account takeovers, conduct phishing and spam attacks, and even prevent victims from signing up for online services.
Nearly 66% of the recycled numbers that were sampled were found to be tied to previous owners<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rW9i6ktBYjQ:ugp5zlY6X04:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rW9i6ktBYjQ:ugp5zlY6X04:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rW9i6ktBYjQ:ugp5zlY6X04:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rW9i6ktBYjQ:ugp5zlY6X04:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rW9i6ktBYjQ:ugp5zlY6X04:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rW9i6ktBYjQ:ugp5zlY6X04:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rW9i6ktBYjQ:ugp5zlY6X04:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rW9i6ktBYjQ:ugp5zlY6X04:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6007317925603484343
title: New Spectre Flaws in Intel and AMD CPUs Affect Billion of Computers
uri: New-Spectre-Flaws-in-Intel-and-AMD-CPUs-Affect-Billion-of-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6007317925603484343
content:
When Spectre, a class of critical vulnerabilities impacting modern processors, was publicly revealed in January 2018, the researchers behind the discovery said, "As it is not easy to fix, it will haunt us for quite some time," explaining the inspiration behind naming the speculative execution attacks.
Indeed, it's been more than three years, and there is no end to Spectre in sight.
A team of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MCYOQ4vzwbs:ppzpOQjIipM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MCYOQ4vzwbs:ppzpOQjIipM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MCYOQ4vzwbs:ppzpOQjIipM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MCYOQ4vzwbs:ppzpOQjIipM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MCYOQ4vzwbs:ppzpOQjIipM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MCYOQ4vzwbs:ppzpOQjIipM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MCYOQ4vzwbs:ppzpOQjIipM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MCYOQ4vzwbs:ppzpOQjIipM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-742613433709998532
title: New Qualcomm Chip Bug Could Let Hackers Spy On Android Devices
uri: New-Qualcomm-Chip-Bug-Could-Let-Hackers-Spy-On-Android-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/742613433709998532
content:
Cybersecurity researchers have disclosed a new security vulnerability in Qualcomm's mobile station modems (MSM) that could potentially allow an attacker to leverage the underlying Android operating system to slip malicious code into mobile phones, undetected.
"If exploited, the vulnerability would have allowed an attacker to use Android OS itself as an entry point to inject malicious and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qdgjr8ezy4I:Ix6lvzFQk1c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qdgjr8ezy4I:Ix6lvzFQk1c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qdgjr8ezy4I:Ix6lvzFQk1c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Qdgjr8ezy4I:Ix6lvzFQk1c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qdgjr8ezy4I:Ix6lvzFQk1c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Qdgjr8ezy4I:Ix6lvzFQk1c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Qdgjr8ezy4I:Ix6lvzFQk1c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Qdgjr8ezy4I:Ix6lvzFQk1c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5656455713549425491
title: Critical Flaws Hit Cisco SD-WAN vManage and HyperFlex Software
uri: Critical-Flaws-Hit-Cisco-SD-WAN-vManage-and-HyperFlex-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5656455713549425491
content:
Networking equipment major Cisco has rolled out software updates to address multiple critical vulnerabilities impacting HyperFlex HX and SD-WAN vManage Software that could allow an attacker to perform command injection attacks, execute arbitrary code, and gain access to sensitive information.
In a series of advisories published on May 5, the company said there are no workarounds that remediate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-BIP1Yle3j8:-yq8OhO3GHk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-BIP1Yle3j8:-yq8OhO3GHk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-BIP1Yle3j8:-yq8OhO3GHk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-BIP1Yle3j8:-yq8OhO3GHk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-BIP1Yle3j8:-yq8OhO3GHk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-BIP1Yle3j8:-yq8OhO3GHk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-BIP1Yle3j8:-yq8OhO3GHk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-BIP1Yle3j8:-yq8OhO3GHk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9022148753146028982
title: CISO Challenge: Check Your Cybersecurity Skills On This New Competition Site
uri: CISO-Challenge-Check-Your-Cybersecurity-Skills-On-This-New-Competitio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9022148753146028982
content:
InfoSec leaders tend to be a specific type. Their jobs require them to think of possible threats, take actions that may not pay immediate results, plan for unknown security risks, and react quickly when emergencies arise, often before the morning's first coffee.
The high-stakes position also means that CISOs need to keep their knowledge and skills sharp – you can never really know what's around <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OV2adAZMQk0:10Fqbd8HkWc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OV2adAZMQk0:10Fqbd8HkWc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OV2adAZMQk0:10Fqbd8HkWc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OV2adAZMQk0:10Fqbd8HkWc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OV2adAZMQk0:10Fqbd8HkWc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OV2adAZMQk0:10Fqbd8HkWc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OV2adAZMQk0:10Fqbd8HkWc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OV2adAZMQk0:10Fqbd8HkWc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3228539432967763139
title: New Stealthy Rootkit Infiltrated Networks of High-Profile Organizations
uri: New-Stealthy-Rootkit-Infiltrated-Networks-of-High-Profile-Organization
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3228539432967763139
content:
An unknown threat actor with the capabilities to evolve and tailor its toolset to target environments infiltrated high-profile organizations in Asia and Africa with an evasive Windows rootkit since at least 2018.
Called 'Moriya,' the malware is a "passive backdoor which allows attackers to inspect all incoming traffic to the infected machine, filter out packets that are marked as designated for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M93FJhe-tOY:7gwlh2UqFe4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M93FJhe-tOY:7gwlh2UqFe4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M93FJhe-tOY:7gwlh2UqFe4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M93FJhe-tOY:7gwlh2UqFe4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M93FJhe-tOY:7gwlh2UqFe4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M93FJhe-tOY:7gwlh2UqFe4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M93FJhe-tOY:7gwlh2UqFe4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M93FJhe-tOY:7gwlh2UqFe4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7645400855062696373
title: New TsuNAME Flaw Could Let Attackers Take Down Authoritative DNS Servers
uri: New-TsuNAME-Flaw-Could-Let-Attackers-Take-Down-Authoritative-DNS-Serve
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7645400855062696373
content:
Security researchers Thursday disclosed a new critical vulnerability affecting Domain Name System (DNS) resolvers that could be exploited by adversaries to carry out reflection-based denial-of-service attacks against authoritative nameservers.
The flaw, called 'TsuNAME,' was discovered by researchers from SIDN Labs and InternetNZ, which manage the national top-level internet domains '.nl' and '.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rsMgq4FhbnY:8tmarHjipug:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rsMgq4FhbnY:8tmarHjipug:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rsMgq4FhbnY:8tmarHjipug:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rsMgq4FhbnY:8tmarHjipug:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rsMgq4FhbnY:8tmarHjipug:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rsMgq4FhbnY:8tmarHjipug:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rsMgq4FhbnY:8tmarHjipug:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rsMgq4FhbnY:8tmarHjipug:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2293971501515775066
title: 6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS
uri: 6-Unpatched-Flaws-Disclosed-in-Remote-Mouse-App-for-Android-and-iOS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2293971501515775066
content:
As many as six zero-days have been uncovered in an application called Remote Mouse, allowing a remote attacker to achieve full code execution without any user interaction.
The unpatched flaws, collectively named 'Mouse Trap,' were disclosed on Wednesday by security researcher Axel Persinger, who said, "It's clear that this application is very vulnerable and puts users at risk with bad <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DOflbA-Fhrw:ZpNRJmXZY3c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DOflbA-Fhrw:ZpNRJmXZY3c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DOflbA-Fhrw:ZpNRJmXZY3c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DOflbA-Fhrw:ZpNRJmXZY3c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DOflbA-Fhrw:ZpNRJmXZY3c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DOflbA-Fhrw:ZpNRJmXZY3c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DOflbA-Fhrw:ZpNRJmXZY3c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DOflbA-Fhrw:ZpNRJmXZY3c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8725131018343466623
title: 4 Major Privacy and Security Updates From Google You Should Know About
uri: 4-Major-Privacy-and-Security-Updates-From-Google-You-Should-Know-About
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8725131018343466623
content:
Google has announced a number of user-facing and under-the-hood changes in an attempt to boost privacy and security, including rolling out two-factor authentication automatically to all eligible users and bringing iOS-styled privacy labels to Android app listings.
"Today we ask people who have enrolled in two-step verification (2SV) to confirm it's really them with a simple tap via a Google <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ops3M_DSsh0:l55amPnZRrw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ops3M_DSsh0:l55amPnZRrw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ops3M_DSsh0:l55amPnZRrw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ops3M_DSsh0:l55amPnZRrw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ops3M_DSsh0:l55amPnZRrw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ops3M_DSsh0:l55amPnZRrw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ops3M_DSsh0:l55amPnZRrw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ops3M_DSsh0:l55amPnZRrw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6011208711344759666
title: Facebook Will Limit Your WhatsApp Features For Not Accepting Privacy Policy
uri: Facebook-Will-Limit-Your-WhatsApp-Features-For-Not-Accepting-Privacy-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6011208711344759666
content:
WhatsApp on Friday disclosed that it won't deactivate accounts of users who don't accept its new privacy policy rolling out on May 15, adding it will continue to keep reminding them to accept the new terms.
"No one will have their accounts deleted or lose functionality of WhatsApp on May 15 because of this update," the Facebook-owned messaging service said in a statement.
The move marked a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mga_4PTWLn4:cgHBkcCPNaM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mga_4PTWLn4:cgHBkcCPNaM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mga_4PTWLn4:cgHBkcCPNaM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mga_4PTWLn4:cgHBkcCPNaM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mga_4PTWLn4:cgHBkcCPNaM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mga_4PTWLn4:cgHBkcCPNaM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mga_4PTWLn4:cgHBkcCPNaM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mga_4PTWLn4:cgHBkcCPNaM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7821133156468331133
title: Top 12 Security Flaws Russian Spy Hackers Are Exploiting in the Wild
uri: Top-12-Security-Flaws-Russian-Spy-Hackers-Are-Exploiting-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7821133156468331133
content:
Cyber operatives affiliated with the Russian Foreign Intelligence Service (SVR) have switched up their tactics in response to previous public disclosures of their attack methods, according to a new advisory jointly published by intelligence agencies from the U.K. and U.S. Friday.
"SVR cyber operators appear to have reacted [...] by changing their TTPs in an attempt to avoid further detection and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-JfcmQiD8Ak:_G6eo65ji1A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-JfcmQiD8Ak:_G6eo65ji1A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-JfcmQiD8Ak:_G6eo65ji1A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-JfcmQiD8Ak:_G6eo65ji1A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-JfcmQiD8Ak:_G6eo65ji1A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-JfcmQiD8Ak:_G6eo65ji1A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-JfcmQiD8Ak:_G6eo65ji1A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-JfcmQiD8Ak:_G6eo65ji1A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9007579481524307036
title: Ransomware Cyber Attack Forced the Largest U.S. Fuel Pipeline to Shut Down
uri: Ransomware-Cyber-Attack-Forced-the-Largest-U-S-Fuel-Pipeline-to-Shut
url:
http://feedproxy.google.com/~r/TheHackersNews/~3/dIMiPwAzvPo/ransomware-cyber-attack-forced-largest.html

content:
Colonial Pipeline, which carries 45% of the fuel consumed on the U.S. East Coast, on Saturday said it halted operations due to a ransomware attack, once again demonstrating how infrastructure is vulnerable to cyberattacks.
"On May 7, the Colonial Pipeline Company learned it was the victim of a cybersecurity attack," the company said in a statement posted on its website. "We have since determined<img src="http://feeds.feedburner.com/~r/TheHackersNews/~4/dIMiPwAzvPo" height="1" width="1" alt=""/><div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0peYk-MzIpA:JRpDWGHnjDM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0peYk-MzIpA:JRpDWGHnjDM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0peYk-MzIpA:JRpDWGHnjDM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0peYk-MzIpA:JRpDWGHnjDM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0peYk-MzIpA:JRpDWGHnjDM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0peYk-MzIpA:JRpDWGHnjDM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0peYk-MzIpA:JRpDWGHnjDM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0peYk-MzIpA:JRpDWGHnjDM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1012270025754943831
title: Four Plead Guilty to Aiding Cyber Criminals with Bulletproof Hosting
uri: Four-Plead-Guilty-to-Aiding-Cyber-Criminals-with-Bulletproof-Hosting
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1012270025754943831
content:
Four Eastern European nationals face 20 years in prison for Racketeer Influenced Corrupt Organization (RICO) charges after pleading guilty to providing bulletproof hosting services between 2008 and 2015, which were used by cybercriminals to distribute malware to financial entities across the U.S.
The individuals, Aleksandr Grichishkin, 34, and Andrei Skvortsov, 34, of Russia; Aleksandr <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaTp1fR5SEQ:v0hq5P_h0Ms:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaTp1fR5SEQ:v0hq5P_h0Ms:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaTp1fR5SEQ:v0hq5P_h0Ms:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZaTp1fR5SEQ:v0hq5P_h0Ms:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaTp1fR5SEQ:v0hq5P_h0Ms:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZaTp1fR5SEQ:v0hq5P_h0Ms:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZaTp1fR5SEQ:v0hq5P_h0Ms:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZaTp1fR5SEQ:v0hq5P_h0Ms:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1335964713230565526
title: Over 25% Of Tor Exit Relays Are Spying On Users' Dark Web Activities
uri: Over-25-Of-Tor-Exit-Relays-Are-Spying-On-Users-Dark-Web-Activities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1335964713230565526
content:
An unknown threat actor managed to control more than 27% of the entire Tor network exit capacity in early February 2021, a new study on the dark web infrastructure revealed.
"The entity attacking Tor users is actively exploiting tor users since over a year and expanded the scale of their attacks to a new record level," an independent security researcher who goes by the name nusenu said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=keMzbRcpGLs:wXyQsUh8Da0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=keMzbRcpGLs:wXyQsUh8Da0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=keMzbRcpGLs:wXyQsUh8Da0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=keMzbRcpGLs:wXyQsUh8Da0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=keMzbRcpGLs:wXyQsUh8Da0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=keMzbRcpGLs:wXyQsUh8Da0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=keMzbRcpGLs:wXyQsUh8Da0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=keMzbRcpGLs:wXyQsUh8Da0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5377576919728648877
title: Is it still a good idea to require users to change their passwords?
uri: Is-it-still-a-good-idea-to-require-users-to-change-their-passwords
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5377576919728648877
content:
For as long as corporate IT has been in existence, users have been required to change their passwords periodically. In fact, the need for scheduled password changes may be one of the most long-standing of all IT best practices.
Recently, however, things have started to change. Microsoft has reversed course on the best practices that it has had in place for decades and no longer recommends that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KI2KbDsqzN4:cuS--F6t7h0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KI2KbDsqzN4:cuS--F6t7h0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KI2KbDsqzN4:cuS--F6t7h0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KI2KbDsqzN4:cuS--F6t7h0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KI2KbDsqzN4:cuS--F6t7h0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KI2KbDsqzN4:cuS--F6t7h0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KI2KbDsqzN4:cuS--F6t7h0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KI2KbDsqzN4:cuS--F6t7h0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7584803300715984581
title: U.S. Declares Emergency in 17 States Over Fuel Pipeline Cyber Attack
uri: U-S-Declares-Emergency-in-17-States-Over-Fuel-Pipeline-Cyber-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7584803300715984581
content:
The ransomware attack against Colonial Pipeline's networks has prompted the U.S. Federal Motor Carrier Safety Administration (FMCSA) to issue a regional emergency declaration in 17 states and the District of Columbia (D.C.).
The declaration provides a temporary exemption to Parts 390 through 399 of the Federal Motor Carrier Safety Regulations (FMCSRs), allowing alternate transportation of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VLEwlyeO8kU:Jcxx4WgzPHE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VLEwlyeO8kU:Jcxx4WgzPHE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VLEwlyeO8kU:Jcxx4WgzPHE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VLEwlyeO8kU:Jcxx4WgzPHE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VLEwlyeO8kU:Jcxx4WgzPHE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VLEwlyeO8kU:Jcxx4WgzPHE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VLEwlyeO8kU:Jcxx4WgzPHE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VLEwlyeO8kU:Jcxx4WgzPHE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6410537355333398411
title: Experts warn of a new Android banking trojan stealing users' credentials
uri: Experts-warn-of-a-new-Android-banking-trojan-stealing-users-credentia
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6410537355333398411
content:
Cybersecurity researchers on Monday disclosed a new Android trojan that hijacks users' credentials and SMS messages to facilitate fraudulent activities against banks in Spain, Germany, Italy, Belgium, and the Netherlands.
Called "TeaBot" (or Anatsa), the malware is said to be in its early stages of development, with malicious attacks targeting financial apps commencing in late March 2021, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JVQhnmPaFWw:KXNvguBgEuo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JVQhnmPaFWw:KXNvguBgEuo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JVQhnmPaFWw:KXNvguBgEuo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JVQhnmPaFWw:KXNvguBgEuo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JVQhnmPaFWw:KXNvguBgEuo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JVQhnmPaFWw:KXNvguBgEuo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JVQhnmPaFWw:KXNvguBgEuo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JVQhnmPaFWw:KXNvguBgEuo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8253463283321780436
title: LIVE Webinar — The Rabbit Hole of Automation
uri: LIVE-Webinar-The-Rabbit-Hole-of-Automation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8253463283321780436
content:
The concept of automation has taken on a life of its own in recent years. The idea is nothing new, but the current interest in automation is a mix of both hype and innovation.
On the one hand, it's much easier today to automate everything from small processes to massive-scale tasks than it's ever been before. On the other hand, are we really prepared to hand the reins over to completely <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Un4t6LllXYw:EEV_EKBoBKw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Un4t6LllXYw:EEV_EKBoBKw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Un4t6LllXYw:EEV_EKBoBKw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Un4t6LllXYw:EEV_EKBoBKw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Un4t6LllXYw:EEV_EKBoBKw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Un4t6LllXYw:EEV_EKBoBKw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Un4t6LllXYw:EEV_EKBoBKw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Un4t6LllXYw:EEV_EKBoBKw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6835996973903835125
title: U.S Intelligence Agencies Warn About 5G Network Weaknesses
uri: U-S-Intelligence-Agencies-Warn-About-5G-Network-Weaknesses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6835996973903835125
content:
Inadequate implementation of telecom standards, supply chain threats, and weaknesses in systems architecture could pose major cybersecurity risks to 5G networks, potentially making them a lucrative target for cybercriminals and nation-state adversaries to exploit for valuable intelligence.
The analysis, which aims to identify and assess risks and vulnerabilities introduced by 5G adoption, was <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=72rY2SHkfA0:VWkolLvd_9w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=72rY2SHkfA0:VWkolLvd_9w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=72rY2SHkfA0:VWkolLvd_9w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=72rY2SHkfA0:VWkolLvd_9w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=72rY2SHkfA0:VWkolLvd_9w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=72rY2SHkfA0:VWkolLvd_9w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=72rY2SHkfA0:VWkolLvd_9w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=72rY2SHkfA0:VWkolLvd_9w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1669346748511726010
title: Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild
uri: Alert-Hackers-Exploit-Adobe-Reader-0-Day-Vulnerability-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1669346748511726010
content:
Adobe has released Patch Tuesday updates for the month of May with fixes for multiple vulnerabilities spanning 12 different products, including a zero-day flaw affecting Adobe Reader that's actively exploited in the wild.
The list of updated applications includes Adobe Experience Manager, Adobe InDesign, Adobe Illustrator, Adobe InCopy, Adobe Genuine Service, Adobe Acrobat and Reader, Magento, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9imKYsbJ_o:UNDTm-EcW_c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9imKYsbJ_o:UNDTm-EcW_c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9imKYsbJ_o:UNDTm-EcW_c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h9imKYsbJ_o:UNDTm-EcW_c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9imKYsbJ_o:UNDTm-EcW_c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h9imKYsbJ_o:UNDTm-EcW_c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=h9imKYsbJ_o:UNDTm-EcW_c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=h9imKYsbJ_o:UNDTm-EcW_c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4632009136146132258
title: Ransomware Gang Leaks Metropolitan Police Data After Failed Negotiations
uri: Ransomware-Gang-Leaks-Metropolitan-Police-Data-After-Failed-Negotiatio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4632009136146132258
content:
The cybercrime syndicate behind Babuk ransomware has leaked more personal files belonging to the Metropolitan Police Department (MPD) after negotiations with the DC Police broke down, warning that they intend to publish all data ransom demands are not met.
"The negotiations reached a dead end, the amount we were offered does not suit us, we are posting 20 more personal files on officers, you can<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTNRO4Aj21g:qubc8OB-7KQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTNRO4Aj21g:qubc8OB-7KQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTNRO4Aj21g:qubc8OB-7KQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vTNRO4Aj21g:qubc8OB-7KQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTNRO4Aj21g:qubc8OB-7KQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vTNRO4Aj21g:qubc8OB-7KQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vTNRO4Aj21g:qubc8OB-7KQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vTNRO4Aj21g:qubc8OB-7KQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-409607215909185638
title: Latest Microsoft Windows Updates Patch Dozens of Security Flaws
uri: Latest-Microsoft-Windows-Updates-Patch-Dozens-of-Security-Flaws
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/409607215909185638
content:
Microsoft on Tuesday rolled out its scheduled monthly security update with patches for 55 security flaws affecting Windows, Exchange Server, Internet Explorer, Office, Hyper-V, Visual Studio, and Skype for Business.
Of these 55 bugs, four are rated as Critical, 50 are rated as Important, and one is listed as Moderate in severity. Three of the vulnerabilities are publicly known, although, unlike <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tv6_lThI51c:0qoi2v8-DRg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tv6_lThI51c:0qoi2v8-DRg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tv6_lThI51c:0qoi2v8-DRg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tv6_lThI51c:0qoi2v8-DRg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tv6_lThI51c:0qoi2v8-DRg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tv6_lThI51c:0qoi2v8-DRg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tv6_lThI51c:0qoi2v8-DRg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tv6_lThI51c:0qoi2v8-DRg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7298042571901601332
title: Nearly All Wi-Fi Devices Are Vulnerable to New FragAttacks
uri: Nearly-All-Wi-Fi-Devices-Are-Vulnerable-to-New-FragAttacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7298042571901601332
content:
Three design and multiple implementation flaws have been disclosed in IEEE 802.11 technical standard that undergirds Wi-Fi, potentially enabling an adversary to take control over a system and plunder confidential data.
Called FragAttacks (short for FRgmentation and AGgregation attacks), the weaknesses impact all Wi-Fi security protocols, from Wired Equivalent Privacy (WEP) all the way to Wi-Fi <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0zic0laJkTM:uUgvRgyr94M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0zic0laJkTM:uUgvRgyr94M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0zic0laJkTM:uUgvRgyr94M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0zic0laJkTM:uUgvRgyr94M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0zic0laJkTM:uUgvRgyr94M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0zic0laJkTM:uUgvRgyr94M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0zic0laJkTM:uUgvRgyr94M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0zic0laJkTM:uUgvRgyr94M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9196855547875807554
title: Dark Web Getting Loaded With Bogus Covid-19 Vaccines and Forged Cards
uri: Dark-Web-Getting-Loaded-With-Bogus-Covid-19-Vaccines-and-Forged-Cards
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9196855547875807554
content:
Bogus COVID-19 test results, fraudulent vaccination cards, and questionable vaccines are emerging a hot commodity on the dark web in what's the latest in a long list of cybercrimes capitalizing on the coronavirus pandemic.
"A new and troubling phenomenon is that consumers are buying COVID-19 vaccines on the black market due to the increased demand around the world," said Anne An, a senior <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzQABdhro3Y:Bvl7RAuykZg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzQABdhro3Y:Bvl7RAuykZg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzQABdhro3Y:Bvl7RAuykZg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fzQABdhro3Y:Bvl7RAuykZg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzQABdhro3Y:Bvl7RAuykZg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fzQABdhro3Y:Bvl7RAuykZg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fzQABdhro3Y:Bvl7RAuykZg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fzQABdhro3Y:Bvl7RAuykZg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3689865777577511506
title: Can Data Protection Systems Prevent Data At Rest Leakage?
uri: Can-Data-Protection-Systems-Prevent-Data-At-Rest-Leakage
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3689865777577511506
content:
Protection against insider risks works when the process involves controlling the data transfer channels or examining data sources.
One approach involves preventing USB flash drives from being copied or sending them over email. The second one concerns preventing leakage or fraud in which an insider accesses files or databases with harmful intentions.
What's the best way to protect your data?
It <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0P_60ldbA14:_xbOpPsjavI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0P_60ldbA14:_xbOpPsjavI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0P_60ldbA14:_xbOpPsjavI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0P_60ldbA14:_xbOpPsjavI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0P_60ldbA14:_xbOpPsjavI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0P_60ldbA14:_xbOpPsjavI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0P_60ldbA14:_xbOpPsjavI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0P_60ldbA14:_xbOpPsjavI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3735177696290539220
title: Colonial Pipeline Paid Nearly $5 Million in Ransom to Cybercriminals
uri: Colonial-Pipeline-Paid-Nearly-5-Million-in-Ransom-to-Cybercriminals
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3735177696290539220
content:
Colonial Pipeline on Thursday restored operations to its entire pipeline system nearly a week following a ransomware infection targeting its IT systems, forcing it to reportedly shell out nearly $5 million to restore control of its computer networks.
"Following this restart, it will take several days for the product delivery supply chain to return to normal," the company said in a statement on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vvXHpZZ-9lo:e-RQIZxRt_w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vvXHpZZ-9lo:e-RQIZxRt_w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vvXHpZZ-9lo:e-RQIZxRt_w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vvXHpZZ-9lo:e-RQIZxRt_w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vvXHpZZ-9lo:e-RQIZxRt_w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vvXHpZZ-9lo:e-RQIZxRt_w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vvXHpZZ-9lo:e-RQIZxRt_w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vvXHpZZ-9lo:e-RQIZxRt_w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9019880824255969988
title: Rapid7 Source Code Breached in Codecov Supply-Chain Attack
uri: Rapid7-Source-Code-Breached-in-Codecov-Supply-Chain-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9019880824255969988
content:
Cybersecurity company Rapid7 on Thursday revealed that unidentified actors improperly managed to get hold of a small portion of its source code repositories in the aftermath of the software supply chain compromise targeting Codecov earlier this year.
"A small subset of our source code repositories for internal tooling for our [Managed Detection and Response] service was accessed by an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9UKkNg64X5o:A6z575unyYQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9UKkNg64X5o:A6z575unyYQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9UKkNg64X5o:A6z575unyYQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9UKkNg64X5o:A6z575unyYQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9UKkNg64X5o:A6z575unyYQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9UKkNg64X5o:A6z575unyYQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9UKkNg64X5o:A6z575unyYQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9UKkNg64X5o:A6z575unyYQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5129683525993945173
title: Magecart Hackers Now hide PHP-Based Backdoor In Website Favicons
uri: Magecart-Hackers-Now-hide-PHP-Based-Backdoor-In-Website-Favicons
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5129683525993945173
content:
Cybercrime groups are distributing malicious PHP web shells disguised as a favicon to maintain remote access to the compromised servers and inject JavaScript skimmers into online shopping platforms with an aim to steal financial information from their users.
"These web shells known as Smilodon or Megalodon are used to dynamically load JavaScript skimming code via server-side requests into online<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFK0H3Q2zss:ZZnFkqDhJ78:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFK0H3Q2zss:ZZnFkqDhJ78:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFK0H3Q2zss:ZZnFkqDhJ78:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nFK0H3Q2zss:ZZnFkqDhJ78:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFK0H3Q2zss:ZZnFkqDhJ78:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nFK0H3Q2zss:ZZnFkqDhJ78:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nFK0H3Q2zss:ZZnFkqDhJ78:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nFK0H3Q2zss:ZZnFkqDhJ78:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6017200400605928056
title: Big Cybersecurity Tips For Remote Workers Who Use Their Own Tech
uri: Big-Cybersecurity-Tips-For-Remote-Workers-Who-Use-Their-Own-Tech
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6017200400605928056
content:
As the total number of people working from home has grown dramatically in the last year or two, so has the number of individuals who use all of their own technology for their jobs. If you're a remote worker who relies on your own PC to get your work done, then you may be at a heightened risk for some of the major threats that are impacting the computer industry as a whole.
Relatively few people <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WKdpfdJ3_H0:mQXgtQYA8bw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WKdpfdJ3_H0:mQXgtQYA8bw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WKdpfdJ3_H0:mQXgtQYA8bw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WKdpfdJ3_H0:mQXgtQYA8bw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WKdpfdJ3_H0:mQXgtQYA8bw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WKdpfdJ3_H0:mQXgtQYA8bw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WKdpfdJ3_H0:mQXgtQYA8bw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WKdpfdJ3_H0:mQXgtQYA8bw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4862450405624361352
title: Pakistan-Linked Hackers Added New Windows Malware to Its Arsenal
uri: Pakistan-Linked-Hackers-Added-New-Windows-Malware-to-Its-Arsenal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4862450405624361352
content:
Cybercriminals with suspected ties to Pakistan continue to rely on social engineering as a crucial component of its operations as part of an evolving espionage campaign against Indian targets, according to new research.
The attacks have been linked to a group called Transparent Tribe, also known as Operation C-Major, APT36, and Mythic Leopard, which has created fraudulent domains mimicking <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6_YF2n3KTQg:UB2VkN4-bvE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6_YF2n3KTQg:UB2VkN4-bvE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6_YF2n3KTQg:UB2VkN4-bvE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6_YF2n3KTQg:UB2VkN4-bvE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6_YF2n3KTQg:UB2VkN4-bvE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6_YF2n3KTQg:UB2VkN4-bvE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6_YF2n3KTQg:UB2VkN4-bvE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6_YF2n3KTQg:UB2VkN4-bvE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-829032780309432903
title: Hackers Using Microsoft Build Engine to Deliver Malware Filelessly
uri: Hackers-Using-Microsoft-Build-Engine-to-Deliver-Malware-Filelessly
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/829032780309432903
content:
Threat actors are abusing Microsoft Build Engine (MSBuild) to filelessly deliver remote access trojans and password-stealing malware on targeted Windows systems.
The actively ongoing campaign is said to have emerged last month, researchers from cybersecurity firm Anomali said on Thursday, adding the malicious build files came embedded with encoded executables and shellcode that deploy backdoors,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2E879je8Hc:acYr3PcWEzU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2E879je8Hc:acYr3PcWEzU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2E879je8Hc:acYr3PcWEzU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I2E879je8Hc:acYr3PcWEzU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2E879je8Hc:acYr3PcWEzU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I2E879je8Hc:acYr3PcWEzU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I2E879je8Hc:acYr3PcWEzU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I2E879je8Hc:acYr3PcWEzU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4190121334319562092
title: U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized
uri: U-S-Pipeline-Ransomware-Attackers-Go-Dark-After-Servers-and-Bitcoin-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4190121334319562092
content:
Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure.
All the dark websites operated by the gang, including its DarkSide Leaks blog, ransom collection site, and breach data content <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmH1TuNDqp4:kljW5Ipe9zE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmH1TuNDqp4:kljW5Ipe9zE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmH1TuNDqp4:kljW5Ipe9zE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CmH1TuNDqp4:kljW5Ipe9zE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmH1TuNDqp4:kljW5Ipe9zE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CmH1TuNDqp4:kljW5Ipe9zE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CmH1TuNDqp4:kljW5Ipe9zE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CmH1TuNDqp4:kljW5Ipe9zE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4842879074880644356
title: Why Password Hygiene Needs a Reboot
uri: Why-Password-Hygiene-Needs-a-Reboot
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4842879074880644356
content:
In today's digital world, password security is more important than ever. While biometrics, one-time passwords (OTP), and other emerging forms of authentication are often touted as replacements to the traditional password, today, this concept is more marketing hype than anything else.
But just because passwords aren't going anywhere anytime soon doesn't mean that organizations don’t need to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r7FwubEp0yY:y2BttT9rN0M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r7FwubEp0yY:y2BttT9rN0M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r7FwubEp0yY:y2BttT9rN0M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r7FwubEp0yY:y2BttT9rN0M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r7FwubEp0yY:y2BttT9rN0M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r7FwubEp0yY:y2BttT9rN0M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r7FwubEp0yY:y2BttT9rN0M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r7FwubEp0yY:y2BttT9rN0M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9212037180928181293
title: Experts Warn About Ongoing AutoHotkey-Based Malware Attacks
uri: Experts-Warn-About-Ongoing-AutoHotkey-Based-Malware-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9212037180928181293
content:
Cybersecurity researchers have uncovered an ongoing malware campaign that heavily relies on AutoHotkey (AHK) scripting language to deliver multiple remote access trojans (RAT) such as Revenge RAT, LimeRAT, AsyncRAT, Houdini, and Vjw0rm on target Windows systems.
At least four different versions of the campaign have been spotted starting February 2021, according to researchers from Morphisec Labs<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPwSzT7gLgw:0MtkhQDqrJE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPwSzT7gLgw:0MtkhQDqrJE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPwSzT7gLgw:0MtkhQDqrJE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oPwSzT7gLgw:0MtkhQDqrJE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPwSzT7gLgw:0MtkhQDqrJE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oPwSzT7gLgw:0MtkhQDqrJE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPwSzT7gLgw:0MtkhQDqrJE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oPwSzT7gLgw:0MtkhQDqrJE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4465124254375480483
title: Apple's Find My Network Can be Abused to Exfiltrate Data From Nearby Devices
uri: Apple-s-Find-My-Network-Can-be-Abused-to-Exfiltrate-Data-From-Nearby-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4465124254375480483
content:
Latest research has demonstrated a new exploit that enables arbitrary data to be uploaded from devices that are not connected to the Internet by simply sending "Find My Bluetooth" broadcasts to nearby Apple devices.
"It's possible to upload arbitrary data from non-internet-connected devices by sending Find My [Bluetooth Low Energy] broadcasts to nearby Apple devices that then upload the data for<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G979KS-rgTg:VkrzsbpCKjw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G979KS-rgTg:VkrzsbpCKjw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G979KS-rgTg:VkrzsbpCKjw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G979KS-rgTg:VkrzsbpCKjw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G979KS-rgTg:VkrzsbpCKjw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G979KS-rgTg:VkrzsbpCKjw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G979KS-rgTg:VkrzsbpCKjw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G979KS-rgTg:VkrzsbpCKjw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8075806505890658111
title: Experts Reveal Over 150 Ways to Steal Control of 58 Android Stalkerware Apps
uri: Experts-Reveal-Over-150-Ways-to-Steal-Control-of-58-Android-Stalkerwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8075806505890658111
content:
A total of 158 privacy and security issues have been identified in 58 Android stalkware apps from various vendors that could enable a malicious actor to take control of a victim's device, hijack a stalker's account, intercept data, achieve remote code execution, and even frame the victim by uploading fabricated evidence.
The new findings, which come from an analysis of 86 stalkerware apps for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LGLf_oKAA6A:AOKyh2T-bRk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LGLf_oKAA6A:AOKyh2T-bRk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LGLf_oKAA6A:AOKyh2T-bRk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LGLf_oKAA6A:AOKyh2T-bRk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LGLf_oKAA6A:AOKyh2T-bRk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LGLf_oKAA6A:AOKyh2T-bRk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LGLf_oKAA6A:AOKyh2T-bRk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LGLf_oKAA6A:AOKyh2T-bRk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1390237110517667123
title: 70 European and South American Banks Under Attack By Bizarro Banking Malware
uri: 70-European-and-South-American-Banks-Under-Attack-By-Bizarro-Banking-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1390237110517667123
content:
A financially motivated cybercrime gang has unleashed a previously undocumented banking trojan, which can steal credentials from customers of 70 banks located in various European and South American countries.
Dubbed "Bizarro" by Kaspersky researchers, the Windows malware is "using affiliates or recruiting money mules to operationalize their attacks, cashing out or simply to helping [sic] with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCDokR5fAd8:BuHSnmVd7qY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCDokR5fAd8:BuHSnmVd7qY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCDokR5fAd8:BuHSnmVd7qY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QCDokR5fAd8:BuHSnmVd7qY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCDokR5fAd8:BuHSnmVd7qY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QCDokR5fAd8:BuHSnmVd7qY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QCDokR5fAd8:BuHSnmVd7qY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QCDokR5fAd8:BuHSnmVd7qY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1535524165468498285
title: Free "vCISO Clinic" offers Resource-Constrained InfoSec Leaders a Helping Hand
uri: Free-vCISO-Clinic-offers-Resource-Constrained-InfoSec-Leaders-a-Help
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1535524165468498285
content:
Leaders in the InfoSec field face a strange dilemma. On the one hand, there are hundreds of thousands of resources available to find online to read (or watch) if they have questions – that's a benefit of a digital-first field. On the other hand, most leaders face challenges that – while not entirely unique each time – tend to require a specific touch or solution.
For most, it would be great to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVqllAt5IRE:5Mgs14ZJ5pc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVqllAt5IRE:5Mgs14ZJ5pc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVqllAt5IRE:5Mgs14ZJ5pc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cVqllAt5IRE:5Mgs14ZJ5pc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVqllAt5IRE:5Mgs14ZJ5pc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cVqllAt5IRE:5Mgs14ZJ5pc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cVqllAt5IRE:5Mgs14ZJ5pc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cVqllAt5IRE:5Mgs14ZJ5pc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5605071811311326722
title: How Apple Gave Chinese Government Access to iCloud Data and Censored Apps
uri: How-Apple-Gave-Chinese-Government-Access-to-iCloud-Data-and-Censored-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5605071811311326722
content:
In July 2018, when Guizhou-Cloud Big Data (GCBD) agreed to a deal with state-owned telco China Telecom to move users' iCloud data belonging to Apple's China-based users to the latter's servers, the shift raised concerns that it could make user data vulnerable to state surveillance.
Now, according to a deep-dive report from The New York Times, Apple's privacy and security concessions have "made <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wy_T9oeq1Qc:hNYTaMBP-hA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wy_T9oeq1Qc:hNYTaMBP-hA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wy_T9oeq1Qc:hNYTaMBP-hA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wy_T9oeq1Qc:hNYTaMBP-hA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wy_T9oeq1Qc:hNYTaMBP-hA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wy_T9oeq1Qc:hNYTaMBP-hA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wy_T9oeq1Qc:hNYTaMBP-hA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wy_T9oeq1Qc:hNYTaMBP-hA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4514046785328461637
title: A Simple 1-Click Compromised Password Reset Feature Coming to Chrome Browser
uri: A-Simple-1-Click-Compromised-Password-Reset-Feature-Coming-to-Chrome-B
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4514046785328461637
content:
Google on Tuesday announced a new feature to its password manager that could be used to change a stolen password automatically with a single tap.
Automated password changes build on the tool's ability to check the safety of saved passwords. Thus when Chrome finds a password that may have been compromised as part of a data breach, it will prompt users with an alert containing a "Change Password" <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JX99e0quD7w:tv0tJA9V3uE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JX99e0quD7w:tv0tJA9V3uE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JX99e0quD7w:tv0tJA9V3uE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JX99e0quD7w:tv0tJA9V3uE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JX99e0quD7w:tv0tJA9V3uE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JX99e0quD7w:tv0tJA9V3uE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JX99e0quD7w:tv0tJA9V3uE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JX99e0quD7w:tv0tJA9V3uE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6431358944164828650
title: Mozilla Begins Rolling Out 'Site Isolation' Security Feature to Firefox Browser
uri: Mozilla-Begins-Rolling-Out-Site-Isolation-Security-Feature-to-Firefo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6431358944164828650
content:
Mozilla has begun rolling out a new security feature for its Firefox browser in nightly and beta channels that aims to protect users against a new class of side-channel attacks from malicious sites.
Called "Site Isolation," the implementation loads each website separately in its own operating system process and, as a result, prevents untrusted code from a rogue website from accessing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLGFHQbeU2o:ou5beAQ5TCw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLGFHQbeU2o:ou5beAQ5TCw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLGFHQbeU2o:ou5beAQ5TCw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YLGFHQbeU2o:ou5beAQ5TCw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLGFHQbeU2o:ou5beAQ5TCw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YLGFHQbeU2o:ou5beAQ5TCw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YLGFHQbeU2o:ou5beAQ5TCw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YLGFHQbeU2o:ou5beAQ5TCw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7869629330633255792
title: DarkSide Ransomware Gang Extorted $90 Million from Several Victims in 9 Months
uri: DarkSide-Ransomware-Gang-Extorted-90-Million-from-Several-Victims-in
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7869629330633255792
content:
DarkSide, the hacker group behind the Colonial Pipeline ransomware attack earlier this month, received $90 million in bitcoin payments following a nine-month ransomware spree, making it one of the most profitable cybercrime groups.
"In total, just over $90 million in bitcoin ransom payments were made to DarkSide, originating from 47 distinct wallets," blockchain analytics firm Elliptic said. "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bVq7I-E7IXw:JRODudfzlfQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bVq7I-E7IXw:JRODudfzlfQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bVq7I-E7IXw:JRODudfzlfQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bVq7I-E7IXw:JRODudfzlfQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bVq7I-E7IXw:JRODudfzlfQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bVq7I-E7IXw:JRODudfzlfQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bVq7I-E7IXw:JRODudfzlfQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bVq7I-E7IXw:JRODudfzlfQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9114341881300924421
title: Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild
uri: Android-Issues-Patches-for-4-New-Zero-Day-Bugs-Exploited-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9114341881300924421
content:
Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days.
"There are indications that CVE-2021-1905, CVE-2021-1906, CVE-2021-28663 and CVE-2021-28664 may be under limited, targeted exploitation," the search giant said in an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1aqAMX8ezM:uCMzRJg2JmA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1aqAMX8ezM:uCMzRJg2JmA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1aqAMX8ezM:uCMzRJg2JmA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R1aqAMX8ezM:uCMzRJg2JmA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1aqAMX8ezM:uCMzRJg2JmA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R1aqAMX8ezM:uCMzRJg2JmA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R1aqAMX8ezM:uCMzRJg2JmA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R1aqAMX8ezM:uCMzRJg2JmA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5198256074301799894
title: Watering Hole Attack Was Used to Target Florida Water Utilities
uri: Watering-Hole-Attack-Was-Used-to-Target-Florida-Water-Utilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5198256074301799894
content:
An investigation undertaken in the aftermath of the Oldsmar water plant hack earlier this year has revealed that an infrastructure contractor in the U.S. state of Florida hosted malicious code on its website in what's known as a watering hole attack.
"This malicious code seemingly targeted water utilities, particularly in Florida, and more importantly, was visited by a browser from the city of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cdLQdtscdmY:FY7zJeq40WQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cdLQdtscdmY:FY7zJeq40WQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cdLQdtscdmY:FY7zJeq40WQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cdLQdtscdmY:FY7zJeq40WQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cdLQdtscdmY:FY7zJeq40WQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cdLQdtscdmY:FY7zJeq40WQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cdLQdtscdmY:FY7zJeq40WQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cdLQdtscdmY:FY7zJeq40WQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-26320322116632149
title: 23 Android Apps Expose Over 100,000,000 Users' Personal Data
uri: 23-Android-Apps-Expose-Over-100-000-000-Users-Personal-Data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/26320322116632149
content:
Misconfigurations in multiple Android apps leaked sensitive data of more than 100 million users, potentially making them a lucrative target for malicious actors.
"By not following best-practices when configuring and integrating third-party cloud-services into applications, millions of users' private data was exposed," Check Point researchers said in an analysis published today and shared with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6CFMP63bgDI:7Z2evPt2bjg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6CFMP63bgDI:7Z2evPt2bjg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6CFMP63bgDI:7Z2evPt2bjg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6CFMP63bgDI:7Z2evPt2bjg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6CFMP63bgDI:7Z2evPt2bjg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6CFMP63bgDI:7Z2evPt2bjg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6CFMP63bgDI:7Z2evPt2bjg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6CFMP63bgDI:7Z2evPt2bjg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-284817478936089452
title: Is Single Sign-On Enough to Secure Your SaaS Applications?
uri: Is-Single-Sign-On-Enough-to-Secure-Your-SaaS-Applications
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/284817478936089452
content:
If there's one thing all great SaaS platforms share in common, it's their focus on simplifying the lives of their end-users. Removing friction for users in a safe way is the mission of single sign-on (SSO) providers.
With SSO at the helm, users don't have to remember separate passwords for each app or hide the digital copies of the credentials in plain sight.
SSO also frees up the IT's bandwidth<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3KArN4yzigE:pAu5_u2lhWo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3KArN4yzigE:pAu5_u2lhWo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3KArN4yzigE:pAu5_u2lhWo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3KArN4yzigE:pAu5_u2lhWo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3KArN4yzigE:pAu5_u2lhWo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3KArN4yzigE:pAu5_u2lhWo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3KArN4yzigE:pAu5_u2lhWo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3KArN4yzigE:pAu5_u2lhWo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5599438866785081789
title: Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware
uri: Microsoft-Warns-of-Data-Stealing-Malware-That-Pretends-to-Be-Ransomwar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5599438866785081789
content:
Microsoft on Thursday warned of a "massive email campaign" that's pushing a Java-based STRRAT malware to steal confidential data from infected systems while disguising itself as a ransomware infection.
"This RAT is infamous for its ransomware-like behavior of appending the file name extension .crimson to files without actually encrypting them," the Microsoft Security Intelligence team said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rBj4zUNjEc0:yyVTol5hfek:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rBj4zUNjEc0:yyVTol5hfek:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rBj4zUNjEc0:yyVTol5hfek:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rBj4zUNjEc0:yyVTol5hfek:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rBj4zUNjEc0:yyVTol5hfek:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rBj4zUNjEc0:yyVTol5hfek:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rBj4zUNjEc0:yyVTol5hfek:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rBj4zUNjEc0:yyVTol5hfek:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7984259095672161874
title: Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom
uri: Insurance-Firm-CNA-Financial-Reportedly-Paid-Hackers-40-Million-in-Ra
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7984259095672161874
content:
U.S. insurance giant CNA Financial reportedly paid $40 million to a ransomware gang to recover access to its systems following an attack in March, making it one the most expensive ransoms paid to date.
The development was first reported by Bloomberg, citing "people with knowledge of the attack." The adversary that staged the intrusion is said to have allegedly demanded $60 million a week after <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWFhuDELM_c:dosYZndasNs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWFhuDELM_c:dosYZndasNs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWFhuDELM_c:dosYZndasNs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nWFhuDELM_c:dosYZndasNs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWFhuDELM_c:dosYZndasNs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nWFhuDELM_c:dosYZndasNs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWFhuDELM_c:dosYZndasNs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nWFhuDELM_c:dosYZndasNs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3189800825492248586
title: Air India Hack Exposes Credit Card and Passport Info of 4.5 Million Passengers
uri: Air-India-Hack-Exposes-Credit-Card-and-Passport-Info-of-4-5-Million-Pa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3189800825492248586
content:
India's flag carrier airline, Air India, has disclosed a data breach affecting 4.5 million of its customers over a period stretching nearly 10 years after its Passenger Service System (PSS) provider SITA fell victim to a cyber attack earlier this year.
The breach involves personal data registered between Aug. 26, 2011 and Feb. 3, 2021, including details such as names, dates of birth, contact <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEE6xqaWEM8:dNRHNipET5I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEE6xqaWEM8:dNRHNipET5I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEE6xqaWEM8:dNRHNipET5I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEE6xqaWEM8:dNRHNipET5I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEE6xqaWEM8:dNRHNipET5I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEE6xqaWEM8:dNRHNipET5I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LEE6xqaWEM8:dNRHNipET5I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LEE6xqaWEM8:dNRHNipET5I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7811694882710315983
title: FBI Warns Conti Ransomware Hit 16 U.S. Health and Emergency Services
uri: FBI-Warns-Conti-Ransomware-Hit-16-U-S-Health-and-Emergency-Services
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7811694882710315983
content:
The adversary behind Conti ransomware targeted no fewer than 16 healthcare and first responder networks in the U.S. within the past year, totally victimizing over 400 organizations worldwide, 290 of which are situated in the country.
That's according to a new flash alert issued by the U.S. Federal Bureau of Investigation (FBI) on Thursday.
"The FBI identified at least 16 Conti ransomware attacks<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=whZn9ZMpEao:d-vVJxwxCe8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=whZn9ZMpEao:d-vVJxwxCe8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=whZn9ZMpEao:d-vVJxwxCe8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=whZn9ZMpEao:d-vVJxwxCe8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=whZn9ZMpEao:d-vVJxwxCe8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=whZn9ZMpEao:d-vVJxwxCe8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=whZn9ZMpEao:d-vVJxwxCe8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=whZn9ZMpEao:d-vVJxwxCe8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1996909071716261255
title: FBI Analyst Charged With Stealing Counterterrorism and Cyber Threats Info
uri: FBI-Analyst-Charged-With-Stealing-Counterterrorism-and-Cyber-Threats-I
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1996909071716261255
content:
The U.S. Department of Justice (DoJ) indicted an employee of the Federal Bureau of Investigation (FBI) for illegally removing numerous national security documents and willfully retaining them at her personal residence during a 13-year period from June 2004 to December 2017. 
The federal indictment charged Kendra Kingsbury, 48, with two counts of having unauthorized possession of documents <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=05igPVHmmX0:3dpvhJRpvec:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=05igPVHmmX0:3dpvhJRpvec:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=05igPVHmmX0:3dpvhJRpvec:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=05igPVHmmX0:3dpvhJRpvec:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=05igPVHmmX0:3dpvhJRpvec:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=05igPVHmmX0:3dpvhJRpvec:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=05igPVHmmX0:3dpvhJRpvec:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=05igPVHmmX0:3dpvhJRpvec:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3932075222536559534
title: Details Disclosed On Critical Flaws Affecting Nagios IT Monitoring Software
uri: Details-Disclosed-On-Critical-Flaws-Affecting-Nagios-IT-Monitoring-Sof
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3932075222536559534
content:
Cybersecurity researchers disclosed details about 13 vulnerabilities in the Nagios network monitoring application that could be abused by an adversary to hijack the infrastructure without any operator intervention.
"In a telco setting, where a telco is monitoring thousands of sites, if a customer site is fully compromised, an attacker can use the vulnerabilities to compromise the telco, and then<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VgTYVbIPz7I:F1A4OYK7Ql4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VgTYVbIPz7I:F1A4OYK7Ql4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VgTYVbIPz7I:F1A4OYK7Ql4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VgTYVbIPz7I:F1A4OYK7Ql4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VgTYVbIPz7I:F1A4OYK7Ql4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VgTYVbIPz7I:F1A4OYK7Ql4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VgTYVbIPz7I:F1A4OYK7Ql4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VgTYVbIPz7I:F1A4OYK7Ql4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3169350159465066335
title: What To Do When Your Business Is Hacked
uri: What-To-Do-When-Your-Business-Is-Hacked
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3169350159465066335
content:
As businesses move to a remote workforce, hackers have increased their activity to capitalize on new security holes. Cybercriminals often use unsophisticated methods that continue to be extremely successful.
These include phishing emails to harvest credentials and gain easy access to business-critical environments.
Hackers are also using ransomware to hold your data hostage, demanding a ransom <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5-5-enctRJA:SpT08jOQLoQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5-5-enctRJA:SpT08jOQLoQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5-5-enctRJA:SpT08jOQLoQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5-5-enctRJA:SpT08jOQLoQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5-5-enctRJA:SpT08jOQLoQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5-5-enctRJA:SpT08jOQLoQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5-5-enctRJA:SpT08jOQLoQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5-5-enctRJA:SpT08jOQLoQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1508101782885882553
title: Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea
uri: Researchers-Link-CryptoCore-Attacks-On-Cryptocurrency-Exchanges-to-Nor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1508101782885882553
content:
State-sponsored hackers affiliated with North Korea have been behind a slew of attacks on cryptocurrency exchanges over the past three years, new evidence has revealed.
Attributing the attack with "medium-high" likelihood to the Lazarus Group (aka APT38 or Hidden Cobra), researchers from Israeli cybersecurity firm ClearSky said the campaign, dubbed "CryptoCore," targeted crypto exchanges in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dvdck4LoGYE:v7IPf7uQ5i0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dvdck4LoGYE:v7IPf7uQ5i0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dvdck4LoGYE:v7IPf7uQ5i0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dvdck4LoGYE:v7IPf7uQ5i0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dvdck4LoGYE:v7IPf7uQ5i0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dvdck4LoGYE:v7IPf7uQ5i0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dvdck4LoGYE:v7IPf7uQ5i0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dvdck4LoGYE:v7IPf7uQ5i0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2562772216973928465
title: Apple‌ Issues Patches to Combat Ongoing 0-Day Attacks on macOS, tvOS
uri: Apple-Issues-Patches-to-Combat-Ongoing-0-Day-Attacks-on-macOS-tvOS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2562772216973928465
content:
Apple on Monday rolled out security updates for iOS, macOS, tvOS, watchOS, and Safari web browser to fix multiple vulnerabilities, including an actively exploited zero-day flaw in macOS Big Sur and expand patches for two previously disclosed zero-day flaws. 
Tracked as CVE-2021-30713, the zero-day concerns a permissions issue in Apple's Transparency, Consent, and Control (TCC) framework in macOS<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nz29qlhexb0:pFsVjKF6JIY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nz29qlhexb0:pFsVjKF6JIY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nz29qlhexb0:pFsVjKF6JIY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nz29qlhexb0:pFsVjKF6JIY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nz29qlhexb0:pFsVjKF6JIY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nz29qlhexb0:pFsVjKF6JIY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Nz29qlhexb0:pFsVjKF6JIY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Nz29qlhexb0:pFsVjKF6JIY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3764924529455483439
title: New Bluetooth Flaws Let Attackers Impersonate Legitimate Devices
uri: New-Bluetooth-Flaws-Let-Attackers-Impersonate-Legitimate-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3764924529455483439
content:
Adversaries could exploit newly discovered security weaknesses in Bluetooth Core and Mesh Profile Specifications to masquerade as legitimate devices and carry out man-in-the-middle (MitM) attacks.
"Devices supporting the Bluetooth Core and Mesh Specifications are vulnerable to impersonation attacks and AuthValue disclosure that could allow an attacker to impersonate a legitimate device during <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jN8q-6A-F8A:xWlvkUz88_Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jN8q-6A-F8A:xWlvkUz88_Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jN8q-6A-F8A:xWlvkUz88_Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jN8q-6A-F8A:xWlvkUz88_Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jN8q-6A-F8A:xWlvkUz88_Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jN8q-6A-F8A:xWlvkUz88_Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jN8q-6A-F8A:xWlvkUz88_Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jN8q-6A-F8A:xWlvkUz88_Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4733806683394092068
title: New High-Severity Vulnerability Reported in Pulse Connect Secure VPN
uri: New-High-Severity-Vulnerability-Reported-in-Pulse-Connect-Secure-VPN
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4733806683394092068
content:
Ivanti, the company behind Pulse Secure VPN appliances, has published a security advisory for a high severity vulnerability that may allow an authenticated remote attacker to execute arbitrary code with elevated privileges.
"Buffer Overflow in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code as the root user,"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49QIpwJmZ30:HDjMyKtdFag:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49QIpwJmZ30:HDjMyKtdFag:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49QIpwJmZ30:HDjMyKtdFag:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49QIpwJmZ30:HDjMyKtdFag:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49QIpwJmZ30:HDjMyKtdFag:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49QIpwJmZ30:HDjMyKtdFag:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=49QIpwJmZ30:HDjMyKtdFag:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=49QIpwJmZ30:HDjMyKtdFag:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-451507458513840688
title: Russian Hydra DarkNet Market Made Over $1.3 Billion in 2020
uri: Russian-Hydra-DarkNet-Market-Made-Over-1-3-Billion-in-2020
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/451507458513840688
content:
Russian-language dark web marketplace Hydra has emerged as a hotspot for illicit activities, pulling in a whopping $1.37 billion worth of cryptocurrencies in 2020, up from $9.4 million in 2016.
The "blistering growth" in annual transaction volumes marks a staggering 624% year-over-year jump over a three-year period from 2018 to 2020.
"Further buoying Hydra's growth is its ability—or its good <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LYEu65On7jg:8xq0hEadGLE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LYEu65On7jg:8xq0hEadGLE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LYEu65On7jg:8xq0hEadGLE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LYEu65On7jg:8xq0hEadGLE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LYEu65On7jg:8xq0hEadGLE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LYEu65On7jg:8xq0hEadGLE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LYEu65On7jg:8xq0hEadGLE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LYEu65On7jg:8xq0hEadGLE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6614822778182295892
title: Critical RCE Vulnerability Found in VMware vCenter Server — Patch Now!
uri: Critical-RCE-Vulnerability-Found-in-VMware-vCenter-Server-Patch-No
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6614822778182295892
content:
VMware has rolled out patches to address a critical security vulnerability in vCenter Server that could be leveraged by an adversary to execute arbitrary code on the server.
Tracked as CVE-2021-21985 (CVSS score 9.8), the issue stems from a lack of input validation in the Virtual SAN (vSAN) Health Check plug-in, which is enabled by default in the vCenter Server. "A malicious actor with network <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Bw5yldoufM:USGRxrJv5uI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Bw5yldoufM:USGRxrJv5uI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Bw5yldoufM:USGRxrJv5uI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5Bw5yldoufM:USGRxrJv5uI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Bw5yldoufM:USGRxrJv5uI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5Bw5yldoufM:USGRxrJv5uI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5Bw5yldoufM:USGRxrJv5uI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5Bw5yldoufM:USGRxrJv5uI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1592547178451024163
title: Google Researchers Discover A New Variant of Rowhammer Attack
uri: Google-Researchers-Discover-A-New-Variant-of-Rowhammer-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1592547178451024163
content:
A team of security researchers from Google has demonstrated yet another variant of the Rowhammer attack that bypasses all current defenses to tamper with data stored in memory.
Dubbed "Half-Double," the new hammering technique hinges on the weak coupling between two memory rows that are not immediately adjacent to each other but one row removed. 
"Unlike TRRespass, which exploits the blind spots<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nsz8ssdtyhg:VW2-OfUYpQc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nsz8ssdtyhg:VW2-OfUYpQc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nsz8ssdtyhg:VW2-OfUYpQc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nsz8ssdtyhg:VW2-OfUYpQc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nsz8ssdtyhg:VW2-OfUYpQc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nsz8ssdtyhg:VW2-OfUYpQc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nsz8ssdtyhg:VW2-OfUYpQc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nsz8ssdtyhg:VW2-OfUYpQc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9219563659050908827
title: WhatsApp Sues Indian Government Over New Privacy Threatening Internet Law
uri: WhatsApp-Sues-Indian-Government-Over-New-Privacy-Threatening-Internet
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9219563659050908827
content:
WhatsApp on Wednesday fired a legal salvo against the Indian government to block new regulations that would require messaging apps to trace the "first originator" of messages shared on the platform, thus effectively breaking encryption protections.
"Requiring messaging apps to 'trace' chats is the equivalent of asking us to keep a fingerprint of every single message sent on WhatsApp, which would<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vsseYkDWVH8:byhvwNqSRd0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vsseYkDWVH8:byhvwNqSRd0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vsseYkDWVH8:byhvwNqSRd0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vsseYkDWVH8:byhvwNqSRd0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vsseYkDWVH8:byhvwNqSRd0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vsseYkDWVH8:byhvwNqSRd0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vsseYkDWVH8:byhvwNqSRd0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vsseYkDWVH8:byhvwNqSRd0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7616532385805382428
title: Data Wiper Malware Disguised As Ransomware Targets Israeli Entities
uri: Data-Wiper-Malware-Disguised-As-Ransomware-Targets-Israeli-Entities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7616532385805382428
content:
Researchers on Tuesday disclosed a new espionage campaign that resorts to destructive data-wiping attacks targeting Israeli entities at least since December 2020 that camouflage the malicious activity as ransomware extortions.
Cybersecurity firm SentinelOne attributed the attacks to a nation-state actor affiliated with Iran it tracks under the moniker "Agrius."
"An analysis of what at first <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0r7p2tofaEA:jr78BGnCmyE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0r7p2tofaEA:jr78BGnCmyE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0r7p2tofaEA:jr78BGnCmyE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0r7p2tofaEA:jr78BGnCmyE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0r7p2tofaEA:jr78BGnCmyE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0r7p2tofaEA:jr78BGnCmyE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0r7p2tofaEA:jr78BGnCmyE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0r7p2tofaEA:jr78BGnCmyE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5314943833373080672
title: Newly Discovered Bugs in VSCode Extensions Could Lead to Supply Chain Attacks
uri: Newly-Discovered-Bugs-in-VSCode-Extensions-Could-Lead-to-Supply-Chain
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5314943833373080672
content:
Severe security flaws uncovered in popular Visual Studio Code extensions could enable attackers to compromise local machines as well as build and deployment systems through a developer's integrated development environment (IDE).
The vulnerable extensions could be exploited to run arbitrary code on a developer's system remotely, in what could ultimately pave the way for supply chain attacks.
Some<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtUYnshsHuU:iWcmtRUt_rY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtUYnshsHuU:iWcmtRUt_rY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtUYnshsHuU:iWcmtRUt_rY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QtUYnshsHuU:iWcmtRUt_rY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtUYnshsHuU:iWcmtRUt_rY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QtUYnshsHuU:iWcmtRUt_rY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QtUYnshsHuU:iWcmtRUt_rY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QtUYnshsHuU:iWcmtRUt_rY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3736250568351223071
title: Hackers Using Fake Foundations to Target Uyghur Minority in China
uri: Hackers-Using-Fake-Foundations-to-Target-Uyghur-Minority-in-China
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3736250568351223071
content:
The Uyghur community located in China and Pakistan has been the subject of an ongoing espionage campaign aiming to trick the targets into downloading a Windows backdoor to amass sensitive information from their systems.
"Considerable effort was put into disguising the payloads, whether by creating delivery documents that appear to be originating from the United Nations using up to date related <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uzzaDEG6cEg:czP8OzCtvqg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uzzaDEG6cEg:czP8OzCtvqg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uzzaDEG6cEg:czP8OzCtvqg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uzzaDEG6cEg:czP8OzCtvqg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uzzaDEG6cEg:czP8OzCtvqg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uzzaDEG6cEg:czP8OzCtvqg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uzzaDEG6cEg:czP8OzCtvqg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uzzaDEG6cEg:czP8OzCtvqg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8606074988998058374
title: Malvertising Campaign On Google Distributed Trojanized AnyDesk Installer
uri: Malvertising-Campaign-On-Google-Distributed-Trojanized-AnyDesk-Install
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8606074988998058374
content:
Cybersecurity researchers on Wednesday publicized the disruption of a "clever" malvertising network targeting AnyDesk that delivered a weaponized installer of the remote desktop software via rogue Google ads that appeared in the search engine results pages.
The campaign, which is believed to have begun as early as April 21, 2021, involves a malicious file that masquerades as a setup executable <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wGoXioXuOOg:AfvxOI9fmaM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wGoXioXuOOg:AfvxOI9fmaM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wGoXioXuOOg:AfvxOI9fmaM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wGoXioXuOOg:AfvxOI9fmaM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wGoXioXuOOg:AfvxOI9fmaM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wGoXioXuOOg:AfvxOI9fmaM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wGoXioXuOOg:AfvxOI9fmaM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wGoXioXuOOg:AfvxOI9fmaM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3552225257056676751
title: Chinese Cyber Espionage Hackers Continue to Target Pulse Secure VPN Devices
uri: Chinese-Cyber-Espionage-Hackers-Continue-to-Target-Pulse-Secure-VPN-De
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3552225257056676751
content:
Cybersecurity researchers from FireEye unmasked additional tactics, techniques, and procedures (TTPs) adopted by Chinese threat actors who were recently found abusing Pulse Secure VPN devices to drop malicious web shells and exfiltrate sensitive information from enterprise networks.
FireEye's Mandiant threat intelligence team, which is tracking the cyberespionage activity under two threat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pal-DqduGaI:hz8mHVBjiQ8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pal-DqduGaI:hz8mHVBjiQ8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pal-DqduGaI:hz8mHVBjiQ8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pal-DqduGaI:hz8mHVBjiQ8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pal-DqduGaI:hz8mHVBjiQ8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pal-DqduGaI:hz8mHVBjiQ8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pal-DqduGaI:hz8mHVBjiQ8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pal-DqduGaI:hz8mHVBjiQ8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6739187277840990857
title: SolarWinds Hackers Target Think Tanks With New Backdoor
uri: SolarWinds-Hackers-Target-Think-Tanks-With-New-Backdoor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6739187277840990857
content:
Microsoft on Thursday disclosed that the threat actor behind the SolarWinds supply chain hack returned to the threat landscape to target government agencies, think tanks, consultants, and non-governmental organizations located across 24 countries, including the U.S.
"This wave of attacks targeted approximately 3,000 email accounts at more than 150 different organizations," Tom Burt, Microsoft's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iGp8VNWgfSo:S_sMz-G11Qo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iGp8VNWgfSo:S_sMz-G11Qo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iGp8VNWgfSo:S_sMz-G11Qo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iGp8VNWgfSo:S_sMz-G11Qo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iGp8VNWgfSo:S_sMz-G11Qo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iGp8VNWgfSo:S_sMz-G11Qo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iGp8VNWgfSo:S_sMz-G11Qo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iGp8VNWgfSo:S_sMz-G11Qo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8092615624082839537
title: Researchers Warn of Facefish Backdoor Spreading Linux Rootkits
uri: Researchers-Warn-of-Facefish-Backdoor-Spreading-Linux-Rootkits
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8092615624082839537
content:
Cybersecurity researchers have disclosed a new backdoor program capable of stealing user login credentials, device information and executing arbitrary commands on Linux systems.
The malware dropper has been dubbed "Facefish" by Qihoo 360 NETLAB team owing its capabilities to deliver different rootkits at different times and the use of Blowfish cipher to encrypt communications to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=81J9eSVrKKU:6Tj0FblA0Xs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=81J9eSVrKKU:6Tj0FblA0Xs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=81J9eSVrKKU:6Tj0FblA0Xs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=81J9eSVrKKU:6Tj0FblA0Xs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=81J9eSVrKKU:6Tj0FblA0Xs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=81J9eSVrKKU:6Tj0FblA0Xs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=81J9eSVrKKU:6Tj0FblA0Xs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=81J9eSVrKKU:6Tj0FblA0Xs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1499273995870193643
title: Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents
uri: Researchers-Demonstrate-2-New-Hacks-to-Modify-Certified-PDF-Documents
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1499273995870193643
content:
Cybersecurity researchers have disclosed two new attack techniques on certified PDF documents that could potentially enable an attacker to alter a document's visible content by displaying malicious content over the certiﬁed content without invalidating its signature.
"The attack idea exploits the flexibility of PDF certification, which allows signing or adding annotations to certified documents <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fjlBAbYVU5Y:72PcnJ97lC0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fjlBAbYVU5Y:72PcnJ97lC0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fjlBAbYVU5Y:72PcnJ97lC0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fjlBAbYVU5Y:72PcnJ97lC0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fjlBAbYVU5Y:72PcnJ97lC0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fjlBAbYVU5Y:72PcnJ97lC0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fjlBAbYVU5Y:72PcnJ97lC0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fjlBAbYVU5Y:72PcnJ97lC0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3288569629795120043
title: A New Bug in Siemens PLCs Could Let Hackers Run Malicious Code Remotely
uri: A-New-Bug-in-Siemens-PLCs-Could-Let-Hackers-Run-Malicious-Code-Remotel
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3288569629795120043
content:
Siemens on Friday shipped firmed updates to address a severe vulnerability in SIMATIC S7-1200 and S7-1500 programmable logic controllers (PLCs) that could be exploited by a malicious actor to remotely gain access to protected areas of the memory and achieve unrestricted and undetected code execution, in what the researchers describe as an attacker's "holy grail."
The memory protection bypass <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ph7yNPpflZU:YH2sj-5CAaw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ph7yNPpflZU:YH2sj-5CAaw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ph7yNPpflZU:YH2sj-5CAaw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ph7yNPpflZU:YH2sj-5CAaw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ph7yNPpflZU:YH2sj-5CAaw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ph7yNPpflZU:YH2sj-5CAaw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ph7yNPpflZU:YH2sj-5CAaw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ph7yNPpflZU:YH2sj-5CAaw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2059898194716375308
title: Your Amazon Devices to Automatically Share Your Wi-Fi With Neighbors
uri: Your-Amazon-Devices-to-Automatically-Share-Your-Wi-Fi-With-Neighbors
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2059898194716375308
content:
Starting June 8, Amazon will automatically enable a feature on your Alexa, Echo, or other Amazon device that will share   some   of   your   Internet   bandwidth  with   your neighbors—unless   you   choose   to   opt   out.
Amazon intends to register its family of hardware devices that are operational in the U.S.—including Echo speakers, Ring Video Doorbells, Ring Floodlight Cams, and Ring <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=djAa7Jxixpk:mrdZn8M0eKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=djAa7Jxixpk:mrdZn8M0eKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=djAa7Jxixpk:mrdZn8M0eKo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=djAa7Jxixpk:mrdZn8M0eKo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=djAa7Jxixpk:mrdZn8M0eKo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=djAa7Jxixpk:mrdZn8M0eKo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=djAa7Jxixpk:mrdZn8M0eKo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=djAa7Jxixpk:mrdZn8M0eKo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8940332101366550276
title: Can Your Business Email Be Spoofed? Check Your Domain Security Now!
uri: Can-Your-Business-Email-Be-Spoofed-Check-Your-Domain-Security-Now
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8940332101366550276
content:
Are you aware of how secure your domain is? In most organizations, there is an assumption that their domains are secure and within a few months, but the truth soon dawns on them that it isn't.
Spotting someone spoofing your domain name is one way to determine if your security is unsatisfactory - this means that someone is impersonating you (or confusing some of your recipients) and releasing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lzggSH7jkMU:kAWkmADQ0Zw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lzggSH7jkMU:kAWkmADQ0Zw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lzggSH7jkMU:kAWkmADQ0Zw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lzggSH7jkMU:kAWkmADQ0Zw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lzggSH7jkMU:kAWkmADQ0Zw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lzggSH7jkMU:kAWkmADQ0Zw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lzggSH7jkMU:kAWkmADQ0Zw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lzggSH7jkMU:kAWkmADQ0Zw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-276149451385689044
title: Report: Danish Secret Service Helped NSA Spy On European Politicians
uri: Report-Danish-Secret-Service-Helped-NSA-Spy-On-European-Politicians
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/276149451385689044
content:
The U.S. National Security Agency (NSA) used a partnership with Denmark's foreign and military intelligence service to eavesdrop on top politicians and high-ranking officials in Germany, Sweden, Norway, and France by tapping into Danish underwater internet cables between 2012 and 2014.
Details of the covert wiretapping were broken by Copenhagen-based public broadcaster DR over the weekend based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPxehw_mTy0:hVIRu0tptgU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPxehw_mTy0:hVIRu0tptgU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPxehw_mTy0:hVIRu0tptgU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HPxehw_mTy0:hVIRu0tptgU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPxehw_mTy0:hVIRu0tptgU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HPxehw_mTy0:hVIRu0tptgU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HPxehw_mTy0:hVIRu0tptgU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HPxehw_mTy0:hVIRu0tptgU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8148441590802637738
title: Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions
uri: Malware-Can-Use-This-Trick-to-Bypass-Ransomware-Defense-in-Antivirus-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8148441590802637738
content:
Researchers have disclosed significant security weaknesses in popular software applications that could be abused to deactivate their protections and take control of allow-listed applications to perform nefarious operations on behalf of the malware to defeat anti-ransomware defenses.
The twin attacks, detailed by academics from the University of Luxembourg and the University of London, are aimed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65niexwws3A:TSgFFLfjsP8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65niexwws3A:TSgFFLfjsP8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65niexwws3A:TSgFFLfjsP8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=65niexwws3A:TSgFFLfjsP8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65niexwws3A:TSgFFLfjsP8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=65niexwws3A:TSgFFLfjsP8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65niexwws3A:TSgFFLfjsP8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=65niexwws3A:TSgFFLfjsP8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6402183749793492238
title: US Seizes Domains Used by SolarWinds Hackers in Cyber Espionage Attacks
uri: US-Seizes-Domains-Used-by-SolarWinds-Hackers-in-Cyber-Espionage-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6402183749793492238
content:
Days after Microsoft, Secureworks, and Volexity shed light on a new spear-phishing activity unleashed by the Russian hackers who breached SolarWinds IT management software, the U.S. Department of Justice (DoJ) Tuesday said it intervened to take control of two command-and-control (C2) and malware distribution domains used in the campaign.
The court-authorized domain seizure 1m took place on May <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QOTlxn4gFa8:sqlF6T-r7iE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QOTlxn4gFa8:sqlF6T-r7iE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QOTlxn4gFa8:sqlF6T-r7iE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QOTlxn4gFa8:sqlF6T-r7iE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QOTlxn4gFa8:sqlF6T-r7iE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QOTlxn4gFa8:sqlF6T-r7iE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QOTlxn4gFa8:sqlF6T-r7iE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QOTlxn4gFa8:sqlF6T-r7iE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1698651825849124456
title: Hackers‌ ‌Actively‌ ‌Exploiting‌ ‌0-Day‌ ‌in WordPress Plugin Installed on Over ‌17,000‌ ‌Sites
uri: Hackers-Actively-Exploiting-0-Day-in-WordPress
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1698651825849124456
content:
Fancy Product Designer, a WordPress plugin installed on over 17,000 sites, has been discovered to contain a critical file upload vulnerability that's being actively exploited in the wild to upload malware onto sites that have the plugin installed.
Wordfence's threat intelligence team, which discovered the flaw, said it reported the issue to the plugin's developer on May 31. While the flaw has <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-OnhTIftoQI:67vhkLyMkNo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-OnhTIftoQI:67vhkLyMkNo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-OnhTIftoQI:67vhkLyMkNo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-OnhTIftoQI:67vhkLyMkNo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-OnhTIftoQI:67vhkLyMkNo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-OnhTIftoQI:67vhkLyMkNo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-OnhTIftoQI:67vhkLyMkNo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-OnhTIftoQI:67vhkLyMkNo:F7zBnMyn0Lo" border="0"></img></a>
</div>


