# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3151895470724935475
title: Ukraine War Themed Files Become the Lure of Choice for a Wide Range of Hackers
uri: Ukraine-War-Themed-Files-Become-the-Lure-of-Choice-for-a-Wide-Range-of
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3151895470724935475
content:
A growing number of threat actors are using the ongoing Russo-Ukrainian war as a lure in various phishing and malware campaigns, even as critical infrastructure entities continue to be heavily targeted.
"Government-backed actors from China, Iran, North Korea and Russia, as well as various unattributed groups, have used various Ukraine war-related themes in an effort to get targets to open <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rl6Ua7E7CxY:HcEqrFm5F_Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rl6Ua7E7CxY:HcEqrFm5F_Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rl6Ua7E7CxY:HcEqrFm5F_Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rl6Ua7E7CxY:HcEqrFm5F_Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rl6Ua7E7CxY:HcEqrFm5F_Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rl6Ua7E7CxY:HcEqrFm5F_Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rl6Ua7E7CxY:HcEqrFm5F_Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rl6Ua7E7CxY:HcEqrFm5F_Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6812323194623770767
title: Critical RCE Bug Reported in dotCMS Content Management Software
uri: Critical-RCE-Bug-Reported-in-dotCMS-Content-Management-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6812323194623770767
content:
A pre-authenticated remote code execution vulnerability has been disclosed in dotCMS, an open-source content management system written in Java and "used by over 10,000 clients in over 70 countries around the globe, from Fortune 500 brands and mid-sized businesses."
The critical flaw, tracked as CVE-2022-26352, stems from a directory traversal attack when performing file uploads, enabling an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0nAwvkN472g:0fg8j0LotWs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0nAwvkN472g:0fg8j0LotWs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0nAwvkN472g:0fg8j0LotWs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0nAwvkN472g:0fg8j0LotWs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0nAwvkN472g:0fg8j0LotWs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0nAwvkN472g:0fg8j0LotWs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0nAwvkN472g:0fg8j0LotWs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0nAwvkN472g:0fg8j0LotWs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3211017918008274275
title: SEC Plans to Hire More Staff in Crypto Enforcement Unit to Fight Frauds
uri: SEC-Plans-to-Hire-More-Staff-in-Crypto-Enforcement-Unit-to-Fight-Fraud
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3211017918008274275
content:
The U.S. Securities and Exchange Commission (SEC) on Tuesday announced that it will expand and rebrand its Cyber Unit to fight against cyber-related threats and protect investors in cryptocurrency markets.
To that end, the SEC is renaming the Cyber Unit within the Division of Enforcement to Crypto Assets and Cyber Unit and plans to infuse 20 additional positions with the goal of investigating <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=arfk64bJbjM:IF4pQWkdUu4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=arfk64bJbjM:IF4pQWkdUu4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=arfk64bJbjM:IF4pQWkdUu4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=arfk64bJbjM:IF4pQWkdUu4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=arfk64bJbjM:IF4pQWkdUu4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=arfk64bJbjM:IF4pQWkdUu4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=arfk64bJbjM:IF4pQWkdUu4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=arfk64bJbjM:IF4pQWkdUu4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7980043498268617764
title: Chinese Hackers Caught Stealing Intellectual Property from Multinational Companies
uri: Chinese-Hackers-Caught-Stealing-Intellectual-Property-from-Multination
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7980043498268617764
content:
An elusive and sophisticated cyberespionage campaign orchestrated by the China-backed Winnti group has managed to fly under the radar since at least 2019.
Dubbed "Operation CuckooBees" by Israeli cybersecurity company Cybereason, the massive intellectual property theft operation enabled the threat actor to exfiltrate hundreds of gigabytes of information.
Targets included technology and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yJ_2i2EGqw8:FSUoBVMHhu8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yJ_2i2EGqw8:FSUoBVMHhu8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yJ_2i2EGqw8:FSUoBVMHhu8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yJ_2i2EGqw8:FSUoBVMHhu8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yJ_2i2EGqw8:FSUoBVMHhu8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yJ_2i2EGqw8:FSUoBVMHhu8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yJ_2i2EGqw8:FSUoBVMHhu8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yJ_2i2EGqw8:FSUoBVMHhu8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5446296482647324400
title: F5 Warns of a New Critical BIG-IP Remote Code Execution Vulnerability
uri: F5-Warns-of-a-New-Critical-BIG-IP-Remote-Code-Execution-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5446296482647324400
content:
Cloud security and application delivery network (ADN) provider F5 on Wednesday released patches to contain 43 bugs spanning its products.
Of the 43 issues addressed, one is rated Critical, 17 are rated High, 24 are rated Medium, and one is rated low in severity.
Chief among the flaws is CVE-2022-1388, which carries a CVSS score of 9.8 out of a maximum of 10 and stems from a lack of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Uy2g7igwZVY:IVka-84Do0E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Uy2g7igwZVY:IVka-84Do0E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Uy2g7igwZVY:IVka-84Do0E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Uy2g7igwZVY:IVka-84Do0E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Uy2g7igwZVY:IVka-84Do0E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Uy2g7igwZVY:IVka-84Do0E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Uy2g7igwZVY:IVka-84Do0E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Uy2g7igwZVY:IVka-84Do0E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-852837176389976737
title: Cisco Issues Patches for 3 New Flaws Affecting Enterprise NFVIS Software
uri: Cisco-Issues-Patches-for-3-New-Flaws-Affecting-Enterprise-NFVIS-Softwa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/852837176389976737
content:
Cisco Systems on Wednesday shipped security patches to contain three flaws impacting its Enterprise NFV Infrastructure Software (NFVIS) that could permit an attacker to fully compromise and take control over the hosts.
Tracked as CVE-2022-20777, CVE-2022-20779, and CVE-2022-20780, the vulnerabilities "could allow an attacker to escape from the guest virtual machine (VM) to the host machine, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0hyChYM8j-Q:3xAw_gJO-QM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0hyChYM8j-Q:3xAw_gJO-QM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0hyChYM8j-Q:3xAw_gJO-QM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0hyChYM8j-Q:3xAw_gJO-QM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0hyChYM8j-Q:3xAw_gJO-QM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0hyChYM8j-Q:3xAw_gJO-QM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0hyChYM8j-Q:3xAw_gJO-QM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0hyChYM8j-Q:3xAw_gJO-QM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7174192668546909965
title: Heroku Forces User Password Resets Following GitHub OAuth Token Theft
uri: Heroku-Forces-User-Password-Resets-Following-GitHub-OAuth-Token-Theft
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7174192668546909965
content:
Salesforce-owned subsidiary Heroku on Thursday acknowledged that the theft of GitHub integration OAuth tokens further involved unauthorized access to an internal customer database.
The company, in an updated notification, revealed that a compromised token was abused to breach the database and "exfiltrate the hashed and salted passwords for customers' user accounts."
As a consequence, Salesforce <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uxzk7MsyArM:An3iTyBVUfs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uxzk7MsyArM:An3iTyBVUfs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uxzk7MsyArM:An3iTyBVUfs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uxzk7MsyArM:An3iTyBVUfs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uxzk7MsyArM:An3iTyBVUfs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uxzk7MsyArM:An3iTyBVUfs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uxzk7MsyArM:An3iTyBVUfs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uxzk7MsyArM:An3iTyBVUfs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4310621821721184573
title: Thousands of Borrowers' Data Exposed from ENCollect Debt Collection Service
uri: Thousands-of-Borrowers-Data-Exposed-from-ENCollect-Debt-Collection-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4310621821721184573
content:
An ElasticSearch server instance that was left open on the Internet without a password contained sensitive financial information about loans from Indian and African financial services.
The leak, which was discovered by researchers from information security company UpGuard, amounted to 5.8GB and consisted of a total of 1,686,363 records.
"Those records included personal information like name, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rPNgmV6UIwU:cfcCJUDujEQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rPNgmV6UIwU:cfcCJUDujEQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rPNgmV6UIwU:cfcCJUDujEQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rPNgmV6UIwU:cfcCJUDujEQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rPNgmV6UIwU:cfcCJUDujEQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rPNgmV6UIwU:cfcCJUDujEQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rPNgmV6UIwU:cfcCJUDujEQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rPNgmV6UIwU:cfcCJUDujEQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4724780618023502856
title: The Importance of Defining Secure Code
uri: The-Importance-of-Defining-Secure-Code
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4724780618023502856
content:
The developers who create the software, applications and programs that drive digital business have become the lifeblood of many organizations. Most modern businesses would not be able to (profitably) function, without competitive applications and programs, or without 24-hour access to their websites and other infrastructure.
And yet, these very same touchpoints are also often the gateway that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kwz687aJcgk:etk856hrNcg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kwz687aJcgk:etk856hrNcg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kwz687aJcgk:etk856hrNcg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Kwz687aJcgk:etk856hrNcg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kwz687aJcgk:etk856hrNcg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Kwz687aJcgk:etk856hrNcg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kwz687aJcgk:etk856hrNcg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Kwz687aJcgk:etk856hrNcg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8033139713361669672
title: Researchers Disclose 10-Year-Old Vulnerabilities in Avast and AVG Antivirus
uri: Researchers-Disclose-10-Year-Old-Vulnerabilities-in-Avast-and-AVG-Anti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8033139713361669672
content:
Two high-severity security vulnerabilities, which went undetected for several years, have been discovered in a legitimate driver that's part of Avast and AVG antivirus solutions.
"These vulnerabilities allow attackers to escalate privileges enabling them to disable security products, overwrite system components, corrupt the operating system, or perform malicious operations unimpeded," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1UTz8VCoEEg:ydY9dCqaHcs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1UTz8VCoEEg:ydY9dCqaHcs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1UTz8VCoEEg:ydY9dCqaHcs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1UTz8VCoEEg:ydY9dCqaHcs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1UTz8VCoEEg:ydY9dCqaHcs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1UTz8VCoEEg:ydY9dCqaHcs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1UTz8VCoEEg:ydY9dCqaHcs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1UTz8VCoEEg:ydY9dCqaHcs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8185278971042757942
title: Google to Add Passwordless Authentication Support to Android and Chrome
uri: Google-to-Add-Passwordless-Authentication-Support-to-Android-and-Chrom
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8185278971042757942
content:
Google today announced plans to implement support for passwordless logins in Android and the Chrome web browser to allow users to sign in across different devices and websites irrespective of the platform.
"This will simplify sign-ins across devices, websites, and applications no matter the platform - without the need for a single password," Google said.
&lt;!--adsense--&gt;
Apple and Microsoft are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1BaSyT0VHI:PtlTSJ1WwzY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1BaSyT0VHI:PtlTSJ1WwzY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1BaSyT0VHI:PtlTSJ1WwzY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A1BaSyT0VHI:PtlTSJ1WwzY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1BaSyT0VHI:PtlTSJ1WwzY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A1BaSyT0VHI:PtlTSJ1WwzY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A1BaSyT0VHI:PtlTSJ1WwzY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A1BaSyT0VHI:PtlTSJ1WwzY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1872877140458648177
title: NIST Releases Updated Cybersecurity Guidance for Managing Supply Chain Risks
uri: NIST-Releases-Updated-Cybersecurity-Guidance-for-Managing-Supply-Chain
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1872877140458648177
content:
The National Institute of Standards and Technology (NIST) on Thursday released an updated cybersecurity guidance for managing risks in the supply chain, as it increasingly emerges as a lucrative attack vector.
"It encourages organizations to consider the vulnerabilities not only of a finished product they are considering using, but also of its components — which may have been developed elsewhere<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3feqw3LPuk:7_U9jJHVfL4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3feqw3LPuk:7_U9jJHVfL4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3feqw3LPuk:7_U9jJHVfL4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z3feqw3LPuk:7_U9jJHVfL4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3feqw3LPuk:7_U9jJHVfL4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z3feqw3LPuk:7_U9jJHVfL4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3feqw3LPuk:7_U9jJHVfL4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z3feqw3LPuk:7_U9jJHVfL4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1876226930641748933
title: Google Releases Android Update to Patch Actively Exploited Vulnerability
uri: Google-Releases-Android-Update-to-Patch-Actively-Exploited-Vulnerabili
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1876226930641748933
content:
Google has released monthly security patches for Android with fixes for 37 flaws across different components, one of which is a fix for an actively exploited Linux kernel vulnerability that came to light earlier this year.
Tracked as CVE-2021-22600 (CVSS score: 7.8), the vulnerability is ranked "High" for severity and could be exploited by a local user to escalate privileges or deny service.
The<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=afe2GP6Qcjs:NcpQI1z3wn8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=afe2GP6Qcjs:NcpQI1z3wn8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=afe2GP6Qcjs:NcpQI1z3wn8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=afe2GP6Qcjs:NcpQI1z3wn8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=afe2GP6Qcjs:NcpQI1z3wn8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=afe2GP6Qcjs:NcpQI1z3wn8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=afe2GP6Qcjs:NcpQI1z3wn8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=afe2GP6Qcjs:NcpQI1z3wn8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7257219327629420297
title: Experts Uncover New Espionage Attacks by Chinese 'Mustang Panda' Hackers
uri: Experts-Uncover-New-Espionage-Attacks-by-Chinese-Mustang-Panda-Hacke
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7257219327629420297
content:
The China-based threat actor known as Mustang Panda has been observed refining and retooling its tactics and malware to strike entities located in Asia, the European Union, Russia, and the U.S.
"Mustang Panda is a highly motivated APT group relying primarily on the use of topical lures and social engineering to trick victims into infecting themselves," Cisco Talos said in a new report detailing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6s9wFrEzhN8:hwtitrOTuBA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6s9wFrEzhN8:hwtitrOTuBA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6s9wFrEzhN8:hwtitrOTuBA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6s9wFrEzhN8:hwtitrOTuBA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6s9wFrEzhN8:hwtitrOTuBA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6s9wFrEzhN8:hwtitrOTuBA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6s9wFrEzhN8:hwtitrOTuBA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6s9wFrEzhN8:hwtitrOTuBA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3798699717237607707
title: Hackers Using PrivateLoader PPI Service to Distribute New NetDooka Malware
uri: Hackers-Using-PrivateLoader-PPI-Service-to-Distribute-New-NetDooka-Mal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3798699717237607707
content:
A pay-per-install (PPI) malware service known as PrivateLoader has been spotted distributing a "fairly sophisticated" framework called NetDooka, granting attackers complete control over the infected devices.
"The framework is distributed via a pay-per-install (PPI) service and contains multiple parts, including a loader, a dropper, a protection driver, and a full-featured remote access trojan (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnNJUOlvL7M:2Rp667-tqaQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnNJUOlvL7M:2Rp667-tqaQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnNJUOlvL7M:2Rp667-tqaQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VnNJUOlvL7M:2Rp667-tqaQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnNJUOlvL7M:2Rp667-tqaQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VnNJUOlvL7M:2Rp667-tqaQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VnNJUOlvL7M:2Rp667-tqaQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VnNJUOlvL7M:2Rp667-tqaQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3223365428935350077
title: Researchers Warn of 'Raspberry Robin' Malware Spreading via External Drives
uri: Researchers-Warn-of-Raspberry-Robin-Malware-Spreading-via-External-D
url: https://thehackernews.com/2022/05/researchers-warn-of-raspberry-robin.html
content:
Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices.
Attributing the malware to a cluster named "Raspberry Robin," Red Canary researchers noted that the worm "leverages Windows Installer to reach out to QNAP-associated domains and download a malicious DLL."
The earliest signs of the activity are said to<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0APROUrokgU:b3JzKcRbDEU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0APROUrokgU:b3JzKcRbDEU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0APROUrokgU:b3JzKcRbDEU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0APROUrokgU:b3JzKcRbDEU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0APROUrokgU:b3JzKcRbDEU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0APROUrokgU:b3JzKcRbDEU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0APROUrokgU:b3JzKcRbDEU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0APROUrokgU:b3JzKcRbDEU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8521403786083733633
title: QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices
uri: QNAP-Releases-Firmware-Patches-for-9-New-Flaws-Affecting-NAS-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8521403786083733633
content:
QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system.
"A vulnerability has been reported to affect QNAP VS Series NVR running QVR," QNAP said in an advisory. "If exploited, this vulnerability allows remote attackers to run arbitrary<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2emJ7a0hWlI:EgK_Ea2exWw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2emJ7a0hWlI:EgK_Ea2exWw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2emJ7a0hWlI:EgK_Ea2exWw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2emJ7a0hWlI:EgK_Ea2exWw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2emJ7a0hWlI:EgK_Ea2exWw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2emJ7a0hWlI:EgK_Ea2exWw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2emJ7a0hWlI:EgK_Ea2exWw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2emJ7a0hWlI:EgK_Ea2exWw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4876283572118121423
title: U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions
uri: U-S-Sanctions-Cryptocurrency-Mixer-Blender-for-Helping-North-Korea-La
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4876283572118121423
content:
The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades.
The move signals continued efforts on the part of the government to prevent North Korea's Lazarus Group from laundering the funds stolen from the unprecedented hack of Ronin Bridge in late March.
The newly imposed sanctions,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pCI88kIBtLE:T5rzygHAqOg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pCI88kIBtLE:T5rzygHAqOg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pCI88kIBtLE:T5rzygHAqOg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pCI88kIBtLE:T5rzygHAqOg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pCI88kIBtLE:T5rzygHAqOg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pCI88kIBtLE:T5rzygHAqOg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pCI88kIBtLE:T5rzygHAqOg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pCI88kIBtLE:T5rzygHAqOg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-70694276896843067
title: This New Fileless Malware Hides Shellcode in Windows Event Logs
uri: This-New-Fileless-Malware-Hides-Shellcode-in-Windows-Event-Logs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/70694276896843067
content:
A new malicious campaign has been spotted taking advantage of Windows event logs to stash chunks of shellcode for the first time in the wild.
"It allows the 'fileless' last stage trojan to be hidden from plain sight in the file system," Kaspersky researcher Denis Legezo said in a technical write-up published this week.
The stealthy infection process, not attributed to a known actor, is believed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=84pJn7BuJ-4:g_g4OwEm698:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=84pJn7BuJ-4:g_g4OwEm698:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=84pJn7BuJ-4:g_g4OwEm698:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=84pJn7BuJ-4:g_g4OwEm698:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=84pJn7BuJ-4:g_g4OwEm698:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=84pJn7BuJ-4:g_g4OwEm698:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=84pJn7BuJ-4:g_g4OwEm698:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=84pJn7BuJ-4:g_g4OwEm698:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4221102643833651592
title: U.S. Offering $10 Million Reward for Information on Conti Ransomware Hackers
uri: U-S-Offering-10-Million-Reward-for-Information-on-Conti-Ransomware-H
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4221102643833651592
content:
The U.S. State Department has announced rewards of up to $10 million for any information leading to the identification of key individuals who are part of the infamous Conti cybercrime gang.
Additionally, it's offering another $5 million for intelligence information that could help arrest or convict individuals who are conspiring or attempting to affiliate with the group in a ransomware attack.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GasAvzTIIBI:BgtvZCVnbtQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GasAvzTIIBI:BgtvZCVnbtQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GasAvzTIIBI:BgtvZCVnbtQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GasAvzTIIBI:BgtvZCVnbtQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GasAvzTIIBI:BgtvZCVnbtQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GasAvzTIIBI:BgtvZCVnbtQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GasAvzTIIBI:BgtvZCVnbtQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GasAvzTIIBI:BgtvZCVnbtQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2527292358474747802
title: Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability
uri: Researchers-Develop-RCE-Exploit-for-the-Latest-F5-BIG-IP-Vulnerability
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2527292358474747802
content:
Days after F5 released patches for a critical remote code execution vulnerability affecting its BIG-IP family of products, security researchers are warning that they were able to create an exploit for the shortcoming.
Tracked CVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zEF_XEMRa20:AhLksCR7Paw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zEF_XEMRa20:AhLksCR7Paw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zEF_XEMRa20:AhLksCR7Paw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zEF_XEMRa20:AhLksCR7Paw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zEF_XEMRa20:AhLksCR7Paw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zEF_XEMRa20:AhLksCR7Paw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zEF_XEMRa20:AhLksCR7Paw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zEF_XEMRa20:AhLksCR7Paw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5512624803183028940
title: Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store
uri: Another-Set-of-Joker-Trojan-Laced-Android-Apps-Resurfaces-on-Google-Pl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5512624803183028940
content:
A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices.
Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions of a malicious hacker's choice, such as stealing text messages, contact lists, and device information.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6x5F7jl6kA:8dZLX16EAO8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6x5F7jl6kA:8dZLX16EAO8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6x5F7jl6kA:8dZLX16EAO8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c6x5F7jl6kA:8dZLX16EAO8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6x5F7jl6kA:8dZLX16EAO8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c6x5F7jl6kA:8dZLX16EAO8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c6x5F7jl6kA:8dZLX16EAO8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c6x5F7jl6kA:8dZLX16EAO8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3747176288782621273
title: Ukrainian CERT Warns Citizens of a New Wave of Attacks Distributing Jester Malware
uri: Ukrainian-CERT-Warns-Citizens-of-a-New-Wave-of-Attacks-Distributing-Je
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3747176288782621273
content:
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of phishing attacks that deploy an information-stealing malware called Jester Stealer on compromised systems.
The mass email campaign carries the subject line "chemical attack" and contains a link to a macro-enabled Microsoft Excel file, opening which leads to computers getting infected with Jester Stealer.
The attack, which <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F4VKDL5nqr8:mmE7cLNZI6Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F4VKDL5nqr8:mmE7cLNZI6Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F4VKDL5nqr8:mmE7cLNZI6Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F4VKDL5nqr8:mmE7cLNZI6Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F4VKDL5nqr8:mmE7cLNZI6Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F4VKDL5nqr8:mmE7cLNZI6Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=F4VKDL5nqr8:mmE7cLNZI6Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=F4VKDL5nqr8:mmE7cLNZI6Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-938015546747927646
title: Experts Sound Alarm on DCRat Backdoor Being Sold on Russian Hacking Forums
uri: Experts-Sound-Alarm-on-DCRat-Backdoor-Being-Sold-on-Russian-Hacking-Fo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/938015546747927646
content:
Cybersecurity researchers have shed light on an actively maintained remote access trojan called DCRat (aka DarkCrystal RAT) that's offered on sale for "dirt cheap" prices, making it accessible to professional cybercriminal groups and novice actors alike.
"Unlike the well-funded, massive Russian threat groups crafting custom malware [...], this remote access Trojan (RAT) appears to be the work of<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M4JGxuSr8gQ:OeuooRL6YJM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M4JGxuSr8gQ:OeuooRL6YJM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M4JGxuSr8gQ:OeuooRL6YJM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M4JGxuSr8gQ:OeuooRL6YJM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M4JGxuSr8gQ:OeuooRL6YJM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M4JGxuSr8gQ:OeuooRL6YJM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M4JGxuSr8gQ:OeuooRL6YJM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M4JGxuSr8gQ:OeuooRL6YJM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6374934327590250476
title: SHIELDS UP in bite sized chunks
uri: SHIELDS-UP-in-bite-sized-chunks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6374934327590250476
content:
Unless you are living completely off the grid, you know the horrifying war in Ukraine and the related geopolitical tensions have dramatically increased cyberattacks and the threat of even more to come.
The Cybersecurity and Infrastructure Security Agency (CISA) provides guidance to US federal agencies in their fight against cybercrime, and the agency's advice has proven so valuable that it's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KMsf1Bid9Lg:N812Ai2WTFM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KMsf1Bid9Lg:N812Ai2WTFM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KMsf1Bid9Lg:N812Ai2WTFM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KMsf1Bid9Lg:N812Ai2WTFM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KMsf1Bid9Lg:N812Ai2WTFM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KMsf1Bid9Lg:N812Ai2WTFM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KMsf1Bid9Lg:N812Ai2WTFM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KMsf1Bid9Lg:N812Ai2WTFM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8096547127282745954
title: Critical Gems Takeover Bug Reported in RubyGems Package Manager
uri: Critical-Gems-Takeover-Bug-Reported-in-RubyGems-Package-Manager
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8096547127282745954
content:
The maintainers of the RubyGems package manager have addressed a critical security flaw that could have been abused to remove gems and replace them with rogue versions under specific circumstances.
"Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so," RubyGems said in a security advisory <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zci2vExK4ac:xnXdDAh2GQM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zci2vExK4ac:xnXdDAh2GQM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zci2vExK4ac:xnXdDAh2GQM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zci2vExK4ac:xnXdDAh2GQM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zci2vExK4ac:xnXdDAh2GQM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zci2vExK4ac:xnXdDAh2GQM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zci2vExK4ac:xnXdDAh2GQM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zci2vExK4ac:xnXdDAh2GQM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5497977340810814330
title: Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory
uri: Microsoft-Mitigates-RCE-Vulnerability-Affecting-Azure-Synapse-and-Data
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5497977340810814330
content:
Microsoft on Monday disclosed that it mitigated a security flaw affecting Azure Synapse and Azure Data Factory that, if successfully exploited, could result in remote code execution.
The vulnerability, tracked as CVE-2022-29972, has been codenamed "SynLapse" by researchers from Orca Security, who reported the flaw to Microsoft in January 2022.
&lt;!--adsense--&gt;
"The vulnerability was specific to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zv-m0Om5-to:gMeDt86zj9s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zv-m0Om5-to:gMeDt86zj9s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zv-m0Om5-to:gMeDt86zj9s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zv-m0Om5-to:gMeDt86zj9s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zv-m0Om5-to:gMeDt86zj9s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zv-m0Om5-to:gMeDt86zj9s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zv-m0Om5-to:gMeDt86zj9s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zv-m0Om5-to:gMeDt86zj9s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4084792217540128139
title: U.S. Proposes $1 Million Fine on Colonial Pipeline for Safety Violations After Cyberattack
uri: U-S-Proposes-1-Million-Fine-on-Colonial-Pipeline-for-Safety-Violatio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4084792217540128139
content:
The U.S. Department of Transportation's Pipeline and Hazardous Materials Safety Administration (PHMSA) has proposed a penalty of nearly $1 million to Colonial Pipeline for violating federal safety regulations, worsening the impact of the ransomware attack last year.
The $986,400 penalty is the result of an inspection conducted by the regulator of the pipeline operator's control room management (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LeOVGeB_9YU:xBWdV2S38yI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LeOVGeB_9YU:xBWdV2S38yI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LeOVGeB_9YU:xBWdV2S38yI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LeOVGeB_9YU:xBWdV2S38yI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LeOVGeB_9YU:xBWdV2S38yI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LeOVGeB_9YU:xBWdV2S38yI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LeOVGeB_9YU:xBWdV2S38yI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LeOVGeB_9YU:xBWdV2S38yI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1607870970194140430
title: New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity
uri: New-REvil-Samples-Indicate-Ransomware-Gang-is-Back-After-Months-of-Ina
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1607870970194140430
content:
The notorious ransomware operation known as REvil (aka Sodin or Sodinokibi) has resumed after six months of inactivity, an analysis of new ransomware samples has revealed.
"Analysis of these samples indicates that the developer has access to REvil's source code, reinforcing the likelihood that the threat group has reemerged," researchers from Secureworks Counter Threat Unit (CTU) said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X2FM-XZXJ5E:yB_Ui9RioZg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X2FM-XZXJ5E:yB_Ui9RioZg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X2FM-XZXJ5E:yB_Ui9RioZg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X2FM-XZXJ5E:yB_Ui9RioZg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X2FM-XZXJ5E:yB_Ui9RioZg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X2FM-XZXJ5E:yB_Ui9RioZg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=X2FM-XZXJ5E:yB_Ui9RioZg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=X2FM-XZXJ5E:yB_Ui9RioZg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7964979538030708174
title: 5 Benefits of Detection-as-Code
uri: 5-Benefits-of-Detection-as-Code
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7964979538030708174
content:
TL;DR: 
Adopt a modern, test-driven methodology for securing your organization with Detection-as-Code.
Over the past decade, threat detection has become business-critical and even more complicated. As businesses move to the cloud, manual threat detection processes are no longer able to keep up. How can teams automate security analysis at scale and address the challenges that threaten business <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vpUnbdlmT4:yYP_XijtHPU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vpUnbdlmT4:yYP_XijtHPU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vpUnbdlmT4:yYP_XijtHPU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0vpUnbdlmT4:yYP_XijtHPU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vpUnbdlmT4:yYP_XijtHPU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0vpUnbdlmT4:yYP_XijtHPU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0vpUnbdlmT4:yYP_XijtHPU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0vpUnbdlmT4:yYP_XijtHPU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9215273019318887356
title: Experts Detail Saintstealer and Prynt Stealer Info-Stealing Malware Families
uri: Experts-Detail-Saintstealer-and-Prynt-Stealer-Info-Stealing-Malware-Fa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9215273019318887356
content:
Cybersecurity researchers have dissected the inner workings of an information-stealing malware called Saintstealer that's designed to siphon credentials and system information.
"After execution, the stealer extracts username, passwords, credit card details, etc.," Cyble researchers said in an analysis last week. "The stealer also steals data from various locations across the system and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iMgiFQF4PNw:uY9ctxlkSfA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iMgiFQF4PNw:uY9ctxlkSfA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iMgiFQF4PNw:uY9ctxlkSfA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iMgiFQF4PNw:uY9ctxlkSfA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iMgiFQF4PNw:uY9ctxlkSfA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iMgiFQF4PNw:uY9ctxlkSfA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iMgiFQF4PNw:uY9ctxlkSfA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iMgiFQF4PNw:uY9ctxlkSfA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4713156196998415568
title: Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates
uri: Microsoft-Releases-Fix-for-New-Zero-Day-with-May-2022-Patch-Tuesday-Up
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4713156196998415568
content:
Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities, including one for a zero-day bug that's being actively exploited in the wild.
Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as publicly known at the time of release.
These encompass 24 remote code execution (RCE), 21 elevation of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dfs9MyfKzHk:bg6OrEHD9W0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dfs9MyfKzHk:bg6OrEHD9W0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dfs9MyfKzHk:bg6OrEHD9W0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dfs9MyfKzHk:bg6OrEHD9W0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dfs9MyfKzHk:bg6OrEHD9W0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dfs9MyfKzHk:bg6OrEHD9W0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dfs9MyfKzHk:bg6OrEHD9W0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dfs9MyfKzHk:bg6OrEHD9W0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2452385283979034010
title: E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat
uri: E-U-Blames-Russia-for-Cyberattack-on-KA-SAT-Satellite-Network-Operate
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2452385283979034010
content:
The Five Eyes nations comprising Australia, Canada, New Zealand, the U.K., and the U.S., along with Ukraine and the European Union, formally pinned Russia for masterminding an attack on an international satellite communication (SATCOM) provider that had "spillover" effects across Europe.
The cyber offensive, which took place one hour before the Kremlin's military invasion of Ukraine on February <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mqj4SgRYvYU:GJ5aBuKYYic:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mqj4SgRYvYU:GJ5aBuKYYic:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mqj4SgRYvYU:GJ5aBuKYYic:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mqj4SgRYvYU:GJ5aBuKYYic:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mqj4SgRYvYU:GJ5aBuKYYic:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mqj4SgRYvYU:GJ5aBuKYYic:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Mqj4SgRYvYU:GJ5aBuKYYic:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Mqj4SgRYvYU:GJ5aBuKYYic:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8010536092110556099
title: Malicious NPM Packages Target German Companies in Supply Chain Attack
uri: Malicious-NPM-Packages-Target-German-Companies-in-Supply-Chain-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8010536092110556099
content:
Cybersecurity researchers have discovered a number of malicious packages in the NPM registry specifically targeting a number of prominent companies based in Germany to carry out supply chain attacks.
"Compared with most malware found in the NPM repository, this payload seems particularly dangerous: a highly-sophisticated, obfuscated piece of malware that acts as a backdoor and allows the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q3QslB8mM9A:Q5SxL0BXyfY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q3QslB8mM9A:Q5SxL0BXyfY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q3QslB8mM9A:Q5SxL0BXyfY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q3QslB8mM9A:Q5SxL0BXyfY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q3QslB8mM9A:Q5SxL0BXyfY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q3QslB8mM9A:Q5SxL0BXyfY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q3QslB8mM9A:Q5SxL0BXyfY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q3QslB8mM9A:Q5SxL0BXyfY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1327099154306444901
title: Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K
uri: Researchers-Warn-of-Nerbian-RAT-Targeting-Entities-in-Italy-Spain-an
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1327099154306444901
content:
A previously undocumented remote access trojan (RAT) written in the Go programming language has been spotted disproportionately targeting entities in Italy, Spain, and the U.K.
Called Nerbian RAT by enterprise security firm Proofpoint, the novel malware leverages COVID-19-themed lures to propagate as part of a low volume email-borne phishing campaign that started on April 26, 2022.
"The newly <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uydMTvSoBqI:DiaCHIjLX4g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uydMTvSoBqI:DiaCHIjLX4g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uydMTvSoBqI:DiaCHIjLX4g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uydMTvSoBqI:DiaCHIjLX4g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uydMTvSoBqI:DiaCHIjLX4g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uydMTvSoBqI:DiaCHIjLX4g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uydMTvSoBqI:DiaCHIjLX4g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uydMTvSoBqI:DiaCHIjLX4g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6889174971023122208
title: Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia
uri: Bitter-APT-Hackers-Add-Bangladesh-to-Their-List-of-Targets-in-South-As
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6889174971023122208
content:
An espionage-focused threat actor known for targeting China, Pakistan, and Saudi Arabia has expanded to set its sights on Bangladeshi government organizations as part of an ongoing campaign that commenced in August 2021.
Cybersecurity firm Cisco Talos attributed the activity with moderate confidence to a hacking group dubbed the Bitter APT based on overlaps in the command-and-control (C2) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3lbY92rGNyI:1j9nFDsxGMc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3lbY92rGNyI:1j9nFDsxGMc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3lbY92rGNyI:1j9nFDsxGMc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3lbY92rGNyI:1j9nFDsxGMc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3lbY92rGNyI:1j9nFDsxGMc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3lbY92rGNyI:1j9nFDsxGMc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3lbY92rGNyI:1j9nFDsxGMc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3lbY92rGNyI:1j9nFDsxGMc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-701220812018428000
title: [White Paper] Social Engineering: What You Need to Know to Stay Resilient
uri: White-Paper-Social-Engineering-What-You-Need-to-Know-to-Stay-Resili
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/701220812018428000
content:
Security and IT teams are losing sleep as would-be intruders lay siege to the weakest link in any organization's digital defense: employees. By preying on human emotion, social engineering scams inflict billions of dollars of damage with minimal planning or expertise. Cybercriminals find it easier to manipulate people before resorting to technical "hacking" tactics. Recent research reveals that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rylwwc_-xuA:DiAnqUSuHmI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rylwwc_-xuA:DiAnqUSuHmI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rylwwc_-xuA:DiAnqUSuHmI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rylwwc_-xuA:DiAnqUSuHmI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rylwwc_-xuA:DiAnqUSuHmI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rylwwc_-xuA:DiAnqUSuHmI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rylwwc_-xuA:DiAnqUSuHmI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rylwwc_-xuA:DiAnqUSuHmI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-284882294290549533
title: CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability
uri: CISA-Urges-Organizations-to-Patch-Actively-Exploited-F5-BIG-IP-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/284882294290549533
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild.
The flaw, assigned the identifier CVE-2022-1388 (CVSS score: 9.8), concerns a critical bug in the BIG-IP iControl REST endpoint that provides an unauthenticated adversary with a method to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0lTjfhScx1I:S1ExciVOHg0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0lTjfhScx1I:S1ExciVOHg0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0lTjfhScx1I:S1ExciVOHg0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0lTjfhScx1I:S1ExciVOHg0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0lTjfhScx1I:S1ExciVOHg0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0lTjfhScx1I:S1ExciVOHg0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0lTjfhScx1I:S1ExciVOHg0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0lTjfhScx1I:S1ExciVOHg0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7653863784027778364
title: Everything We Learned From the LAPSUS$ Attacks
uri: Everything-We-Learned-From-the-LAPSUS-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7653863784027778364
content:
In recent months, a cybercriminal gang known as LAPSUS$ has claimed responsibility for a number of high-profile attacks against technology companies, including:

T-Mobile (April 23, 2022)
Globant 
Okta
Ubisoft
Samsung
Nvidia
Microsoft
Vodafone

In addition to these attacks, LAPSUS$ was also able to successfully launch a ransomware attack against the Brazilian Ministry of Health.
While <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GWqtc7vB1I:5q-0XMgymvA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GWqtc7vB1I:5q-0XMgymvA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GWqtc7vB1I:5q-0XMgymvA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4GWqtc7vB1I:5q-0XMgymvA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GWqtc7vB1I:5q-0XMgymvA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4GWqtc7vB1I:5q-0XMgymvA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4GWqtc7vB1I:5q-0XMgymvA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4GWqtc7vB1I:5q-0XMgymvA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8208142577750483577
title: Government Agencies Warn of Increase in Cyberattacks Targeting MSPs
uri: Government-Agencies-Warn-of-Increase-in-Cyberattacks-Targeting-MSPs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8208142577750483577
content:
Multiple cybersecurity authorities from Australia, Canada, New Zealand, the U.K., and the U.S. on Wednesday released a joint advisory warning of threats targeting managed service providers (MSPs) and their customers.
Key among the recommendations include identifying and disabling accounts that are no longer in use, enforcing multi-factor authentication (MFA) on MSP accounts that access customer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sjb-iYt3HgA:kr9mtYBNxvM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sjb-iYt3HgA:kr9mtYBNxvM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sjb-iYt3HgA:kr9mtYBNxvM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sjb-iYt3HgA:kr9mtYBNxvM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sjb-iYt3HgA:kr9mtYBNxvM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sjb-iYt3HgA:kr9mtYBNxvM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sjb-iYt3HgA:kr9mtYBNxvM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sjb-iYt3HgA:kr9mtYBNxvM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4737320466594922977
title: Hackers Deploy IceApple Exploitation Framework on Hacked MS Exchange Servers
uri: Hackers-Deploy-IceApple-Exploitation-Framework-on-Hacked-MS-Exchange-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4737320466594922977
content:
Researchers have detailed a previously undocumented .NET-based post-exploitation framework called IceApple that has been deployed on Microsoft Exchange server instances to facilitate reconnaissance and data exfiltration.
"Suspected to be the work of a state-nexus adversary, IceApple remains under active development, with 18 modules observed in use across a number of enterprise environments, as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nBksMBKlhHI:rAgo1Ost3sE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nBksMBKlhHI:rAgo1Ost3sE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nBksMBKlhHI:rAgo1Ost3sE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nBksMBKlhHI:rAgo1Ost3sE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nBksMBKlhHI:rAgo1Ost3sE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nBksMBKlhHI:rAgo1Ost3sE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nBksMBKlhHI:rAgo1Ost3sE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nBksMBKlhHI:rAgo1Ost3sE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8031824421950809493
title: Android and Chrome Users Can Soon Generate Virtual Credit Cards to Protect Real Ones
uri: Android-and-Chrome-Users-Can-Soon-Generate-Virtual-Credit-Cards-to-Pro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8031824421950809493
content:
Google on Wednesday took to its annual developer conference to announce a host of privacy and security updates, including support for virtual credit cards on Android and Chrome.
"When you use autofill to enter your payment details at checkout, virtual cards will add an additional layer of security by replacing your actual card number with a distinct, virtual number," Google's Jen Fitzpatrick <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q45i8nbtfcQ:Q3lnMvCTUoY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q45i8nbtfcQ:Q3lnMvCTUoY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q45i8nbtfcQ:Q3lnMvCTUoY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q45i8nbtfcQ:Q3lnMvCTUoY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q45i8nbtfcQ:Q3lnMvCTUoY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q45i8nbtfcQ:Q3lnMvCTUoY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q45i8nbtfcQ:Q3lnMvCTUoY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q45i8nbtfcQ:Q3lnMvCTUoY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3154183036559929305
title: Thousands of WordPress Sites Hacked to Redirect Visitors to Scam Sites
uri: Thousands-of-WordPress-Sites-Hacked-to-Redirect-Visitors-to-Scam-Sites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3154183036559929305
content:
Cybersecurity researchers have disclosed a massive campaign that's responsible for injecting malicious JavaScript code into compromised WordPress websites that redirects visitors to scam pages and other malicious websites to generate illegitimate traffic.
"The websites all shared a common issue — malicious JavaScript had been injected within their website's files and the database, including <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUbQgOb_j7c:2IEYcxRQaWc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUbQgOb_j7c:2IEYcxRQaWc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUbQgOb_j7c:2IEYcxRQaWc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PUbQgOb_j7c:2IEYcxRQaWc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUbQgOb_j7c:2IEYcxRQaWc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PUbQgOb_j7c:2IEYcxRQaWc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PUbQgOb_j7c:2IEYcxRQaWc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PUbQgOb_j7c:2IEYcxRQaWc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4566622298944315898
title: Iranian Hackers Leveraging BitLocker and DiskCryptor in Ransomware Attacks
uri: Iranian-Hackers-Leveraging-BitLocker-and-DiskCryptor-in-Ransomware-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4566622298944315898
content:
A ransomware group with an Iranian operational connection has been linked to a string of file-encrypting malware attacks targeting organizations in Israel, the U.S., Europe, and Australia.
Cybersecurity firm Secureworks attributed the intrusions to a threat actor it tracks under the moniker Cobalt Mirage, which it said is linked to an Iranian hacking crew dubbed Cobalt Illusion (aka APT35, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlPK_zaHcNc:ym8Ls9sL_rk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlPK_zaHcNc:ym8Ls9sL_rk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlPK_zaHcNc:ym8Ls9sL_rk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RlPK_zaHcNc:ym8Ls9sL_rk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlPK_zaHcNc:ym8Ls9sL_rk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RlPK_zaHcNc:ym8Ls9sL_rk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RlPK_zaHcNc:ym8Ls9sL_rk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RlPK_zaHcNc:ym8Ls9sL_rk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4046117277620879452
title: E.U. Proposes New Rules for Tech Companies to Combat Online Child Sexual Abuse
uri: E-U-Proposes-New-Rules-for-Tech-Companies-to-Combat-Online-Child-Sexu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4046117277620879452
content:
The European Commission on Wednesday proposed new regulation that would require tech companies to scan for child sexual abuse material (CSAM) and grooming behavior, raising worries that it could undermine end-to-end encryption (E2EE).
To that end, online service providers, including hosting services and communication apps, are expected to proactively scan their platforms for CSAM as well as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alae85rqB3Q:5FtKKkByqck:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alae85rqB3Q:5FtKKkByqck:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alae85rqB3Q:5FtKKkByqck:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=alae85rqB3Q:5FtKKkByqck:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alae85rqB3Q:5FtKKkByqck:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=alae85rqB3Q:5FtKKkByqck:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=alae85rqB3Q:5FtKKkByqck:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=alae85rqB3Q:5FtKKkByqck:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5151039972500156224
title: Zyxel Releases Patch for Critical Firewall OS Command Injection Vulnerability
uri: Zyxel-Releases-Patch-for-Critical-Firewall-OS-Command-Injection-Vulner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5151039972500156224
content:
Zyxel has moved to address a critical security vulnerability affecting Zyxel firewall devices that enables unauthenticated and remote attackers to gain arbitrary code execution.
"A command injection vulnerability in the CGI program of some firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device," the company said in an advisory <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=csDUdbNrJYY:TrVjdeqXCKc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=csDUdbNrJYY:TrVjdeqXCKc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=csDUdbNrJYY:TrVjdeqXCKc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=csDUdbNrJYY:TrVjdeqXCKc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=csDUdbNrJYY:TrVjdeqXCKc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=csDUdbNrJYY:TrVjdeqXCKc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=csDUdbNrJYY:TrVjdeqXCKc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=csDUdbNrJYY:TrVjdeqXCKc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6770446414677718708
title: Google Created 'Open-Source Maintenance Crew' to Help Secure Critical Projects
uri: Google-Created-Open-Source-Maintenance-Crew-to-Help-Secure-Critical
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6770446414677718708
content:
Google on Thursday announced the creation of a new "Open Source Maintenance Crew" to focus on bolstering the security of critical open source projects.
Additionally, the tech giant pointed out Open Source Insights as a tool for analyzing packages and their dependency graphs, using it to determine "whether a vulnerability in a dependency might affect your code."
"With this information, developers<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5bdRvBKRj7o:CyeoZ04Gjbw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5bdRvBKRj7o:CyeoZ04Gjbw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5bdRvBKRj7o:CyeoZ04Gjbw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5bdRvBKRj7o:CyeoZ04Gjbw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5bdRvBKRj7o:CyeoZ04Gjbw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5bdRvBKRj7o:CyeoZ04Gjbw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5bdRvBKRj7o:CyeoZ04Gjbw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5bdRvBKRj7o:CyeoZ04Gjbw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1086650062675959185
title: New Saitama backdoor Targeted Official from Jordan's Foreign Ministry
uri: New-Saitama-backdoor-Targeted-Official-from-Jordan-s-Foreign-Ministry
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1086650062675959185
content:
A spear-phishing campaign targeting Jordan's foreign ministry has been observed dropping a new stealthy backdoor dubbed Saitama.
Researchers from Malwarebytes and Fortinet FortiGuard Labs attributed the campaign to an Iranian cyber espionage threat actor tracked under the moniker APT34, citing resemblances to past campaigns staged by the group.
"Like many of these attacks, the email contained a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oE75-AbXIgM:2KJzXgfUZNI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oE75-AbXIgM:2KJzXgfUZNI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oE75-AbXIgM:2KJzXgfUZNI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oE75-AbXIgM:2KJzXgfUZNI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oE75-AbXIgM:2KJzXgfUZNI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oE75-AbXIgM:2KJzXgfUZNI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oE75-AbXIgM:2KJzXgfUZNI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oE75-AbXIgM:2KJzXgfUZNI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2210167754029038760
title: SonicWall Releases Patches for New Flaws Affecting SSLVPN SMA1000 Devices
uri: SonicWall-Releases-Patches-for-New-Flaws-Affecting-SSLVPN-SMA1000-Devi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2210167754029038760
content:
SonicWall has published an advisory warning of a trio of security flaws in its Secure Mobile Access (SMA) 1000 appliances, including a high-severity authentication bypass vulnerability.
The weaknesses in question impact SMA 6200, 6210, 7200, 7210, 8000v running firmware versions 12.4.0 and 12.4.1. The list of vulnerabilities is below -

CVE-2022-22282 (CVSS score: 8.2) - Unauthenticated Access <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmVli_0nImA:MODdMBdcONk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmVli_0nImA:MODdMBdcONk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmVli_0nImA:MODdMBdcONk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jmVli_0nImA:MODdMBdcONk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmVli_0nImA:MODdMBdcONk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jmVli_0nImA:MODdMBdcONk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jmVli_0nImA:MODdMBdcONk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jmVli_0nImA:MODdMBdcONk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4333261355133699590
title: Get Lifetime Access to 2022 Cybersecurity Certification Prep Courses @ 95% Off
uri: Get-Lifetime-Access-to-2022-Cybersecurity-Certification-Prep-Courses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4333261355133699590
content:
Ever thought about working full-time in cybersecurity? With millions of unfilled jobs around, now is a great time to get into the industry. Of course, there are many different roles in this field. But all of them require the same handful of professional certifications.
The 2022 Ultimate Advanced CyberSecurity Professional Certification Bundle helps you collect the full house, with five <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dhaRU-OJz4:AjGGM-kvflQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dhaRU-OJz4:AjGGM-kvflQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dhaRU-OJz4:AjGGM-kvflQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1dhaRU-OJz4:AjGGM-kvflQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dhaRU-OJz4:AjGGM-kvflQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1dhaRU-OJz4:AjGGM-kvflQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1dhaRU-OJz4:AjGGM-kvflQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1dhaRU-OJz4:AjGGM-kvflQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2399808930722406485
title: Ukrainian Hacker Jailed for 4-Years in U.S. for Selling Access to Hacked Servers
uri: Ukrainian-Hacker-Jailed-for-4-Years-in-U-S-for-Selling-Access-to-Hack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2399808930722406485
content:
A 28-year-old Ukrainian national has been sentenced to four years in prison for siphoning thousands of server login credentials and selling them on the dark web for monetary gain as part of a credential theft scheme.
Glib Oleksandr Ivanov-Tolpintsev, who pleaded guilty to his offenses earlier this February, was arrested in Poland in October 2020, before being extradited to the U.S. in September <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uQb7-amP8kw:dTt8ygGVn00:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uQb7-amP8kw:dTt8ygGVn00:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uQb7-amP8kw:dTt8ygGVn00:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uQb7-amP8kw:dTt8ygGVn00:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uQb7-amP8kw:dTt8ygGVn00:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uQb7-amP8kw:dTt8ygGVn00:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uQb7-amP8kw:dTt8ygGVn00:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uQb7-amP8kw:dTt8ygGVn00:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3471833846192681221
title: Europe Agrees to Adopt New NIS2 Directive Aimed at Hardening Cybersecurity
uri: Europe-Agrees-to-Adopt-New-NIS2-Directive-Aimed-at-Hardening-Cybersecu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3471833846192681221
content:
The European Parliament announced a "provisional agreement" aimed at improving cybersecurity and resilience of both public and private sector entities in the European Union.
The revised directive, called "NIS2" (short for network and information systems), is expected to replace the existing legislation on cybersecurity that was established in July 2016.
The revamp sets ground rules, requiring <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yjgm5pjcN70:sN52spDtas0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yjgm5pjcN70:sN52spDtas0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yjgm5pjcN70:sN52spDtas0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yjgm5pjcN70:sN52spDtas0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yjgm5pjcN70:sN52spDtas0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yjgm5pjcN70:sN52spDtas0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yjgm5pjcN70:sN52spDtas0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yjgm5pjcN70:sN52spDtas0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6838372674551018637
title: Researchers Find Way to Run Malware on iPhone Even When It's OFF
uri: Researchers-Find-Way-to-Run-Malware-on-iPhone-Even-When-It-s-OFF
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6838372674551018637
content:
A first-of-its-kind security analysis of iOS Find My function has demonstrated a novel attack surface that makes it possible to tamper with the firmware and load malware onto a Bluetooth chip that's executed while an iPhone is "off."
The mechanism takes advantage of the fact that wireless chips related to Bluetooth, Near-field communication (NFC), and ultra-wideband (UWB) continue to operate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POtsDbPjd3Q:UkKbMvsJiBs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POtsDbPjd3Q:UkKbMvsJiBs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POtsDbPjd3Q:UkKbMvsJiBs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=POtsDbPjd3Q:UkKbMvsJiBs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POtsDbPjd3Q:UkKbMvsJiBs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=POtsDbPjd3Q:UkKbMvsJiBs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=POtsDbPjd3Q:UkKbMvsJiBs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=POtsDbPjd3Q:UkKbMvsJiBs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1211715732660819342
title: Fake Clickjacking Bug Bounty Reports: The Key Facts
uri: Fake-Clickjacking-Bug-Bounty-Reports-The-Key-Facts
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1211715732660819342
content:
Are you aware of fake clickjacking bug bounty reports? If not, you should be. This article will get you up to speed and help you to stay alert.
What are clickjacking bug bounty reports?
If we start by breaking up the term into its component parts, a bug bounty is a program offered by an organization, in which individuals are rewarded for finding and reporting software bugs. These programs are <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_weUS44P6EQ:5SbkIzI_Ib0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_weUS44P6EQ:5SbkIzI_Ib0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_weUS44P6EQ:5SbkIzI_Ib0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_weUS44P6EQ:5SbkIzI_Ib0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_weUS44P6EQ:5SbkIzI_Ib0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_weUS44P6EQ:5SbkIzI_Ib0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_weUS44P6EQ:5SbkIzI_Ib0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_weUS44P6EQ:5SbkIzI_Ib0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2912504567062582556
title: Researchers Warn of "Eternity Project" Malware Service Being Sold via Telegram
uri: Researchers-Warn-of-Eternity-Project-Malware-Service-Being-Sold-via
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2912504567062582556
content:
An unidentified threat actor has been linked to an actively in-development malware toolkit called the "Eternity Project" that lets professional and amateur cybercriminals buy stealers, clippers, worms, miners, ransomware, and a distributed denial-of-service (DDoS) bot.
What makes this malware-as-a-service (MaaS) stand out is that besides using a Telegram channel to communicate updates about the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I_VfyyDHGhw:8qK7Ke79dsw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I_VfyyDHGhw:8qK7Ke79dsw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I_VfyyDHGhw:8qK7Ke79dsw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I_VfyyDHGhw:8qK7Ke79dsw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I_VfyyDHGhw:8qK7Ke79dsw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I_VfyyDHGhw:8qK7Ke79dsw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=I_VfyyDHGhw:8qK7Ke79dsw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=I_VfyyDHGhw:8qK7Ke79dsw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-812410692490579386
title: Watch Out! Hackers Begin Exploiting Recent Zyxel Firewalls RCE Vulnerability
uri: Watch-Out-Hackers-Begin-Exploiting-Recent-Zyxel-Firewalls-RCE-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/812410692490579386
content:
Image source: z3r00t
The U.S. Cybersecurity and Infrastructure Security Agency on Monday added two security flaws, including the recently disclosed remote code execution bug affecting Zyxel firewalls, to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
Tracked as CVE-2022-30525, the vulnerability is rated 9.8 for severity and relates to a command injection flaw<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R7QzHBmJ7sM:Mp4clSsifsA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R7QzHBmJ7sM:Mp4clSsifsA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R7QzHBmJ7sM:Mp4clSsifsA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R7QzHBmJ7sM:Mp4clSsifsA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R7QzHBmJ7sM:Mp4clSsifsA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R7QzHBmJ7sM:Mp4clSsifsA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=R7QzHBmJ7sM:Mp4clSsifsA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=R7QzHBmJ7sM:Mp4clSsifsA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2993693830376979819
title: U.S. Charges Venezuelan Doctor for Using and Selling Thanos Ransomware
uri: U-S-Charges-Venezuelan-Doctor-for-Using-and-Selling-Thanos-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2993693830376979819
content:
The U.S. Justice Department on Monday accused a 55-year-old cardiologist from Venezuela of being the mastermind behind Thanos ransomware, charging him with the use and sale of the malicious tool and entering into profit sharing arrangements.
Moises Luis Zagala Gonzalez, also known by the monikers Nosophoros, Aesculapius, and Nebuchadnezzar, is alleged to have both developed and marketed the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecY-kI1Q_2g:CQdDSjMmLxo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecY-kI1Q_2g:CQdDSjMmLxo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecY-kI1Q_2g:CQdDSjMmLxo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ecY-kI1Q_2g:CQdDSjMmLxo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecY-kI1Q_2g:CQdDSjMmLxo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ecY-kI1Q_2g:CQdDSjMmLxo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ecY-kI1Q_2g:CQdDSjMmLxo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ecY-kI1Q_2g:CQdDSjMmLxo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1425915396073085343
title: New Sysrv Botnet Variant Hijacking Windows and Linux with Crypto Miners
uri: New-Sysrv-Botnet-Variant-Hijacking-Windows-and-Linux-with-Crypto-Miner
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1425915396073085343
content:
Microsoft is warning of a new variant of the srv botnet that's exploiting multiple security flaws in web applications and databases to install coin miners on both Windows and Linux systems.
The tech giant, which has called the new version Sysrv-K, is said to weaponize an array of exploits to gain control of web servers. The cryptojacking botnet first emerged in December 2020.
"Sysrv-K scans the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJ5-tPLeOeI:lZqkEOLdNYU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJ5-tPLeOeI:lZqkEOLdNYU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJ5-tPLeOeI:lZqkEOLdNYU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PJ5-tPLeOeI:lZqkEOLdNYU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJ5-tPLeOeI:lZqkEOLdNYU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PJ5-tPLeOeI:lZqkEOLdNYU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PJ5-tPLeOeI:lZqkEOLdNYU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PJ5-tPLeOeI:lZqkEOLdNYU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5012426958753227612
title: Over 200 Apps on Play Store Caught Spying on Android Users Using Facestealer
uri: Over-200-Apps-on-Play-Store-Caught-Spying-on-Android-Users-Using-Faces
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5012426958753227612
content:
More than 200 Android apps masquerading as fitness, photo editing, and puzzle apps have been observed distributing spyware called Facestealer to siphon user credentials and other valuable information. 
"Similar to Joker, another piece of mobile malware, Facestealer changes its code frequently, thus spawning many variants," Trend Micro analysts Cifer Fang, Ford Quin, and Zhengyu Dong said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rr8ZiZxeY0k:gRfiMPsyios:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rr8ZiZxeY0k:gRfiMPsyios:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rr8ZiZxeY0k:gRfiMPsyios:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rr8ZiZxeY0k:gRfiMPsyios:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rr8ZiZxeY0k:gRfiMPsyios:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rr8ZiZxeY0k:gRfiMPsyios:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Rr8ZiZxeY0k:gRfiMPsyios:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Rr8ZiZxeY0k:gRfiMPsyios:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6716778281740540882
title: UpdateAgent Returns with New macOS Malware Dropper Written in Swift
uri: UpdateAgent-Returns-with-New-macOS-Malware-Dropper-Written-in-Swift
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6716778281740540882
content:
A new variant of the macOS malware tracked as UpdateAgent has been spotted in the wild, indicating ongoing attempts on the part of its authors to upgrade its functionalities.
"Perhaps one of the most identifiable features of the malware is that it relies on the AWS infrastructure to host its various payloads and perform its infection status updates to the server," researchers from Jamf Threat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PE3UB_K_NSM:wpJsaJeVqFY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PE3UB_K_NSM:wpJsaJeVqFY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PE3UB_K_NSM:wpJsaJeVqFY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PE3UB_K_NSM:wpJsaJeVqFY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PE3UB_K_NSM:wpJsaJeVqFY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PE3UB_K_NSM:wpJsaJeVqFY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PE3UB_K_NSM:wpJsaJeVqFY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PE3UB_K_NSM:wpJsaJeVqFY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9099287816108590779
title: Are You Investing in Securing Your Data in the Cloud?
uri: Are-You-Investing-in-Securing-Your-Data-in-the-Cloud
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9099287816108590779
content:
Traditional businesses migrating to the cloud need robust information security mechanisms. Gartner predicts that more than 95% of new digital workloads will continue to be deployed on cloud-native platforms by 2025.
Robust cloud data security is imperative for businesses adopting rapid digital transformation to the cloud. While a traditional hosting model could be considered more secure, not all<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u8ZNJ98kvWg:LFkLaR2LiZ0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u8ZNJ98kvWg:LFkLaR2LiZ0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u8ZNJ98kvWg:LFkLaR2LiZ0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=u8ZNJ98kvWg:LFkLaR2LiZ0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u8ZNJ98kvWg:LFkLaR2LiZ0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=u8ZNJ98kvWg:LFkLaR2LiZ0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=u8ZNJ98kvWg:LFkLaR2LiZ0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=u8ZNJ98kvWg:LFkLaR2LiZ0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9096446751245323325
title: Russian Conti Ransomware Gang Threatens to Overthrow New Costa Rican Government
uri: Russian-Conti-Ransomware-Gang-Threatens-to-Overthrow-New-Costa-Rican-G
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9096446751245323325
content:
The notorious Conti ransomware gang, which last month staged an attack on Costa Rican administrative systems, has threatened to "overthrow" the new government of the country.
"We are determined to overthrow the government by means of a cyber attack, we have already shown you all the strength and power," the group said on its official website. "We have our insiders in your government. We are also<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eqz8yp-smmY:X_2uxTkMmAE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eqz8yp-smmY:X_2uxTkMmAE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eqz8yp-smmY:X_2uxTkMmAE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eqz8yp-smmY:X_2uxTkMmAE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eqz8yp-smmY:X_2uxTkMmAE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eqz8yp-smmY:X_2uxTkMmAE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Eqz8yp-smmY:X_2uxTkMmAE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Eqz8yp-smmY:X_2uxTkMmAE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2361886679938566078
title: Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang
uri: Researchers-Expose-Inner-Workings-of-Billion-Dollar-Wizard-Spider-Cybe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2361886679938566078
content:
The inner workings of a cybercriminal group known as the Wizard Spider have been exposed, shedding light on its organizational structure and motivations.
"Most of Wizard Spider's efforts go into hacking European and U.S. businesses, with a special cracking tool used by some of their attackers to breach high-value targets," Swiss cybersecurity company PRODAFT said in a new report shared with The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-71kKOsIkqg:fPAtuOPU0HA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-71kKOsIkqg:fPAtuOPU0HA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-71kKOsIkqg:fPAtuOPU0HA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-71kKOsIkqg:fPAtuOPU0HA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-71kKOsIkqg:fPAtuOPU0HA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-71kKOsIkqg:fPAtuOPU0HA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-71kKOsIkqg:fPAtuOPU0HA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-71kKOsIkqg:fPAtuOPU0HA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6428399538024231233
title: Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility
uri: Hackers-Gain-Fileless-Persistence-on-Targeted-SQL-Servers-Using-a-Buil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6428399538024231233
content:
Microsoft on Tuesday warned that it recently spotted a malicious campaign targeting SQL Servers that leverages a built-in PowerShell binary to achieve persistence on compromised systems.
The intrusions, which leverage brute-force attacks as an initial compromise vector, stand out for their use of the utility "sqlps.exe," the tech giant said in a series of tweets.
The ultimate goals of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nr74dJFK8rg:LZzTQ8XYs74:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nr74dJFK8rg:LZzTQ8XYs74:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nr74dJFK8rg:LZzTQ8XYs74:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nr74dJFK8rg:LZzTQ8XYs74:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nr74dJFK8rg:LZzTQ8XYs74:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nr74dJFK8rg:LZzTQ8XYs74:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nr74dJFK8rg:LZzTQ8XYs74:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nr74dJFK8rg:LZzTQ8XYs74:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7431753058328371045
title: [eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery
uri: eBook-Your-90-Day-MSSP-Plan-How-to-Improve-Margins-and-Scale-Up-Ser
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7431753058328371045
content:
To cash in on a thriving market, a managed security service provider (MSSP) must navigate unprecedented competition and complex challenges. The good news is that demand is through the roof. 69% of organizations plan to boost spending on cybersecurity in 2022. 
The bad news is that everyone wants a piece of the pie. MSSPs must outshine each other while fending off encroachments by traditional IT <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UOlJJ1EQ_e8:LrRJM-kDbwU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UOlJJ1EQ_e8:LrRJM-kDbwU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UOlJJ1EQ_e8:LrRJM-kDbwU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UOlJJ1EQ_e8:LrRJM-kDbwU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UOlJJ1EQ_e8:LrRJM-kDbwU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UOlJJ1EQ_e8:LrRJM-kDbwU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UOlJJ1EQ_e8:LrRJM-kDbwU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UOlJJ1EQ_e8:LrRJM-kDbwU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3013000395718346525
title: U.S. Warns Against North Korean Hackers Posing as IT Freelancers
uri: U-S-Warns-Against-North-Korean-Hackers-Posing-as-IT-Freelancers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3013000395718346525
content:
Highly skilled software and mobile app developers from the Democratic People's Republic of Korea (DPRK) are posing as "non-DPRK nationals" in hopes of landing freelance employment in an attempt to enable the regime's malicious cyber intrusions.
That's according to a joint advisory from the U.S. Department of State, the Department of the Treasury, and the Federal Bureau of Investigation (FBI) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jO3BvMlpF0M:nsySOYc0YXk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jO3BvMlpF0M:nsySOYc0YXk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jO3BvMlpF0M:nsySOYc0YXk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jO3BvMlpF0M:nsySOYc0YXk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jO3BvMlpF0M:nsySOYc0YXk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jO3BvMlpF0M:nsySOYc0YXk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jO3BvMlpF0M:nsySOYc0YXk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jO3BvMlpF0M:nsySOYc0YXk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9208127363225019040
title: Microsoft Warns of "Cryware" Info-Stealing Malware Targeting Crypto Wallets
uri: Microsoft-Warns-of-Cryware-Info-Stealing-Malware-Targeting-Crypto-Wa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9208127363225019040
content:
Microsoft is warning of an emerging threat targeting internet-connected cryptocurrency wallets, signaling a departure in the use of digital coins in cyberattacks.
The tech giant dubbed the new threat "cryware," with the attacks resulting in the irreversible theft of virtual currencies by means of fraudulent transfers to an adversary-controlled wallet.
"Cryware are information stealers that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=876aHpoMt4I:7V0stgVS9PU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=876aHpoMt4I:7V0stgVS9PU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=876aHpoMt4I:7V0stgVS9PU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=876aHpoMt4I:7V0stgVS9PU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=876aHpoMt4I:7V0stgVS9PU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=876aHpoMt4I:7V0stgVS9PU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=876aHpoMt4I:7V0stgVS9PU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=876aHpoMt4I:7V0stgVS9PU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6005185587605937885
title: How to Protect Your Data When Ransomware Strikes
uri: How-to-Protect-Your-Data-When-Ransomware-Strikes
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6005185587605937885
content:
Ransomware is not a new attack vector. In fact, the first malware of its kind appeared more than 30 years ago and was distributed via 5.25-inch floppy disks. To pay the ransom, the victim had to mail money to a P.O. Box in Panama.
Fast forward to today, affordable ransomware-as-a-service (RaaS) kits are available on the dark web for anyone to purchase and deploy and attackers have an infinite <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5YM-gcGAOJU:DoRa6LfWALo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5YM-gcGAOJU:DoRa6LfWALo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5YM-gcGAOJU:DoRa6LfWALo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5YM-gcGAOJU:DoRa6LfWALo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5YM-gcGAOJU:DoRa6LfWALo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5YM-gcGAOJU:DoRa6LfWALo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5YM-gcGAOJU:DoRa6LfWALo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5YM-gcGAOJU:DoRa6LfWALo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5654335727218057176
title: VMware Releases Patches for New Vulnerabilities Affecting Multiple Products
uri: VMware-Releases-Patches-for-New-Vulnerabilities-Affecting-Multiple-Pro
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5654335727218057176
content:
VMware has issued patches to contain two security flaws impacting Workspace ONE Access, Identity Manager, and vRealize Automation that could be exploited to backdoor enterprise networks.
The first of the two flaws, tracked as CVE-2022-22972 (CVSS score: 9.8), concerns an authentication bypass that could enable an actor with network access to the UI to gain administrative access without prior <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IL0YRbdqTl0:h9o_BpCfWXM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IL0YRbdqTl0:h9o_BpCfWXM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IL0YRbdqTl0:h9o_BpCfWXM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IL0YRbdqTl0:h9o_BpCfWXM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IL0YRbdqTl0:h9o_BpCfWXM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IL0YRbdqTl0:h9o_BpCfWXM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IL0YRbdqTl0:h9o_BpCfWXM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IL0YRbdqTl0:h9o_BpCfWXM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3057076637339073266
title: Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit
uri: Web-Trackers-Caught-Intercepting-Online-Forms-Even-Before-Users-Hit-Su
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3057076637339073266
content:
A new research published by academics from KU Leuven, Radboud University, and the University of Lausanne has revealed that users' email addresses are exfiltrated to tracking, marketing, and analytics domains before such is submitted and without prior consent.
The study involved crawling 2.8 million pages from the top 100 websites, and found that as many as 1,844 websites allowed trackers to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dH0vYsYN-Jc:NDYezSUk1sY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dH0vYsYN-Jc:NDYezSUk1sY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dH0vYsYN-Jc:NDYezSUk1sY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dH0vYsYN-Jc:NDYezSUk1sY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dH0vYsYN-Jc:NDYezSUk1sY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dH0vYsYN-Jc:NDYezSUk1sY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dH0vYsYN-Jc:NDYezSUk1sY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dH0vYsYN-Jc:NDYezSUk1sY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5802753681933279992
title: High-Severity Bug Reported in Google's OAuth Client Library for Java
uri: High-Severity-Bug-Reported-in-Google-s-OAuth-Client-Library-for-Java
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5802753681933279992
content:
Google last month addressed a high-severity flaw in its OAuth client library for Java that could be abused by a malicious actor with a compromised token to deploy arbitrary payloads.
Tracked as CVE-2021-22573, the vulnerability is rated 8.7 out of 10 for severity and relates to an authentication bypass in the library that stems from an improper verification of the cryptographic signature.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HFdVyrNo8PI:5YhM41i4YHc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HFdVyrNo8PI:5YhM41i4YHc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HFdVyrNo8PI:5YhM41i4YHc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HFdVyrNo8PI:5YhM41i4YHc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HFdVyrNo8PI:5YhM41i4YHc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HFdVyrNo8PI:5YhM41i4YHc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HFdVyrNo8PI:5YhM41i4YHc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HFdVyrNo8PI:5YhM41i4YHc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-371997266162492086
title: 7 Key Findings from the 2022 SaaS Security Survey Report
uri: 7-Key-Findings-from-the-2022-SaaS-Security-Survey-Report
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/371997266162492086
content:
The 2022 SaaS Security Survey Report, in collaboration with CSA, examines the state of SaaS security as seen in the eyes of CISOs and security professionals in today's enterprises. The report gathers anonymous responses from 340 CSA members to examine not only the growing risks in SaaS security but also how different organizations are currently working to secure themselves.
Demographics
The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wZV4hpG3t8:M0hdA11AL2o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wZV4hpG3t8:M0hdA11AL2o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wZV4hpG3t8:M0hdA11AL2o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wZV4hpG3t8:M0hdA11AL2o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wZV4hpG3t8:M0hdA11AL2o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wZV4hpG3t8:M0hdA11AL2o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wZV4hpG3t8:M0hdA11AL2o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wZV4hpG3t8:M0hdA11AL2o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6314889776667267752
title: New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars
uri: New-Bluetooth-Hack-Could-Let-Attackers-Remotely-Unlock-Smart-Locks-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6314889776667267752
content:
A novel Bluetooth relay attack can let cybercriminals more easily than ever remotely unlock and operate cars, break open residential smart locks, and breach secure areas.
The vulnerability has to do with weaknesses in the current implementation of Bluetooth Low Energy (BLE), a wireless technology used for authenticating Bluetooth devices that are physically located within a close range.
&lt;!-<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=goMgLFHRaHA:nO_EW5tP8x4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=goMgLFHRaHA:nO_EW5tP8x4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=goMgLFHRaHA:nO_EW5tP8x4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=goMgLFHRaHA:nO_EW5tP8x4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=goMgLFHRaHA:nO_EW5tP8x4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=goMgLFHRaHA:nO_EW5tP8x4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=goMgLFHRaHA:nO_EW5tP8x4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=goMgLFHRaHA:nO_EW5tP8x4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7534802556505420349
title: QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks
uri: QNAP-Urges-Users-to-Update-NAS-Devices-to-Prevent-Deadbolt-Ransomware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7534802556505420349
content:
Taiwanese network-attached storage (NAS) devices maker QNAP on Thursday warned its customers of a fresh wave of DeadBolt ransomware attacks.
The intrusions are said to have targeted TS-x51 series and TS-x53 series appliances running on QTS 4.3.6 and QTS 4.4.1, according to its product security incident response team. 
"QNAP urges all NAS users to check and update QTS to the latest version as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4c-aHCMfWe0:pHD6IvESHW4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4c-aHCMfWe0:pHD6IvESHW4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4c-aHCMfWe0:pHD6IvESHW4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4c-aHCMfWe0:pHD6IvESHW4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4c-aHCMfWe0:pHD6IvESHW4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4c-aHCMfWe0:pHD6IvESHW4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4c-aHCMfWe0:pHD6IvESHW4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4c-aHCMfWe0:pHD6IvESHW4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8321833573675545323
title: Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware
uri: Hackers-Trick-Users-with-Fake-Windows-11-Downloads-to-Distribute-Vidar
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8321833573675545323
content:
Fraudulent domains masquerading as Microsoft's Windows 11 download portal are attempting to trick users into deploying trojanized installation files to infect systems with the Vidar information stealer malware.
"The spoofed sites were created to distribute malicious ISO files which lead to a Vidar info-stealer infection on the endpoint," Zscaler said in a report. "These variants of Vidar malware<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b97aniL4vMs:X-Upfu4TY4E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b97aniL4vMs:X-Upfu4TY4E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b97aniL4vMs:X-Upfu4TY4E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b97aniL4vMs:X-Upfu4TY4E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b97aniL4vMs:X-Upfu4TY4E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b97aniL4vMs:X-Upfu4TY4E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b97aniL4vMs:X-Upfu4TY4E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b97aniL4vMs:X-Upfu4TY4E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7607985223527853326
title: Microsoft Warns Rise in XorDdos Malware Targeting Linux Devices
uri: Microsoft-Warns-Rise-in-XorDdos-Malware-Targeting-Linux-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7607985223527853326
content:
A Linux botnet malware known as XorDdos has witnessed a 254% surge in activity over the last six months, according to latest research from Microsoft.
The trojan, so named for carrying out denial-of-service attacks on Linux systems and its use of XOR-based encryption for communications with its command-and-control (C2) server, is known to have been active since at least 2014.
"XorDdos' modular <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWIvT-9au44:bnBE0oI_gXk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWIvT-9au44:bnBE0oI_gXk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWIvT-9au44:bnBE0oI_gXk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWIvT-9au44:bnBE0oI_gXk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWIvT-9au44:bnBE0oI_gXk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWIvT-9au44:bnBE0oI_gXk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zWIvT-9au44:bnBE0oI_gXk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zWIvT-9au44:bnBE0oI_gXk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4990168724905629645
title: Cytrox's Predator Spyware Target Android Users with Zero-Day Exploits
uri: Cytrox-s-Predator-Spyware-Target-Android-Users-with-Zero-Day-Exploits
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4990168724905629645
content:
Google's Threat Analysis Group (TAG) on Thursday pointed fingers at a North Macedonian spyware developer named Cytrox for developing exploits against five zero-day (aka 0-day) flaws, four in Chrome and one in Android, to target Android users.
"The 0-day exploits were used alongside n-day exploits as the developers took advantage of the time difference between when some critical bugs were patched<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3HCFu6gBTiY:k_Pkq9ihwuQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3HCFu6gBTiY:k_Pkq9ihwuQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3HCFu6gBTiY:k_Pkq9ihwuQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3HCFu6gBTiY:k_Pkq9ihwuQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3HCFu6gBTiY:k_Pkq9ihwuQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3HCFu6gBTiY:k_Pkq9ihwuQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3HCFu6gBTiY:k_Pkq9ihwuQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3HCFu6gBTiY:k_Pkq9ihwuQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7986160454014970712
title: Researchers Uncover Rust Supply-Chain Attack Targeting Cloud CI Pipelines
uri: Researchers-Uncover-Rust-Supply-Chain-Attack-Targeting-Cloud-CI-Pipeli
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7986160454014970712
content:
A case of software supply chain attack has been observed in the Rust programming language's crate registry that leveraged typosquatting techniques to publish a rogue library containing malware.
Cybersecurity firm SentinelOne dubbed the attack "CrateDepression."
Typosquatting attacks take place when an adversary mimics the name of a popular package on a public registry in hopes that developers <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fV8YhpwK6pk:fzN7dbMgbrc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fV8YhpwK6pk:fzN7dbMgbrc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fV8YhpwK6pk:fzN7dbMgbrc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fV8YhpwK6pk:fzN7dbMgbrc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fV8YhpwK6pk:fzN7dbMgbrc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fV8YhpwK6pk:fzN7dbMgbrc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fV8YhpwK6pk:fzN7dbMgbrc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fV8YhpwK6pk:fzN7dbMgbrc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5973296355352961005
title: Hackers Exploiting VMware Horizon to Target South Korea with NukeSped Backdoor
uri: Hackers-Exploiting-VMware-Horizon-to-Target-South-Korea-with-NukeSped
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5973296355352961005
content:
The North Korea-backed Lazarus Group has been observed leveraging the Log4Shell vulnerability in VMware Horizon servers to deploy the NukeSped (aka Manuscrypt) implant against targets located in its southern counterpart.
"The attacker used the Log4j vulnerability on VMware Horizon products that were not applied with the security patch," AhnLab Security Emergency Response Center (ASEC) said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz7L98j73g8:ykRwIeYljQI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz7L98j73g8:ykRwIeYljQI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz7L98j73g8:ykRwIeYljQI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jz7L98j73g8:ykRwIeYljQI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz7L98j73g8:ykRwIeYljQI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jz7L98j73g8:ykRwIeYljQI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jz7L98j73g8:ykRwIeYljQI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jz7L98j73g8:ykRwIeYljQI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9063563832210150500
title: Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild
uri: Cisco-Issues-Patch-for-New-IOS-XR-Zero-Day-Vulnerability-Exploited-in
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9063563832210150500
content:
Cisco on Friday rolled out fixes for a medium-severity vulnerability affecting IOS XR Software that it said has been exploited in real-world attacks.
Tracked as CVE-2022-20821 (CVSS score: 6.5), the issue relates to an open port vulnerability that could be abused by an unauthenticated, remote attacker to connect to a Redis instance and achieve code execution.
"A successful exploit could allow <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwA8Yh8eO2E:WAPaOtXBdTk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwA8Yh8eO2E:WAPaOtXBdTk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwA8Yh8eO2E:WAPaOtXBdTk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WwA8Yh8eO2E:WAPaOtXBdTk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwA8Yh8eO2E:WAPaOtXBdTk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WwA8Yh8eO2E:WAPaOtXBdTk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwA8Yh8eO2E:WAPaOtXBdTk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WwA8Yh8eO2E:WAPaOtXBdTk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5832964491797539468
title: Researchers Find Backdoor in School Management Plugin for WordPress
uri: Researchers-Find-Backdoor-in-School-Management-Plugin-for-WordPress
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5832964491797539468
content:
Multiple versions of a WordPress plugin by the name of "School Management Pro" harbored a backdoor that could grant an adversary complete control over vulnerable websites.
The issue, spotted in premium versions before 9.9.7, has been assigned the CVE identifier CVE-2022-1609 and is rated 10 out of 10 for severity.
The backdoor, which is believed to have existed since version 8.9, enables "an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DnJllKUxyjM:hdohl3nWAZ0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DnJllKUxyjM:hdohl3nWAZ0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DnJllKUxyjM:hdohl3nWAZ0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DnJllKUxyjM:hdohl3nWAZ0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DnJllKUxyjM:hdohl3nWAZ0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DnJllKUxyjM:hdohl3nWAZ0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DnJllKUxyjM:hdohl3nWAZ0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DnJllKUxyjM:hdohl3nWAZ0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5914954404619135205
title: Chinese "Twisted Panda" Hackers Caught Spying on Russian Defense Institutes
uri: Chinese-Twisted-Panda-Hackers-Caught-Spying-on-Russian-Defense-Insti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5914954404619135205
content:
At least two research institutes located in Russia and a third likely target in Belarus have been at the receiving end of an espionage attack by a Chinese nation-state advanced persistent threat (APT).
The attacks, codenamed "Twisted Panda," come in the backdrop of Russia's military invasion of Ukraine, prompting a wide range of threat actors to swiftly adapt their campaigns on the ongoing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhtp0fsgz-Y:ZAUFWdpuZdw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhtp0fsgz-Y:ZAUFWdpuZdw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhtp0fsgz-Y:ZAUFWdpuZdw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rhtp0fsgz-Y:ZAUFWdpuZdw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhtp0fsgz-Y:ZAUFWdpuZdw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rhtp0fsgz-Y:ZAUFWdpuZdw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rhtp0fsgz-Y:ZAUFWdpuZdw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rhtp0fsgz-Y:ZAUFWdpuZdw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7874624489947474119
title: Fronton: Russian IoT Botnet Designed to Run Social Media Disinformation Campaigns
uri: Fronton-Russian-IoT-Botnet-Designed-to-Run-Social-Media-Disinformatio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7874624489947474119
content:
Fronton, a distributed denial-of-service (DDoS) botnet that came to light in March 2020, is much more powerful than previously thought, per the latest research.
"Fronton is a system developed for coordinated inauthentic behavior on a massive scale," threat intelligence firm Nisos said in a report published last week.
"This system includes a web-based dashboard known as SANA that enables a user <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L23X5Ng60nc:U4NFp-LxkQM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L23X5Ng60nc:U4NFp-LxkQM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L23X5Ng60nc:U4NFp-LxkQM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L23X5Ng60nc:U4NFp-LxkQM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L23X5Ng60nc:U4NFp-LxkQM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L23X5Ng60nc:U4NFp-LxkQM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L23X5Ng60nc:U4NFp-LxkQM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L23X5Ng60nc:U4NFp-LxkQM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2564159032472843312
title: New Unpatched Bug Could Let Attackers Steal Money from PayPal Users
uri: New-Unpatched-Bug-Could-Let-Attackers-Steal-Money-from-PayPal-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2564159032472843312
content:
A security researcher claims to have discovered an unpatched vulnerability in PayPal's money transfer service that could allow attackers to trick victims into unknowingly completing attacker-directed transactions with a single click.
Clickjacking, also called UI redressing, refers to a technique wherein an unwitting user is tricked into clicking seemingly innocuous webpage elements like buttons <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=swlfZt7CSvA:BvJIPkVb8kw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=swlfZt7CSvA:BvJIPkVb8kw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=swlfZt7CSvA:BvJIPkVb8kw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=swlfZt7CSvA:BvJIPkVb8kw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=swlfZt7CSvA:BvJIPkVb8kw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=swlfZt7CSvA:BvJIPkVb8kw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=swlfZt7CSvA:BvJIPkVb8kw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=swlfZt7CSvA:BvJIPkVb8kw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2661158698270821613
title: Yes, Containers Are Terrific, But Watch the Security Risks
uri: Yes-Containers-Are-Terrific-But-Watch-the-Security-Risks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2661158698270821613
content:
Containers revolutionized the development process, acting as a cornerstone for DevOps initiatives, but containers bring complex security risks that are not always obvious. Organizations that don’t mitigate these risks are vulnerable to attack. 
In this article, we outline how containers contributed to agile development, which unique security risks containers bring into the picture – and what <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q66VycBQZYU:0cA3iMg_T94:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q66VycBQZYU:0cA3iMg_T94:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q66VycBQZYU:0cA3iMg_T94:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q66VycBQZYU:0cA3iMg_T94:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q66VycBQZYU:0cA3iMg_T94:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q66VycBQZYU:0cA3iMg_T94:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q66VycBQZYU:0cA3iMg_T94:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q66VycBQZYU:0cA3iMg_T94:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1128369536404216006
title: SIM-based Authentication Aims to Transform Device Binding Security to End Phishing
uri: SIM-based-Authentication-Aims-to-Transform-Device-Binding-Security-to
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1128369536404216006
content:
Let's face it: we all use email, and we all use passwords. Passwords create inherent vulnerability in the system. The success rate of phishing attacks is skyrocketing, and opportunities for the attack have greatly multiplied as lives moved online. All it takes is one password to be compromised for all other users to become victims of a data breach. 
To deliver additional security, therefore, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mS2YhLTHa4s:7CfaJZ8c1UU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mS2YhLTHa4s:7CfaJZ8c1UU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mS2YhLTHa4s:7CfaJZ8c1UU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mS2YhLTHa4s:7CfaJZ8c1UU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mS2YhLTHa4s:7CfaJZ8c1UU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mS2YhLTHa4s:7CfaJZ8c1UU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mS2YhLTHa4s:7CfaJZ8c1UU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mS2YhLTHa4s:7CfaJZ8c1UU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5130334399592799547
title: New Chaos Ransomware Builder Variant "Yashma" Discovered in the Wild
uri: New-Chaos-Ransomware-Builder-Variant-Yashma-Discovered-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5130334399592799547
content:
Cybersecurity researchers have disclosed details of the latest version of the Chaos ransomware line, dubbed Yashma.
"Though Chaos ransomware builder has only been in the wild for a year, Yashma claims to be the sixth version (v6.0) of this malware," BlackBerry research and intelligence team said in a report shared with The Hacker News.
Chaos is a customizable ransomware builder that emerged in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2Yk0_Xuj1x4:DM_r8o-TdHQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2Yk0_Xuj1x4:DM_r8o-TdHQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2Yk0_Xuj1x4:DM_r8o-TdHQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2Yk0_Xuj1x4:DM_r8o-TdHQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2Yk0_Xuj1x4:DM_r8o-TdHQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2Yk0_Xuj1x4:DM_r8o-TdHQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2Yk0_Xuj1x4:DM_r8o-TdHQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2Yk0_Xuj1x4:DM_r8o-TdHQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5162079130259735362
title: Malware Analysis: Trickbot
uri: Malware-Analysis-Trickbot
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5162079130259735362
content:
In this day and age, we are not dealing with roughly pieced together, homebrew type of viruses anymore. Malware is an industry, and professional developers are found to exchange, be it by stealing one's code or deliberate collaboration. Attacks are multi-layer these days, with diverse sophisticated software apps taking over different jobs along the attack-chain from initial compromise to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b01LbQ8Q43s:28jX53p6o5M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b01LbQ8Q43s:28jX53p6o5M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b01LbQ8Q43s:28jX53p6o5M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b01LbQ8Q43s:28jX53p6o5M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b01LbQ8Q43s:28jX53p6o5M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b01LbQ8Q43s:28jX53p6o5M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=b01LbQ8Q43s:28jX53p6o5M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=b01LbQ8Q43s:28jX53p6o5M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-901887176281985887
title: Conti Ransomware Operation Shut Down After Splitting into Smaller Groups
uri: Conti-Ransomware-Operation-Shut-Down-After-Splitting-into-Smaller-Grou
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/901887176281985887
content:
Even as the operators of Conti threatened to overthrow the Costa Rican government, the notorious cybercrime gang officially took down their infrastructure in favor of migrating their criminal activities to other ancillary operations, including Karakurt and BlackByte.
"From the negotiations site, chatrooms, messengers to servers and proxy hosts - the Conti brand, not the organization itself, is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kJ4kvh4FT88:XzMBhh0HkHw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kJ4kvh4FT88:XzMBhh0HkHw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kJ4kvh4FT88:XzMBhh0HkHw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kJ4kvh4FT88:XzMBhh0HkHw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kJ4kvh4FT88:XzMBhh0HkHw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kJ4kvh4FT88:XzMBhh0HkHw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kJ4kvh4FT88:XzMBhh0HkHw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kJ4kvh4FT88:XzMBhh0HkHw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5567301486872757370
title: Microsoft Warns of Web Skimmers Mimicking Google Analytics and Meta Pixel Code
uri: Microsoft-Warns-of-Web-Skimmers-Mimicking-Google-Analytics-and-Meta-Pi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5567301486872757370
content:
Threat actors behind web skimming campaigns are leveraging malicious JavaScript code that mimics Google Analytics and Meta Pixel scripts in an attempt to sidestep detection.
"It's a shift from earlier tactics where attackers conspicuously injected malicious scripts into e-commerce platforms and content management systems (CMSs) via vulnerability exploitation, making this threat highly evasive to<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E76hwu7xRd0:OmTiPC8IS0c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E76hwu7xRd0:OmTiPC8IS0c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E76hwu7xRd0:OmTiPC8IS0c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E76hwu7xRd0:OmTiPC8IS0c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E76hwu7xRd0:OmTiPC8IS0c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E76hwu7xRd0:OmTiPC8IS0c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E76hwu7xRd0:OmTiPC8IS0c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E76hwu7xRd0:OmTiPC8IS0c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3595930521423670942
title: Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys
uri: Popular-PyPI-Package-ctx-and-PHP-Library-phpass-Hijacked-to-Steal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3595930521423670942
content:
Two trojanized Python and PHP packages have been uncovered in what's yet another instance of a software supply chain attack targeting the open source ecosystem.
One of the packages in question is "ctx," a Python module available in the PyPi repository. The other involves "phpass," a PHP package that's been forked on GitHub to distribute a rogue update.
"In both cases the attacker appears to have<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8NkHGYtnN0:ksuHTHFARQs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8NkHGYtnN0:ksuHTHFARQs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8NkHGYtnN0:ksuHTHFARQs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m8NkHGYtnN0:ksuHTHFARQs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8NkHGYtnN0:ksuHTHFARQs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m8NkHGYtnN0:ksuHTHFARQs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m8NkHGYtnN0:ksuHTHFARQs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m8NkHGYtnN0:ksuHTHFARQs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4462372489808643242
title: New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message
uri: New-Zoom-Flaws-Could-Let-Attackers-Hack-Victims-Just-by-Sending-them-a
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4462372489808643242
content:
Popular video conferencing service Zoom has resolved as many as four security vulnerabilities, which could be exploited to compromise another user over chat by sending specially crafted Extensible Messaging and Presence Protocol (XMPP) messages and execute malicious code.
Tracked from CVE-2022-22784 through CVE-2022-22787, the issues range between 5.9 and 8.1 in severity. Ivan Fratric of Google <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17A8DsjugjQ:55TWGEFj-j4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17A8DsjugjQ:55TWGEFj-j4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17A8DsjugjQ:55TWGEFj-j4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17A8DsjugjQ:55TWGEFj-j4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17A8DsjugjQ:55TWGEFj-j4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17A8DsjugjQ:55TWGEFj-j4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17A8DsjugjQ:55TWGEFj-j4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17A8DsjugjQ:55TWGEFj-j4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3450834172356717184
title: How Secrets Lurking in Source Code Lead to Major Breaches
uri: How-Secrets-Lurking-in-Source-Code-Lead-to-Major-Breaches
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3450834172356717184
content:
If one word could sum up the 2021 infosecurity year (well, actually three), it would be these: "supply chain attack". 
A software supply chain attack happens when hackers manipulate the code in third-party software components to compromise the 'downstream' applications that use them. In 2021, we have seen a dramatic rise in such attacks: high profile security incidents like the SolarWinds, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9dydeWmk5YI:B5UiYogxT40:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9dydeWmk5YI:B5UiYogxT40:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9dydeWmk5YI:B5UiYogxT40:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9dydeWmk5YI:B5UiYogxT40:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9dydeWmk5YI:B5UiYogxT40:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9dydeWmk5YI:B5UiYogxT40:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9dydeWmk5YI:B5UiYogxT40:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9dydeWmk5YI:B5UiYogxT40:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7496420564619277317
title: Learn How Hackers Can Hijack Your Online Accounts Even Before You Create Them
uri: Learn-How-Hackers-Can-Hijack-Your-Online-Accounts-Even-Before-You-Crea
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7496420564619277317
content:
Malicious actors can gain unauthorized access to users' online accounts via a new technique called "account pre-hijacking," new research has found.
The attack takes aim at the account creation process that's ubiquitous in websites and other online platforms, enabling an adversary to perform a set of actions before an unsuspecting victim creates an account in a target service.
The study was led <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=14TO0OUFhd8:MeUyGSHWS4g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=14TO0OUFhd8:MeUyGSHWS4g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=14TO0OUFhd8:MeUyGSHWS4g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=14TO0OUFhd8:MeUyGSHWS4g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=14TO0OUFhd8:MeUyGSHWS4g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=14TO0OUFhd8:MeUyGSHWS4g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=14TO0OUFhd8:MeUyGSHWS4g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=14TO0OUFhd8:MeUyGSHWS4g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5651997499981668616
title: Researchers Find New Malware Attacks Targeting Russian Government Entities
uri: Researchers-Find-New-Malware-Attacks-Targeting-Russian-Government-Enti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5651997499981668616
content:
An unknown advanced persistent threat (APT) group has been linked to a series of spear-phishing attacks targeting Russian government entities since the onset of the Russo-Ukrainian war in late February 2022.
"The campaigns [...] are designed to implant a Remote Access Trojan (RAT) that can be used to surveil the computers it infects, and run commands on them remotely," Malwarebytes said in a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jTW2qAosOsc:qRpB1EM9NsU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jTW2qAosOsc:qRpB1EM9NsU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jTW2qAosOsc:qRpB1EM9NsU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jTW2qAosOsc:qRpB1EM9NsU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jTW2qAosOsc:qRpB1EM9NsU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jTW2qAosOsc:qRpB1EM9NsU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jTW2qAosOsc:qRpB1EM9NsU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jTW2qAosOsc:qRpB1EM9NsU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2436627049815106065
title: [Template] Incident Response for Management Presentation
uri: Template-Incident-Response-for-Management-Presentation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2436627049815106065
content:
Security incidents occur. It's not a matter of "if," but of "when." That's why you implemented security products and procedures to optimize the incident response (IR) process.
However, many security pros who are doing an excellent job in handling incidents find effectively communicating the ongoing process with their management a much more challenging task.
Feels familiar?
In many organizations,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UjpHvBCWlPU:UU_M7CiQH64:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UjpHvBCWlPU:UU_M7CiQH64:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UjpHvBCWlPU:UU_M7CiQH64:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UjpHvBCWlPU:UU_M7CiQH64:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UjpHvBCWlPU:UU_M7CiQH64:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UjpHvBCWlPU:UU_M7CiQH64:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UjpHvBCWlPU:UU_M7CiQH64:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UjpHvBCWlPU:UU_M7CiQH64:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5569264455781123439
title: Interpol Arrest Leader of SilverTerrier Cybercrime Gang Behind BEC Attacks
uri: Interpol-Arrest-Leader-of-SilverTerrier-Cybercrime-Gang-Behind-BEC-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5569264455781123439
content:
A year-long international investigation has resulted in the arrest of the suspected head of the SilverTerrier cybercrime group by the Nigeria Police Force.
"The suspect is alleged to have run a transnational cybercrime syndicate that launched mass phishing campaigns and business email compromise schemes targeting companies and individual victims," Interpol said in a statement.
&lt;!--adsense--&gt;
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svaMye9VsLA:mABFPQGvNsM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svaMye9VsLA:mABFPQGvNsM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svaMye9VsLA:mABFPQGvNsM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svaMye9VsLA:mABFPQGvNsM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svaMye9VsLA:mABFPQGvNsM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svaMye9VsLA:mABFPQGvNsM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=svaMye9VsLA:mABFPQGvNsM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=svaMye9VsLA:mABFPQGvNsM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5036452411657812136
title: Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room
uri: Lumos-System-Can-Find-Hidden-Cameras-and-IoT-Devices-in-Your-Airbnb-or
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5036452411657812136
content:
A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces.
With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to pinpoint such rogue devices without much of a hassle.
The system, dubbed Lumos, is designed with this <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1oBfLyqcpVA:VquztGtUSX8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1oBfLyqcpVA:VquztGtUSX8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1oBfLyqcpVA:VquztGtUSX8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1oBfLyqcpVA:VquztGtUSX8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1oBfLyqcpVA:VquztGtUSX8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1oBfLyqcpVA:VquztGtUSX8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1oBfLyqcpVA:VquztGtUSX8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1oBfLyqcpVA:VquztGtUSX8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4908352359638166587
title: Twitter Fined $150 Million for Misusing Users' Data for Advertising Without Consent
uri: Twitter-Fined-150-Million-for-Misusing-Users-Data-for-Advertising-Wi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4908352359638166587
content:
Twitter, which is in the process of being acquired by Tesla CEO Elon Musk, has agreed to pay $150 million to the U.S. Federal Trade Commission (FTC) to settle allegations that it abused non-public information collected for security purposes to serve targeted ads.
In addition to the monetary penalty for "misrepresenting its privacy and security practices," the company has been banned from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60i5KSVrmLI:RX5vAcVfSfo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60i5KSVrmLI:RX5vAcVfSfo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60i5KSVrmLI:RX5vAcVfSfo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=60i5KSVrmLI:RX5vAcVfSfo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60i5KSVrmLI:RX5vAcVfSfo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=60i5KSVrmLI:RX5vAcVfSfo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=60i5KSVrmLI:RX5vAcVfSfo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=60i5KSVrmLI:RX5vAcVfSfo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7029328261466221911
title: Critical 'Pantsdown' BMC Vulnerability Affects QCT Servers Used in Data Centers
uri: Critical-Pantsdown-BMC-Vulnerability-Affects-QCT-Servers-Used-in-Dat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7029328261466221911
content:
Quanta Cloud Technology (QCT) servers have been identified as vulnerable to the severe "Pantsdown" Baseboard Management Controller (BMC) flaw, according to new research published today.
"An attacker running code on a vulnerable QCT server would be able to 'hop' from the server host to the BMC and move their attacks to the server management network, possibly continue and obtain further <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3qPnqydHCZk:c_GWm_e-05Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3qPnqydHCZk:c_GWm_e-05Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3qPnqydHCZk:c_GWm_e-05Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3qPnqydHCZk:c_GWm_e-05Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3qPnqydHCZk:c_GWm_e-05Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3qPnqydHCZk:c_GWm_e-05Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3qPnqydHCZk:c_GWm_e-05Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3qPnqydHCZk:c_GWm_e-05Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2456210738208216847
title: Experts Warn of Rise in ChromeLoader Malware Hijacking Users' Browsers
uri: Experts-Warn-of-Rise-in-ChromeLoader-Malware-Hijacking-Users-Browsers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2456210738208216847
content:
A malvertising threat is witnessing a new surge in activity since its emergence earlier this year.
Dubbed ChromeLoader, the malware is a "pervasive and persistent browser hijacker that modifies its victims' browser settings and redirects user traffic to advertisement websites," Aedan Russell of Red Canary said in a new report.
ChromeLoader is a rogue Chrome browser extension and is typically <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gapHReJD894:_tCEA-75a4w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gapHReJD894:_tCEA-75a4w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gapHReJD894:_tCEA-75a4w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gapHReJD894:_tCEA-75a4w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gapHReJD894:_tCEA-75a4w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gapHReJD894:_tCEA-75a4w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gapHReJD894:_tCEA-75a4w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gapHReJD894:_tCEA-75a4w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6729307646683891418
title: Hackers Increasingly Using Browser Automation Frameworks for Malicious Activities
uri: Hackers-Increasingly-Using-Browser-Automation-Frameworks-for-Malicious
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6729307646683891418
content:
Cybersecurity researchers are calling attention to a free-to-use browser automation framework that's being increasingly used by threat actors as part of their attack campaigns.
"The framework contains numerous features which we assess may be utilized in the enablement of malicious activities," researchers from Team Cymru said in a new report published Wednesday.
"The technical entry bar for the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y8oYJw5cA8U:5FEqj90_8Ko:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y8oYJw5cA8U:5FEqj90_8Ko:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y8oYJw5cA8U:5FEqj90_8Ko:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y8oYJw5cA8U:5FEqj90_8Ko:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y8oYJw5cA8U:5FEqj90_8Ko:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y8oYJw5cA8U:5FEqj90_8Ko:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y8oYJw5cA8U:5FEqj90_8Ko:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y8oYJw5cA8U:5FEqj90_8Ko:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7870508040978777884
title: The Added Dangers Privileged Accounts Pose to Your Active Directory
uri: The-Added-Dangers-Privileged-Accounts-Pose-to-Your-Active-Directory
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7870508040978777884
content:
In any organization, there are certain accounts that are designated as being privileged. These privileged accounts differ from standard user accounts in that they have permission to perform actions that go beyond what standard users can do. The actions vary based on the nature of the account but can include anything from setting up new user accounts to shutting down mission-critical systems.
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BtG1qY5efKE:pFCrOBOjt-s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BtG1qY5efKE:pFCrOBOjt-s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BtG1qY5efKE:pFCrOBOjt-s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BtG1qY5efKE:pFCrOBOjt-s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BtG1qY5efKE:pFCrOBOjt-s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BtG1qY5efKE:pFCrOBOjt-s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BtG1qY5efKE:pFCrOBOjt-s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BtG1qY5efKE:pFCrOBOjt-s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8520403216076762834
title: Tails OS Users Advised Not to Use Tor Browser Until Critical Firefox Bugs are Patched
uri: Tails-OS-Users-Advised-Not-to-Use-Tor-Browser-Until-Critical-Firefox-B
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8520403216076762834
content:
The maintainers of the Tails project have issued a warning that the Tor Browser that's bundled with the operating system is unsafe to use for accessing or entering sensitive information.
"We recommend that you stop using Tails until the release of 5.1 (May 31) if you use Tor Browser for sensitive information (passwords, private messages, personal information, etc.)," the project said in an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g6bKODpHj60:9kzZnHMEexU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g6bKODpHj60:9kzZnHMEexU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g6bKODpHj60:9kzZnHMEexU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g6bKODpHj60:9kzZnHMEexU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g6bKODpHj60:9kzZnHMEexU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g6bKODpHj60:9kzZnHMEexU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=g6bKODpHj60:9kzZnHMEexU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=g6bKODpHj60:9kzZnHMEexU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8973062885593879681
title: Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller and Firewall Devices
uri: Zyxel-Issues-Patches-for-4-New-Flaws-Affecting-AP-API-Controller-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8973062885593879681
content:
Zyxel has released patches to address four security flaws affecting its firewall, AP Controller, and AP products to execute arbitrary operating system commands and steal select information.
The list of security vulnerabilities is as follows -

CVE-2022-0734 - A cross-site scripting (XSS) vulnerability in some firewall versions that could be exploited to access information stored in the user's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3K3HTm7BlFQ:IcU44wwkng0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3K3HTm7BlFQ:IcU44wwkng0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3K3HTm7BlFQ:IcU44wwkng0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3K3HTm7BlFQ:IcU44wwkng0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3K3HTm7BlFQ:IcU44wwkng0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3K3HTm7BlFQ:IcU44wwkng0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3K3HTm7BlFQ:IcU44wwkng0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3K3HTm7BlFQ:IcU44wwkng0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7655081965118777916
title: The Myths of Ransomware Attacks and How To Mitigate Risk
uri: The-Myths-of-Ransomware-Attacks-and-How-To-Mitigate-Risk
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7655081965118777916
content:
Today's modern companies are built on data, which now resides across countless cloud apps. Therefore preventing data loss is essential to your success. This is especially critical for mitigating against rising ransomware attacks — a threat that 57% of security leaders expect to be compromised by within the next year. 
As organizations continue to evolve, in turn so does ransomware. To help you <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j8e7wb_gEoI:ZaNcB74sR3A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j8e7wb_gEoI:ZaNcB74sR3A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j8e7wb_gEoI:ZaNcB74sR3A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j8e7wb_gEoI:ZaNcB74sR3A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j8e7wb_gEoI:ZaNcB74sR3A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j8e7wb_gEoI:ZaNcB74sR3A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=j8e7wb_gEoI:ZaNcB74sR3A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=j8e7wb_gEoI:ZaNcB74sR3A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1840136589294176733
title: Attackers Can Use Electromagnetic Signals to Control Touchscreens Remotely
uri: Attackers-Can-Use-Electromagnetic-Signals-to-Control-Touchscreens-Remo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1840136589294176733
content:
Researchers have demonstrated what they call the "first active contactless attack against capacitive touchscreens."
GhostTouch, as it's called, "uses electromagnetic interference (EMI) to inject fake touch points into a touchscreen without the need to physically touch it," a group of academics from Zhejiang University and Technical University of Darmstadt said in a new research paper.
The core <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-8kUH7BUT4:5fnMVSVNq_Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-8kUH7BUT4:5fnMVSVNq_Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-8kUH7BUT4:5fnMVSVNq_Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-8kUH7BUT4:5fnMVSVNq_Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-8kUH7BUT4:5fnMVSVNq_Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-8kUH7BUT4:5fnMVSVNq_Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-8kUH7BUT4:5fnMVSVNq_Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-8kUH7BUT4:5fnMVSVNq_Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6700959885235187696
title: Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel
uri: Experts-Detail-New-RCE-Vulnerability-Affecting-Google-Chrome-Dev-Chann
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6700959885235187696
content:
Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers.
The issue relates to a case of use-after-free in the instruction optimization component, successful exploitation of which could "allow an attacker to execute arbitrary code in the context of the browser."
The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1KfhQGa2_MQ:9X3Ehu_zXMs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1KfhQGa2_MQ:9X3Ehu_zXMs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1KfhQGa2_MQ:9X3Ehu_zXMs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1KfhQGa2_MQ:9X3Ehu_zXMs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1KfhQGa2_MQ:9X3Ehu_zXMs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1KfhQGa2_MQ:9X3Ehu_zXMs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1KfhQGa2_MQ:9X3Ehu_zXMs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1KfhQGa2_MQ:9X3Ehu_zXMs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8797319396138582085
title: Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth Breach
uri: Nearly-100-000-NPM-Users-Credentials-Stolen-in-GitHub-OAuth-Breach
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8797319396138582085
content:
Cloud-based repository hosting service GitHub on Friday shared additional details into the theft of GitHub integration OAuth tokens last month, noting that the attacker was able to access internal NPM data and its customer information.
"Using stolen OAuth user tokens originating from two third-party integrators, Heroku and Travis CI, the attacker was able to escalate access to NPM infrastructure<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p6h8aulsmWU:q8YkZh3mxeg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p6h8aulsmWU:q8YkZh3mxeg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p6h8aulsmWU:q8YkZh3mxeg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p6h8aulsmWU:q8YkZh3mxeg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p6h8aulsmWU:q8YkZh3mxeg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p6h8aulsmWU:q8YkZh3mxeg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=p6h8aulsmWU:q8YkZh3mxeg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=p6h8aulsmWU:q8YkZh3mxeg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7374798878151786091
title: Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices
uri: Microsoft-Finds-Critical-Bugs-in-Pre-Installed-Apps-on-Millions-of-And
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7374798878151786091
content:
Four high severity vulnerabilities have been disclosed in a framework used by pre-installed Android System apps with millions of downloads.
The issues, now fixed by its Israeli developer MCE Systems, could have potentially allowed threat actors to stage remote and local attacks or be abused as vectors to obtain sensitive information by taking advantage of their extensive system privileges.
"As <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zogFAMqyvPo:URGS83u1nJs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zogFAMqyvPo:URGS83u1nJs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zogFAMqyvPo:URGS83u1nJs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zogFAMqyvPo:URGS83u1nJs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zogFAMqyvPo:URGS83u1nJs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zogFAMqyvPo:URGS83u1nJs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zogFAMqyvPo:URGS83u1nJs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zogFAMqyvPo:URGS83u1nJs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7876232225648085728
title: New York Man Sentenced to 4 Years in Transnational Cybercrime Scheme
uri: New-York-Man-Sentenced-to-4-Years-in-Transnational-Cybercrime-Scheme
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7876232225648085728
content:
A 37-year-old man from New York has been sentenced to four years in prison for buying stolen credit card information and working in cahoots with a cybercrime cartel known as the Infraud Organization.
John Telusma, who went by the alias "Peterelliot," pleaded guilty to one count of racketeering conspiracy on October 13, 2021. He joined the gang in August 2011 and remained a member for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oWo-Trm3Lrk:qAhyJ30kZy8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oWo-Trm3Lrk:qAhyJ30kZy8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oWo-Trm3Lrk:qAhyJ30kZy8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oWo-Trm3Lrk:qAhyJ30kZy8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oWo-Trm3Lrk:qAhyJ30kZy8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oWo-Trm3Lrk:qAhyJ30kZy8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oWo-Trm3Lrk:qAhyJ30kZy8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oWo-Trm3Lrk:qAhyJ30kZy8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1601577763644033791
title: FBI Warns About Hackers Selling VPN Credentials for U.S. College Networks
uri: FBI-Warns-About-Hackers-Selling-VPN-Credentials-for-U-S-College-Netwo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1601577763644033791
content:
Network credentials and virtual private network (VPN) access for colleges and universities based in the U.S. are being advertised for sale on underground and public criminal marketplaces.
"This exposure of sensitive credential and network access information, especially privileged user accounts, could lead to subsequent cyber attacks against individual users or affiliated organizations," the U.S.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0mtG8QeC5f8:_1Xs5Wz-YnQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0mtG8QeC5f8:_1Xs5Wz-YnQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0mtG8QeC5f8:_1Xs5Wz-YnQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0mtG8QeC5f8:_1Xs5Wz-YnQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0mtG8QeC5f8:_1Xs5Wz-YnQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0mtG8QeC5f8:_1Xs5Wz-YnQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0mtG8QeC5f8:_1Xs5Wz-YnQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0mtG8QeC5f8:_1Xs5Wz-YnQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4747585126102627116
title: New 'GoodWill' Ransomware Forces Victims to Donate Money and Clothes to the Poor
uri: New-GoodWill-Ransomware-Forces-Victims-to-Donate-Money-and-Clothes-t
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4747585126102627116
content:
Cybersecurity researchers have disclosed a new ransomware strain called GoodWill that compels victims into donating for social causes and provide financial assistance to people in need.
"The ransomware group propagates very unusual demands in exchange for the decryption key," researchers from CloudSEK said in a report published last week. "The Robin Hood-like group claims to be interested in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPkri_ESoi8:IgVJ6rkRJKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPkri_ESoi8:IgVJ6rkRJKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPkri_ESoi8:IgVJ6rkRJKo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oPkri_ESoi8:IgVJ6rkRJKo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPkri_ESoi8:IgVJ6rkRJKo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oPkri_ESoi8:IgVJ6rkRJKo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oPkri_ESoi8:IgVJ6rkRJKo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oPkri_ESoi8:IgVJ6rkRJKo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9002909786508453065
title: EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities
uri: EnemyBot-Linux-Botnet-Now-Exploits-Web-Server-Android-and-CMS-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9002909786508453065
content:
A nascent Linux-based botnet named Enemybot has expanded its capabilities to include recently disclosed security vulnerabilities in its arsenal to target web servers, Android devices, and content management systems (CMS).
"The malware is rapidly adopting one-day vulnerabilities as part of its exploitation capabilities," AT&amp;T Alien Labs said in a technical write-up published last week. "Services <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nskEnBx1Nio:WLu9Io3Hs2Y:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nskEnBx1Nio:WLu9Io3Hs2Y:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nskEnBx1Nio:WLu9Io3Hs2Y:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nskEnBx1Nio:WLu9Io3Hs2Y:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nskEnBx1Nio:WLu9Io3Hs2Y:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nskEnBx1Nio:WLu9Io3Hs2Y:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nskEnBx1Nio:WLu9Io3Hs2Y:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nskEnBx1Nio:WLu9Io3Hs2Y:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-172155250568409621
title: Watch Out! Researchers Spot New Microsoft Office Zero-Day Exploit in the Wild
uri: Watch-Out-Researchers-Spot-New-Microsoft-Office-Zero-Day-Exploit-in-t
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/172155250568409621
content:
Cybersecurity researchers are calling attention to a zero-day flaw in Microsoft Office that could be abused to achieve arbitrary code execution on affected Windows systems.
The vulnerability came to light after an independent cybersecurity research team known as nao_sec uncovered a Word document ("05-2022-0438.doc") that was uploaded to VirusTotal from an IP address in Belarus.
"It uses Word's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLD6jQIMMog:VnqjYx1Cbu0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLD6jQIMMog:VnqjYx1Cbu0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLD6jQIMMog:VnqjYx1Cbu0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sLD6jQIMMog:VnqjYx1Cbu0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLD6jQIMMog:VnqjYx1Cbu0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sLD6jQIMMog:VnqjYx1Cbu0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sLD6jQIMMog:VnqjYx1Cbu0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sLD6jQIMMog:VnqjYx1Cbu0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7334371751162361072
title: Is 3rd Party App Access the New Executable File?
uri: Is-3rd-Party-App-Access-the-New-Executable-File
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7334371751162361072
content:
It's no secret that 3rd party apps can boost productivity, enable remote and hybrid work and are overall, essential in building and scaling a company's work processes. 
An innocuous process much like clicking on an attachment was in the earlier days of email, people don't think twice when connecting an app they need with their Google workspace or M365 environment, etc. Simple actions that users <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XcdYrrgn-x4:iHKG5ti_u0s:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XcdYrrgn-x4:iHKG5ti_u0s:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XcdYrrgn-x4:iHKG5ti_u0s:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XcdYrrgn-x4:iHKG5ti_u0s:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XcdYrrgn-x4:iHKG5ti_u0s:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XcdYrrgn-x4:iHKG5ti_u0s:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XcdYrrgn-x4:iHKG5ti_u0s:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XcdYrrgn-x4:iHKG5ti_u0s:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3071809238111393219
title: Microsoft Releases Workarounds for Office Vulnerability Under Active Exploitation
uri: Microsoft-Releases-Workarounds-for-Office-Vulnerability-Under-Active-E
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3071809238111393219
content:
Microsoft on Monday published guidance for a newly discovered zero-day security flaw in its Office productivity suite that could be exploited to achieve code execution on affected systems.
The weakness, now assigned the identifier CVE-2022-30190, is rated 7.8 out of 10 for severity on the CVSS vulnerability scoring system. Microsoft Office versions Office 2013, Office 2016, Office 2019, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NmquZiyito:73QwyF-UIUk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NmquZiyito:73QwyF-UIUk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NmquZiyito:73QwyF-UIUk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2NmquZiyito:73QwyF-UIUk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NmquZiyito:73QwyF-UIUk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2NmquZiyito:73QwyF-UIUk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2NmquZiyito:73QwyF-UIUk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2NmquZiyito:73QwyF-UIUk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8349710164276315126
title: Learn Raspberry Pi and Arduino with 9 Online Developer Training Courses
uri: Learn-Raspberry-Pi-and-Arduino-with-9-Online-Developer-Training-Course
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8349710164276315126
content:
This is an exciting time for the Internet of Things. According to Deloitte research, the average U.S. household now has 25 connected devices — and new products are being launched every day. This rush of demand means that many tech companies are looking for developers with IoT knowledge. And even if you don’t want to specialize in this field, the programming skills are transferable.
Featuring <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNjWsSW-Dao:Y0Jd7Fxepaw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNjWsSW-Dao:Y0Jd7Fxepaw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNjWsSW-Dao:Y0Jd7Fxepaw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GNjWsSW-Dao:Y0Jd7Fxepaw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNjWsSW-Dao:Y0Jd7Fxepaw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GNjWsSW-Dao:Y0Jd7Fxepaw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GNjWsSW-Dao:Y0Jd7Fxepaw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GNjWsSW-Dao:Y0Jd7Fxepaw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3800678098356142253
title: Interpol Nabs 3 Nigerian Scammers Behind Malware-based Attacks
uri: Interpol-Nabs-3-Nigerian-Scammers-Behind-Malware-based-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3800678098356142253
content:
Interpol on Monday announced the arrest of three suspected global scammers in Nigeria for using remote access trojans (RATs) such as Agent Tesla to facilitate malware-enabled cyber fraud.
"The men are thought to have used the RAT to reroute financial transactions, stealing confidential online connection details from corporate organizations, including oil and gas companies in South East Asia, the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8RMXhm5l90:JP120ymrcT8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8RMXhm5l90:JP120ymrcT8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8RMXhm5l90:JP120ymrcT8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E8RMXhm5l90:JP120ymrcT8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8RMXhm5l90:JP120ymrcT8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E8RMXhm5l90:JP120ymrcT8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E8RMXhm5l90:JP120ymrcT8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E8RMXhm5l90:JP120ymrcT8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7757421847128758305
title: SideWinder Hackers Launched Over a 1,000 Cyber Attacks Over the Past 2 Years
uri: SideWinder-Hackers-Launched-Over-a-1-000-Cyber-Attacks-Over-the-Past-2
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7757421847128758305
content:
An "aggressive" advanced persistent threat (APT) group known as SideWinder has been linked to over 1,000 new attacks since April 2020.
"Some of the main characteristics of this threat actor that make it stand out among the others, are the sheer number, high frequency and persistence of their attacks and the large collection of encrypted and obfuscated malicious components used in their <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KKge7ZfUdVQ:sMSNdbwL5MY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KKge7ZfUdVQ:sMSNdbwL5MY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KKge7ZfUdVQ:sMSNdbwL5MY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KKge7ZfUdVQ:sMSNdbwL5MY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KKge7ZfUdVQ:sMSNdbwL5MY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KKge7ZfUdVQ:sMSNdbwL5MY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KKge7ZfUdVQ:sMSNdbwL5MY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KKge7ZfUdVQ:sMSNdbwL5MY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1891634806158177487
title: Latest Mobile Malware Report Suggests On-Device Fraud is on the Rise
uri: Latest-Mobile-Malware-Report-Suggests-On-Device-Fraud-is-on-the-Rise
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1891634806158177487
content:
An analysis of the mobile threat landscape in 2022 shows that Spain and Turkey are the most targeted countries for malware campaigns, even as a mix of new and existing banking trojans are increasingly targeting Android devices to conduct on-device fraud (ODF).
Other frequently targeted countries include Poland, Australia, the U.S., Germany, the U.K., Italy, France, and Portugal.
"The most <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WNsf8UJDLuQ:NXEKPCDTlZo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WNsf8UJDLuQ:NXEKPCDTlZo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WNsf8UJDLuQ:NXEKPCDTlZo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WNsf8UJDLuQ:NXEKPCDTlZo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WNsf8UJDLuQ:NXEKPCDTlZo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WNsf8UJDLuQ:NXEKPCDTlZo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WNsf8UJDLuQ:NXEKPCDTlZo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WNsf8UJDLuQ:NXEKPCDTlZo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2167165192569021370
title: Chinese Hackers Begin Exploiting Latest Microsoft Office Zero-Day Vulnerability
uri: Chinese-Hackers-Begin-Exploiting-Latest-Microsoft-Office-Zero-Day-Vuln
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2167165192569021370
content:
An advanced persistent threat (APT) actor aligned with Chinese state interests has been observed weaponizing the new zero-day flaw in Microsoft Office to achieve code execution on affected systems.
"TA413 CN APT spotted [in-the-wild] exploiting the Follina zero-day using URLs to deliver ZIP archives which contain Word Documents that use the technique," enterprise security firm Proofpoint said in<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNAjZZ8QEqE:27Mec-hbIGw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNAjZZ8QEqE:27Mec-hbIGw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNAjZZ8QEqE:27Mec-hbIGw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bNAjZZ8QEqE:27Mec-hbIGw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNAjZZ8QEqE:27Mec-hbIGw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bNAjZZ8QEqE:27Mec-hbIGw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bNAjZZ8QEqE:27Mec-hbIGw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bNAjZZ8QEqE:27Mec-hbIGw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4894302972116489188
title: New XLoader Botnet Version Using Probability Theory to Hide its C&C Servers
uri: New-XLoader-Botnet-Version-Using-Probability-Theory-to-Hide-its-C-C-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4894302972116489188
content:
An enhanced version of the XLoader malware has been spotted adopting a probability-based approach to camouflage its command-and-control (C&amp;C) infrastructure, according to the latest research.
"Now it is significantly harder to separate the wheat from the chaff and discover the real C&amp;C servers among thousands of legitimate domains used by Xloader as a smokescreen," Israeli cybersecurity company <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmESZR8IXno:3EzCTHfi9ro:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmESZR8IXno:3EzCTHfi9ro:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmESZR8IXno:3EzCTHfi9ro:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kmESZR8IXno:3EzCTHfi9ro:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmESZR8IXno:3EzCTHfi9ro:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kmESZR8IXno:3EzCTHfi9ro:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kmESZR8IXno:3EzCTHfi9ro:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kmESZR8IXno:3EzCTHfi9ro:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4273256956184133409
title: YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites
uri: YODA-Tool-Found-47-000-Malicious-WordPress-Plugins-Installed-in-Over
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4273256956184133409
content:
As many as 47,337 malicious plugins have been uncovered on 24,931 unique websites, out of which 3,685 plugins were sold on legitimate marketplaces, netting the attackers $41,500 in illegal revenues.
The findings come from a new tool called YODA that aims to detect rogue WordPress plugins and track down their origin, according to an 8-year-long study conducted by a group of researchers from the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4675db2Rip8:kWv4awIUoOM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4675db2Rip8:kWv4awIUoOM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4675db2Rip8:kWv4awIUoOM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4675db2Rip8:kWv4awIUoOM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4675db2Rip8:kWv4awIUoOM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4675db2Rip8:kWv4awIUoOM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4675db2Rip8:kWv4awIUoOM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4675db2Rip8:kWv4awIUoOM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4327319199105329439
title: New Unpatched Horde Webmail Bug Lets Hackers Take Over Server by Sending Email
uri: New-Unpatched-Horde-Webmail-Bug-Lets-Hackers-Take-Over-Server-by-Sendi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4327319199105329439
content:
A new unpatched security vulnerability has been disclosed in the open-source Horde Webmail client that could be exploited to achieve remote code execution on the email server simply by sending a specially crafted email to a victim.
"Once the email is viewed, the attacker can silently take over the complete mail server without any further user interaction," SonarSource said in a report shared <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uoTl5Po9_vQ:BBaGgS9HJwI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uoTl5Po9_vQ:BBaGgS9HJwI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uoTl5Po9_vQ:BBaGgS9HJwI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uoTl5Po9_vQ:BBaGgS9HJwI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uoTl5Po9_vQ:BBaGgS9HJwI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uoTl5Po9_vQ:BBaGgS9HJwI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=uoTl5Po9_vQ:BBaGgS9HJwI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=uoTl5Po9_vQ:BBaGgS9HJwI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5130004417415304848
title: FluBot Android Spyware Taken Down in Global Law Enforcement Operation
uri: FluBot-Android-Spyware-Taken-Down-in-Global-Law-Enforcement-Operation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5130004417415304848
content:
An international law enforcement operation involving 11 countries has culminated in the takedown of a notorious mobile malware threat called FluBot.
"This Android malware has been spreading aggressively through SMS, stealing passwords, online banking details and other sensitive information from infected smartphones across the world," Europol said in a statement.
&lt;!--adsense--&gt;
The "complex <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4lsDO0dqhQ:4nzgJFO-BpU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4lsDO0dqhQ:4nzgJFO-BpU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4lsDO0dqhQ:4nzgJFO-BpU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-4lsDO0dqhQ:4nzgJFO-BpU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4lsDO0dqhQ:4nzgJFO-BpU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-4lsDO0dqhQ:4nzgJFO-BpU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-4lsDO0dqhQ:4nzgJFO-BpU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-4lsDO0dqhQ:4nzgJFO-BpU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5959981585811511030
title: DOJ Seizes 3 Web Domains Used to Sell Stolen Data and DDoS Services
uri: DOJ-Seizes-3-Web-Domains-Used-to-Sell-Stolen-Data-and-DDoS-Services
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5959981585811511030
content:
The U.S. Department of Justice (DoJ) on Wednesday announced the seizure of three domains used by cybercriminals to trade stolen personal information and facilitate distributed denial-of-service (DDoS) attacks for hire.
This includes weleakinfo[.]to, ipstress[.]in, and ovh-booter[.]com, the former of which allowed its users to traffic hacked personal data and offered a searchable database <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qkVvTT9r_tc:y7FGLj8QgqA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qkVvTT9r_tc:y7FGLj8QgqA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qkVvTT9r_tc:y7FGLj8QgqA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qkVvTT9r_tc:y7FGLj8QgqA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qkVvTT9r_tc:y7FGLj8QgqA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qkVvTT9r_tc:y7FGLj8QgqA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qkVvTT9r_tc:y7FGLj8QgqA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qkVvTT9r_tc:y7FGLj8QgqA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-999209727318966735
title: Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones
uri: Critical-UNISOC-Chip-Vulnerability-Affects-Millions-of-Android-Smartph
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/999209727318966735
content:
A critical security flaw has been uncovered in UNISOC's smartphone chipset that could be potentially weaponized to disrupt a smartphone's radio communications through a malformed packet.
"Left unpatched, a hacker or a military unit can leverage such a vulnerability to neutralize communications in a specific location," Israeli cybersecurity company Check Point said in a report shared with The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RVlQkERw2c0:_5ru0NLp-cw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RVlQkERw2c0:_5ru0NLp-cw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RVlQkERw2c0:_5ru0NLp-cw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RVlQkERw2c0:_5ru0NLp-cw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RVlQkERw2c0:_5ru0NLp-cw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RVlQkERw2c0:_5ru0NLp-cw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RVlQkERw2c0:_5ru0NLp-cw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RVlQkERw2c0:_5ru0NLp-cw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8635463952929451900
title: SideWinder Hackers Use Fake Android VPN Apps to Target Pakistani Entities
uri: SideWinder-Hackers-Use-Fake-Android-VPN-Apps-to-Target-Pakistani-Entit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8635463952929451900
content:
The threat actor known as SideWinder has added a new custom tool to its arsenal of malware that's being used in phishing attacks against Pakistani public and private sector entities.
"Phishing links in emails or posts that mimic legitimate notifications and services of government agencies and organizations in Pakistan are primary attack vectors of the gang," Singapore-headquartered cybersecurity<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YoHyCBZ_4DY:0AtiqE_lDpw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YoHyCBZ_4DY:0AtiqE_lDpw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YoHyCBZ_4DY:0AtiqE_lDpw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YoHyCBZ_4DY:0AtiqE_lDpw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YoHyCBZ_4DY:0AtiqE_lDpw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YoHyCBZ_4DY:0AtiqE_lDpw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YoHyCBZ_4DY:0AtiqE_lDpw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YoHyCBZ_4DY:0AtiqE_lDpw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6599815053933796911
title: Researchers Demonstrate Ransomware for IoT Devices That Targets IT and OT Networks
uri: Researchers-Demonstrate-Ransomware-for-IoT-Devices-That-Targets-IT-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6599815053933796911
content:
As ransomware infections have evolved from purely encrypting data to schemes such as double and triple extortion, a new attack vector is likely to set the stage for future campaigns.
Called Ransomware for IoT or R4IoT by Forescout, it's a "novel, proof-of-concept ransomware that exploits an IoT device to gain access and move laterally in an IT [information technology] network and impact the OT [<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zi72thpUpv0:pWOl42NkCJM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zi72thpUpv0:pWOl42NkCJM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zi72thpUpv0:pWOl42NkCJM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zi72thpUpv0:pWOl42NkCJM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zi72thpUpv0:pWOl42NkCJM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zi72thpUpv0:pWOl42NkCJM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Zi72thpUpv0:pWOl42NkCJM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Zi72thpUpv0:pWOl42NkCJM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3725319270309637026
title: ExpressVPN Removes Servers in India After Refusing to Comply with Government Order
uri: ExpressVPN-Removes-Servers-in-India-After-Refusing-to-Comply-with-Gove
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3725319270309637026
content:
Virtual Private Network (VPN) provider ExpressVPN on Thursday announced that it's removing Indian-based VPN servers in response to a new cybersecurity directive issued by the Indian Computer Emergency Response Team (CERT-In).
"Rest assured, our users will still be able to connect to VPN servers that will give them Indian IP addresses and allow them to access the internet as if they were located <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t8dPiXqivL4:daBawQSxG-E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t8dPiXqivL4:daBawQSxG-E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t8dPiXqivL4:daBawQSxG-E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t8dPiXqivL4:daBawQSxG-E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t8dPiXqivL4:daBawQSxG-E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t8dPiXqivL4:daBawQSxG-E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=t8dPiXqivL4:daBawQSxG-E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=t8dPiXqivL4:daBawQSxG-E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1654091164670773535
title: Conti Leaks Reveal Ransomware Gang's Interest in Firmware-based Attacks
uri: Conti-Leaks-Reveal-Ransomware-Gang-s-Interest-in-Firmware-based-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1654091164670773535
content:
An analysis of leaked chats from the notorious Conti ransomware group earlier this year has revealed that the syndicate has been working on a set of firmware attack techniques that could offer a path to accessing privileged code on compromised devices.
"Control over firmware gives attackers virtually unmatched powers both to directly cause damage and to enable other long-term strategic goals," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wXes_rZCyUU:UleW9-VP3kQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wXes_rZCyUU:UleW9-VP3kQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wXes_rZCyUU:UleW9-VP3kQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wXes_rZCyUU:UleW9-VP3kQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wXes_rZCyUU:UleW9-VP3kQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wXes_rZCyUU:UleW9-VP3kQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wXes_rZCyUU:UleW9-VP3kQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wXes_rZCyUU:UleW9-VP3kQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4743383154643371415
title: Threat Detection Software: A Deep Dive
uri: Threat-Detection-Software-A-Deep-Dive
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4743383154643371415
content:
As the threat landscape evolves and multiplies with more advanced attacks than ever, defending against these modern cyber threats is a monumental challenge for almost any organization. 
Threat detection is about an organization’s ability to accurately identify threats, be it to the network, an endpoint, another asset or an application – including cloud infrastructure and assets. At scale, threat<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=78IIUn1L4g0:C94OKFI4S2c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=78IIUn1L4g0:C94OKFI4S2c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=78IIUn1L4g0:C94OKFI4S2c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=78IIUn1L4g0:C94OKFI4S2c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=78IIUn1L4g0:C94OKFI4S2c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=78IIUn1L4g0:C94OKFI4S2c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=78IIUn1L4g0:C94OKFI4S2c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=78IIUn1L4g0:C94OKFI4S2c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8417325140699358762
title: Hackers Exploiting Unpatched Critical Atlassian Confluence Zero-Day Vulnerability
uri: Hackers-Exploiting-Unpatched-Critical-Atlassian-Confluence-Zero-Day-Vu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8417325140699358762
content:
Atlassian has warned of a critical unpatched remote code execution vulnerability impacting Confluence Server and Data Center products that it said is being actively exploited in the wild.
The Australian software company credited cybersecurity firm Volexity for identifying the flaw, which is being tracked as CVE-2022-26134.
"Atlassian has been made aware of current active exploitation of a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aThrgcm3MyI:1vzeple5AS4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aThrgcm3MyI:1vzeple5AS4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aThrgcm3MyI:1vzeple5AS4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aThrgcm3MyI:1vzeple5AS4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aThrgcm3MyI:1vzeple5AS4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aThrgcm3MyI:1vzeple5AS4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aThrgcm3MyI:1vzeple5AS4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aThrgcm3MyI:1vzeple5AS4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8024397286193073228
title: Researchers Uncover Malware Controlling Thousands of Sites in Parrot TDS Network
uri: Researchers-Uncover-Malware-Controlling-Thousands-of-Sites-in-Parrot-T
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8024397286193073228
content:
The Parrot traffic direction system (TDS) that came to light earlier this year has had a larger impact than previously thought, according to new research.
Sucuri, which has been tracking the same campaign since February 2019 under the name "NDSW/NDSX," said that "the malware was one of the top infections" detected in 2021, accounting for more than 61,000 websites.
Parrot TDS was documented in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sxf9nBCDgLg:cfeMncVJt8I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sxf9nBCDgLg:cfeMncVJt8I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sxf9nBCDgLg:cfeMncVJt8I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sxf9nBCDgLg:cfeMncVJt8I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sxf9nBCDgLg:cfeMncVJt8I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sxf9nBCDgLg:cfeMncVJt8I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sxf9nBCDgLg:cfeMncVJt8I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sxf9nBCDgLg:cfeMncVJt8I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7947035804922337770
title: Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies
uri: Microsoft-Blocks-Iran-linked-Lebanese-Hackers-Targeting-Israeli-Compan
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7947035804922337770
content:
Microsoft on Thursday said it took steps to disable malicious activity stemming from abuse of OneDrive by a previously undocumented threat actor it tracks under the chemical element-themed moniker Polonium.
In addition to removing the offending accounts created by the Lebanon-based activity group, the tech giant's Threat Intelligence Center (MSTIC) said it suspended over 20 malicious OneDrive <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oukXbVwNQZ8:XoE7JZ7f84k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oukXbVwNQZ8:XoE7JZ7f84k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oukXbVwNQZ8:XoE7JZ7f84k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oukXbVwNQZ8:XoE7JZ7f84k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oukXbVwNQZ8:XoE7JZ7f84k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oukXbVwNQZ8:XoE7JZ7f84k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oukXbVwNQZ8:XoE7JZ7f84k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oukXbVwNQZ8:XoE7JZ7f84k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2725363766435210839
title: GitLab Issues Security Patch for Critical Account Takeover Vulnerability
uri: GitLab-Issues-Security-Patch-for-Critical-Account-Takeover-Vulnerabili
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2725363766435210839
content:
GitLab has moved to address a critical security flaw in its service that, if successfully exploited, could result in an account takeover.
Tracked as CVE-2022-1680, the issue has a CVSS severity score of 9.9 and was discovered internally by the company. The security flaw affects all versions of GitLab Enterprise Edition (EE) starting from 11.10 before 14.9.5, all versions starting from 14.10 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbpbQBLnWq4:_uqRI5iyjQo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbpbQBLnWq4:_uqRI5iyjQo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbpbQBLnWq4:_uqRI5iyjQo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rbpbQBLnWq4:_uqRI5iyjQo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbpbQBLnWq4:_uqRI5iyjQo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rbpbQBLnWq4:_uqRI5iyjQo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rbpbQBLnWq4:_uqRI5iyjQo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rbpbQBLnWq4:_uqRI5iyjQo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-175766730366948883
title: Chinese LuoYu Hackers Using Man-on-the-Side Attacks to Deploy WinDealer Backdoor
uri: Chinese-LuoYu-Hackers-Using-Man-on-the-Side-Attacks-to-Deploy-WinDeale
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/175766730366948883
content:
An "extremely sophisticated" Chinese-speaking advanced persistent threat (APT) actor dubbed LuoYu has been observed using a malicious Windows tool called WinDealer that's delivered by means of man-on-the-side attacks.
"This groundbreaking development allows the actor to modify network traffic in-transit to insert malicious payloads," Russian cybersecurity company Kaspersky said in a new report. <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vDa--0H1pJc:OWJF-ARWHCY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vDa--0H1pJc:OWJF-ARWHCY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vDa--0H1pJc:OWJF-ARWHCY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vDa--0H1pJc:OWJF-ARWHCY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vDa--0H1pJc:OWJF-ARWHCY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vDa--0H1pJc:OWJF-ARWHCY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vDa--0H1pJc:OWJF-ARWHCY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vDa--0H1pJc:OWJF-ARWHCY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-31861637159305598
title: Atlassian Releases Patch for Confluence Zero-Day Flaw Exploited in the Wild
uri: Atlassian-Releases-Patch-for-Confluence-Zero-Day-Flaw-Exploited-in-the
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/31861637159305598
content:
Atlassian on Friday rolled out fixes to address a critical security flaw affecting its Confluence Server and Data Center products that have come under active exploitation by threat actors to achieve remote code execution.
Tracked as CVE-2022-26134, the issue is similar to CVE-2021-26084 — another security flaw the Australian software company patched in August 2021.
Both relate to a case of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w-e0TQ4KgcI:_pKe6_y8mWw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w-e0TQ4KgcI:_pKe6_y8mWw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w-e0TQ4KgcI:_pKe6_y8mWw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w-e0TQ4KgcI:_pKe6_y8mWw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w-e0TQ4KgcI:_pKe6_y8mWw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w-e0TQ4KgcI:_pKe6_y8mWw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w-e0TQ4KgcI:_pKe6_y8mWw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w-e0TQ4KgcI:_pKe6_y8mWw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4855780348227677702
title: State-Backed Hackers Exploit Microsoft 'Follina' Bug to Target Entities in Europe and U.S
uri: State-Backed-Hackers-Exploit-Microsoft-Follina-Bug-to-Target-Entitie
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4855780348227677702
content:
A suspected state-aligned threat actor has been attributed to a new set of attacks exploiting the Microsoft Office "Follina" vulnerability to target government entities in Europe and the U.S.
Enterprise security firm Proofpoint said it blocked attempts at exploiting the remote code execution flaw, which is being tracked CVE-2022-30190 (CVSS score: 7.8). No less than 1,000 phishing messages <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9Y4t2JS59c:5y71RvsUdi4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9Y4t2JS59c:5y71RvsUdi4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9Y4t2JS59c:5y71RvsUdi4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d9Y4t2JS59c:5y71RvsUdi4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9Y4t2JS59c:5y71RvsUdi4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d9Y4t2JS59c:5y71RvsUdi4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=d9Y4t2JS59c:5y71RvsUdi4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=d9Y4t2JS59c:5y71RvsUdi4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-416316739083618224
title: 10 Most Prolific Banking Trojans Targeting Hundreds of Financial Apps with Over a Billion Users
uri: 10-Most-Prolific-Banking-Trojans-Targeting-Hundreds-of-Financial-Apps
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/416316739083618224
content:
10 of the most prolific mobile banking trojans have set their eyes on 639 financial applications that are available on the Google Play Store and have been cumulatively downloaded over 1.01 billion times.
Some of the most targeted apps include Walmart-backed PhonePe, Binance, Cash App, Garanti BBVA Mobile, La Banque Postale, Ma Banque, Caf - Mon Compte, Postepay, and BBVA México. These apps alone<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjdR2nsWr_E:_-hUt7l2yGw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjdR2nsWr_E:_-hUt7l2yGw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjdR2nsWr_E:_-hUt7l2yGw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RjdR2nsWr_E:_-hUt7l2yGw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjdR2nsWr_E:_-hUt7l2yGw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RjdR2nsWr_E:_-hUt7l2yGw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RjdR2nsWr_E:_-hUt7l2yGw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RjdR2nsWr_E:_-hUt7l2yGw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1362762806109570287
title: Unpatched Critical Flaws Disclosed in U-Boot Bootloader for Embedded Devices
uri: Unpatched-Critical-Flaws-Disclosed-in-U-Boot-Bootloader-for-Embedded-D
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1362762806109570287
content:
Cybersecurity researchers have disclosed two unpatched security vulnerabilities in the open-source U-Boot boot loader.
The issues, which were uncovered in the IP defragmentation algorithm implemented in U-Boot by NCC Group, could be abused to achieve arbitrary out-of-bounds write and denial-of-service (DoS).
U-Boot is a boot loader used in Linux-based embedded systems such as ChromeOS as well as<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bc0qb1PZ2eU:YS6X_K5kBEQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bc0qb1PZ2eU:YS6X_K5kBEQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bc0qb1PZ2eU:YS6X_K5kBEQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bc0qb1PZ2eU:YS6X_K5kBEQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bc0qb1PZ2eU:YS6X_K5kBEQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bc0qb1PZ2eU:YS6X_K5kBEQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bc0qb1PZ2eU:YS6X_K5kBEQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bc0qb1PZ2eU:YS6X_K5kBEQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6320997818901021656
title: Microsoft Seizes 41 Domains Used in Spear-Phishing Attacks by Bohrium Hackers
uri: Microsoft-Seizes-41-Domains-Used-in-Spear-Phishing-Attacks-by-Bohrium
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6320997818901021656
content:
Microsoft's Digital Crimes Unit (DCU) last week disclosed that it had taken legal proceedings against an Iranian threat actor dubbed Bohrium in connection with a spear-phishing operation.
The adversarial collective is said to have targeted entities in tech, transportation, government, and education sectors located in the U.S., Middle East, and India.
&lt;!--adsense--&gt;
"Bohrium actors create fake <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZSWXYUpUiwM:9vdgehz_wqc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZSWXYUpUiwM:9vdgehz_wqc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZSWXYUpUiwM:9vdgehz_wqc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZSWXYUpUiwM:9vdgehz_wqc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZSWXYUpUiwM:9vdgehz_wqc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZSWXYUpUiwM:9vdgehz_wqc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZSWXYUpUiwM:9vdgehz_wqc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZSWXYUpUiwM:9vdgehz_wqc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4995904693339769110
title: Be Proactive! Shift Security Validation Left
uri: Be-Proactive-Shift-Security-Validation-Left
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4995904693339769110
content:
"Shifting (security)" left approach in Software Development Life Cycle (SDLC) means starting security earlier in the process. As organizations realized that software never comes out perfectly and are riddled with many exploitable holes, bugs, and business logic vulnerabilities that require going back to fix and patch, they understood that building secure software requires incorporating and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXeqlXONeEk:bkgCAFnjUiQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXeqlXONeEk:bkgCAFnjUiQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXeqlXONeEk:bkgCAFnjUiQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LXeqlXONeEk:bkgCAFnjUiQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXeqlXONeEk:bkgCAFnjUiQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LXeqlXONeEk:bkgCAFnjUiQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXeqlXONeEk:bkgCAFnjUiQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LXeqlXONeEk:bkgCAFnjUiQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5601464856080792755
title: CISA Warned About Critical Vulnerabilities in Illumina's DNA Sequencing Devices
uri: CISA-Warned-About-Critical-Vulnerabilities-in-Illumina-s-DNA-Sequencin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5601464856080792755
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and Food and Drug Administration (FDA) have issued an advisory about critical security vulnerabilities in Illumina's next-generation sequencing (NGS) software.
Three of the flaws are rated 10 out of 10 for severity on the Common Vulnerability Scoring System (CVSS), with two others having severity ratings of 9.1 and 7.4.
The issues <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QdEo30izVHY:watS0G5y3VY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QdEo30izVHY:watS0G5y3VY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QdEo30izVHY:watS0G5y3VY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QdEo30izVHY:watS0G5y3VY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QdEo30izVHY:watS0G5y3VY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QdEo30izVHY:watS0G5y3VY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QdEo30izVHY:watS0G5y3VY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QdEo30izVHY:watS0G5y3VY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3844905411613875510
title: Apple's New Feature Will Install Security Updates Automatically Without Full OS Update
uri: Apple-s-New-Feature-Will-Install-Security-Updates-Automatically-Withou
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3844905411613875510
content:
Apple has introduced a Rapid Security Response feature in iOS 16 and macOS Ventura that's designed to deploy security fixes without the need for a full operating system version update.
"macOS security gets even stronger with new tools that make the Mac more resistant to attack, including Rapid Security Response that works in between normal updates to easily keep security up to date without a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qo0LD8jewug:1vKjRjrpGZM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qo0LD8jewug:1vKjRjrpGZM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qo0LD8jewug:1vKjRjrpGZM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qo0LD8jewug:1vKjRjrpGZM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qo0LD8jewug:1vKjRjrpGZM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qo0LD8jewug:1vKjRjrpGZM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qo0LD8jewug:1vKjRjrpGZM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qo0LD8jewug:1vKjRjrpGZM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-885450385783066412
title: Researchers Warn of Spam Campaign Targeting Victims with SVCReady Malware
uri: Researchers-Warn-of-Spam-Campaign-Targeting-Victims-with-SVCReady-Malw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/885450385783066412
content:
A new wave of phishing campaigns has been observed spreading a previously documented malware called SVCReady.
"The malware is notable for the unusual way it is delivered to target PCs — using shellcode hidden in the properties of Microsoft Office documents," Patrick Schläpfer, a threat analyst at HP, said in a technical write-up.
SVCReady is said to be in its early stage of development, with the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urph17rcjTE:5OQVIDtNrwg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urph17rcjTE:5OQVIDtNrwg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urph17rcjTE:5OQVIDtNrwg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=urph17rcjTE:5OQVIDtNrwg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urph17rcjTE:5OQVIDtNrwg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=urph17rcjTE:5OQVIDtNrwg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=urph17rcjTE:5OQVIDtNrwg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=urph17rcjTE:5OQVIDtNrwg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2508502669177053762
title: Evil Corp Cybercrime Group Shifts to LockBit Ransomware to Evade Sanctions
uri: Evil-Corp-Cybercrime-Group-Shifts-to-LockBit-Ransomware-to-Evade-Sanct
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2508502669177053762
content:
The threat cluster dubbed UNC2165, which shares numerous overlaps with a Russia-based cybercrime group known as Evil Corp, has been linked to multiple LockBit ransomware intrusions in an attempt to get around sanctions imposed by the U.S. Treasury in December 2019.
"These actors have shifted away from using exclusive ransomware variants to LockBit — a well-known ransomware as a service (RaaS) — <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G45qqQgbJ9g:kDaI-JZPL58:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G45qqQgbJ9g:kDaI-JZPL58:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G45qqQgbJ9g:kDaI-JZPL58:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G45qqQgbJ9g:kDaI-JZPL58:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G45qqQgbJ9g:kDaI-JZPL58:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G45qqQgbJ9g:kDaI-JZPL58:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=G45qqQgbJ9g:kDaI-JZPL58:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=G45qqQgbJ9g:kDaI-JZPL58:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1448725923034283185
title: Hacking Scenarios: How Hackers Choose Their Victims
uri: Hacking-Scenarios-How-Hackers-Choose-Their-Victims
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1448725923034283185
content:
Enforcing the "double-extortion" technique aka pay-now-or-get-breached emerged as a head-turner last year. 
May 6th, 2022 is a recent example.
The State Department said the Conti strain of ransomware was the most costly in terms of payments made by victims as of January.
Conti, a ransomware-as-a-service (RaaS) program, is one of the most notorious ransomware groups and has been responsible for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GJLfRtq3zmk:vf_9jjkKa1U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GJLfRtq3zmk:vf_9jjkKa1U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GJLfRtq3zmk:vf_9jjkKa1U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GJLfRtq3zmk:vf_9jjkKa1U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GJLfRtq3zmk:vf_9jjkKa1U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GJLfRtq3zmk:vf_9jjkKa1U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GJLfRtq3zmk:vf_9jjkKa1U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GJLfRtq3zmk:vf_9jjkKa1U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5334039512017693246
title: U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers
uri: U-S-Agencies-Warn-About-Chinese-Hackers-Targeting-Telecoms-and-Networ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5334039512017693246
content:
U.S. cybersecurity and intelligence agencies have warned about China-based state-sponsored cyber actors leveraging network vulnerabilities to exploit public and private sector organizations since at least 2020.
The widespread intrusion campaigns aim to exploit publicly identified security flaws in network devices such as Small Office/Home Office (SOHO) routers and Network Attached Storage (NAS) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GDatD00mnPs:_IYg_dodakE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GDatD00mnPs:_IYg_dodakE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GDatD00mnPs:_IYg_dodakE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GDatD00mnPs:_IYg_dodakE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GDatD00mnPs:_IYg_dodakE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GDatD00mnPs:_IYg_dodakE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=GDatD00mnPs:_IYg_dodakE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=GDatD00mnPs:_IYg_dodakE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7626029402404091785
title: FBI Seizes 'SSNDOB' ID Theft Service for Selling Personal Info of 24 Million People
uri: FBI-Seizes-SSNDOB-ID-Theft-Service-for-Selling-Personal-Info-of-24-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7626029402404091785
content:
An illicit online marketplace known as SSNDOB was taken down in operation led by U.S. law enforcement agencies, the Department of Justice (DoJ) announced Tuesday.
SSNDOB trafficked in personal information such as names, dates of birth, credit card numbers, and Social Security numbers of about 24 million individuals in the U.S., generating its operators $19 million in sales revenue.
The action <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oUltcpu5AFY:72mqz90FnXI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oUltcpu5AFY:72mqz90FnXI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oUltcpu5AFY:72mqz90FnXI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oUltcpu5AFY:72mqz90FnXI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oUltcpu5AFY:72mqz90FnXI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oUltcpu5AFY:72mqz90FnXI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oUltcpu5AFY:72mqz90FnXI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oUltcpu5AFY:72mqz90FnXI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8174862960111473884
title: Researchers Warn of Unpatched "DogWalk" Microsoft Windows Vulnerability
uri: Researchers-Warn-of-Unpatched-DogWalk-Microsoft-Windows-Vulnerabilit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8174862960111473884
content:
An unofficial security patch has been made available for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool (MSDT), even as the Follina flaw continues to be exploited in the wild.
The issue — referenced as DogWalk — relates to a path traversal flaw that can be exploited to stash a malicious executable file to the Windows Startup folder when a potential target opens a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HjRDM4S3z0c:-2XIRoAKelQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HjRDM4S3z0c:-2XIRoAKelQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HjRDM4S3z0c:-2XIRoAKelQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HjRDM4S3z0c:-2XIRoAKelQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HjRDM4S3z0c:-2XIRoAKelQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HjRDM4S3z0c:-2XIRoAKelQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HjRDM4S3z0c:-2XIRoAKelQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HjRDM4S3z0c:-2XIRoAKelQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4533863841312903261
title: Researchers Disclose Critical Flaws in Industrial Access Control System from Carrier
uri: Researchers-Disclose-Critical-Flaws-in-Industrial-Access-Control-Syste
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4533863841312903261
content:
As many as eight zero-day vulnerabilities have been disclosed in Carrier's LenelS2 HID Mercury access control system that's used widely in healthcare, education, transportation, and government facilities.
"The vulnerabilities uncovered allowed us to demonstrate the ability to remotely unlock and lock doors, subvert alarms and undermine logging and notification systems," Trellix security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oHIVV9YWxXM:O60kkniZOYk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oHIVV9YWxXM:O60kkniZOYk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oHIVV9YWxXM:O60kkniZOYk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oHIVV9YWxXM:O60kkniZOYk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oHIVV9YWxXM:O60kkniZOYk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oHIVV9YWxXM:O60kkniZOYk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oHIVV9YWxXM:O60kkniZOYk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oHIVV9YWxXM:O60kkniZOYk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7173020623161416109
title: Researchers Detail How Cyber Criminals Targeting Cryptocurrency Users
uri: Researchers-Detail-How-Cyber-Criminals-Targeting-Cryptocurrency-Users
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7173020623161416109
content:
Cybercriminals are impersonating popular crypto platforms such as Binance, Celo, and Trust Wallet with spoofed emails and fake login pages in an attempt to steal login details and deceptively transfer virtual funds.
"As cryptocurrency and non-fungible tokens (NFTs) become more mainstream, and capture headlines for their volatility, there is a greater likelihood of more individuals falling victim<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2o5D18_z9s8:mVh9-1gJzrM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2o5D18_z9s8:mVh9-1gJzrM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2o5D18_z9s8:mVh9-1gJzrM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2o5D18_z9s8:mVh9-1gJzrM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2o5D18_z9s8:mVh9-1gJzrM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2o5D18_z9s8:mVh9-1gJzrM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2o5D18_z9s8:mVh9-1gJzrM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2o5D18_z9s8:mVh9-1gJzrM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3866441490039237739
title: Researchers Find Bluetooth Signals Can be Fingerprinted to Track Smartphones
uri: Researchers-Find-Bluetooth-Signals-Can-be-Fingerprinted-to-Track-Smart
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3866441490039237739
content:
A new research undertaken by a group of academics from the University of California San Diego has revealed for the first time that Bluetooth signals can be fingerprinted to track smartphones (and therefore, individuals).
The identification, at its core, hinges on imperfections in the Bluetooth chipset hardware introduced during the manufacturing process, resulting in a "unique physical-layer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5oUwHSBlLMA:ffTkwlHbxos:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5oUwHSBlLMA:ffTkwlHbxos:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5oUwHSBlLMA:ffTkwlHbxos:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5oUwHSBlLMA:ffTkwlHbxos:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5oUwHSBlLMA:ffTkwlHbxos:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5oUwHSBlLMA:ffTkwlHbxos:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5oUwHSBlLMA:ffTkwlHbxos:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5oUwHSBlLMA:ffTkwlHbxos:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8925426279236456275
title: MIT Researchers Discover New Flaw in Apple M1 CPUs That Can't Be Patched
uri: MIT-Researchers-Discover-New-Flaw-in-Apple-M1-CPUs-That-Can-t-Be-Patch
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8925426279236456275
content:
A novel hardware attack dubbed PACMAN has been demonstrated against Apple's M1 processor chipsets, potentially arming a malicious actor with the capability to gain arbitrary code execution on macOS systems.
It leverages "speculative execution attacks to bypass an important memory protection mechanism, ARM Pointer Authentication, a security feature that is used to enforce pointer integrity," MIT <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IOGai20vdiw:j0JUxIcAy4k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IOGai20vdiw:j0JUxIcAy4k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IOGai20vdiw:j0JUxIcAy4k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IOGai20vdiw:j0JUxIcAy4k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IOGai20vdiw:j0JUxIcAy4k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IOGai20vdiw:j0JUxIcAy4k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IOGai20vdiw:j0JUxIcAy4k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IOGai20vdiw:j0JUxIcAy4k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7432636115665463530
title: Iranian Hackers Spotted Using a new DNS Hijacking Malware in Recent Attacks
uri: Iranian-Hackers-Spotted-Using-a-new-DNS-Hijacking-Malware-in-Recent-At
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7432636115665463530
content:
The Iranian state-sponsored threat actor tracked under the moniker Lyceum has turned to using a new custom .NET-based backdoor in recent campaigns directed against the Middle East.
"The new malware is a .NET based DNS Backdoor which is a customized version of the open source tool 'DIG.net,'" Zscaler ThreatLabz researchers Niraj Shivtarkar and Avinash Kumar said in a report published last week.
"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pqHzb2oqsvw:PqIR-DOHO1Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pqHzb2oqsvw:PqIR-DOHO1Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pqHzb2oqsvw:PqIR-DOHO1Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pqHzb2oqsvw:PqIR-DOHO1Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pqHzb2oqsvw:PqIR-DOHO1Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pqHzb2oqsvw:PqIR-DOHO1Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pqHzb2oqsvw:PqIR-DOHO1Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pqHzb2oqsvw:PqIR-DOHO1Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4558188294619306153
title: Hello XD Ransomware Installing Backdoor on Targeted Windows and Linux Systems
uri: Hello-XD-Ransomware-Installing-Backdoor-on-Targeted-Windows-and-Linux
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4558188294619306153
content:
Windows and Linux systems are being targeted by a ransomware variant called HelloXD, with the infections also involving the deployment of a backdoor to facilitate persistent remote access to infected hosts.
"Unlike other ransomware groups, this ransomware family doesn't have an active leak site; instead it prefers to direct the impacted victim to negotiations through Tox chat and onion-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXJEnEm3pGk:kNgKDVUvSbM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXJEnEm3pGk:kNgKDVUvSbM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXJEnEm3pGk:kNgKDVUvSbM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LXJEnEm3pGk:kNgKDVUvSbM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXJEnEm3pGk:kNgKDVUvSbM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LXJEnEm3pGk:kNgKDVUvSbM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LXJEnEm3pGk:kNgKDVUvSbM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LXJEnEm3pGk:kNgKDVUvSbM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-872130397230958132
title: Researchers Disclose Rooting Backdoor in Mitel IP Phones for Businesses
uri: Researchers-Disclose-Rooting-Backdoor-in-Mitel-IP-Phones-for-Businesse
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/872130397230958132
content:
Cybersecurity researchers have disclosed details of two medium-security flaws in Mitel 6800/6900 desk phones that, if successfully exploited, could allow an attacker to gain root privileges on the devices.
Tracked as CVE-2022-29854 and CVE-2022-29855 (CVSS score: 6.8), the access control issues were discovered by German penetration testing firm SySS, following which patches were shipped in May <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9B9mSquQUY:vALdeO-2brI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9B9mSquQUY:vALdeO-2brI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9B9mSquQUY:vALdeO-2brI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m9B9mSquQUY:vALdeO-2brI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9B9mSquQUY:vALdeO-2brI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m9B9mSquQUY:vALdeO-2brI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=m9B9mSquQUY:vALdeO-2brI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=m9B9mSquQUY:vALdeO-2brI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3753200523980039890
title: Quick and Simple: BPFDoor Explained
uri: Quick-and-Simple-BPFDoor-Explained
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3753200523980039890
content:
BPFDoor isn't new to the cyberattack game — in fact, it's gone undetected for years — but PwC researchers discovered the piece of malware in 2021. Subsequently, the cybersecurity community is learning more about the stealthy nature of malware, how it works, and how it can be prevented.
What's BPFDoor?
BPFDoor is a piece of malware associated with China-based threat actor Red Menshen that has hit<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4YUzHcaF2A4:-lT_1YVKkvI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4YUzHcaF2A4:-lT_1YVKkvI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4YUzHcaF2A4:-lT_1YVKkvI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4YUzHcaF2A4:-lT_1YVKkvI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4YUzHcaF2A4:-lT_1YVKkvI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4YUzHcaF2A4:-lT_1YVKkvI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4YUzHcaF2A4:-lT_1YVKkvI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4YUzHcaF2A4:-lT_1YVKkvI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5685780782679338807
title: Chinese Hackers Distribute Backdoored Web3 Wallets for iOS and Android Users
uri: Chinese-Hackers-Distribute-Backdoored-Web3-Wallets-for-iOS-and-Android
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5685780782679338807
content:
A technically sophisticated threat actor known as SeaFlower has been targeting Android and iOS users as part of an extensive campaign that mimics official cryptocurrency wallet websites intending to distribute backdoored apps that drain victims' funds.
Said to be first discovered in March 2022, the cluster of activity "hint[s] to a strong relationship with a Chinese-speaking entity yet to be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSFt6YK7LAU:mWfcN7QvjFw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSFt6YK7LAU:mWfcN7QvjFw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSFt6YK7LAU:mWfcN7QvjFw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BSFt6YK7LAU:mWfcN7QvjFw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSFt6YK7LAU:mWfcN7QvjFw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BSFt6YK7LAU:mWfcN7QvjFw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BSFt6YK7LAU:mWfcN7QvjFw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BSFt6YK7LAU:mWfcN7QvjFw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8433696758005399388
title: Chinese 'Gallium' Hackers Using New PingPull Malware in Cyberespionage Attacks
uri: Chinese-Gallium-Hackers-Using-New-PingPull-Malware-in-Cyberespionage
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8433696758005399388
content:
A Chinese advanced persistent threat (APT) known as Gallium has been observed using a previously undocumented remote access trojan in its espionage attacks targeting companies operating in Southeast Asia, Europe, and Africa.
Called PingPull, the "difficult-to-detect" backdoor is notable for its use of the Internet Control Message Protocol (ICMP) for command-and-control (C2) communications, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZuzYdQ6pg:ThON3x-d3Mo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZuzYdQ6pg:ThON3x-d3Mo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZuzYdQ6pg:ThON3x-d3Mo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pnZuzYdQ6pg:ThON3x-d3Mo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZuzYdQ6pg:ThON3x-d3Mo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pnZuzYdQ6pg:ThON3x-d3Mo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pnZuzYdQ6pg:ThON3x-d3Mo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pnZuzYdQ6pg:ThON3x-d3Mo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4800739454960993637
title: Unpatched Travis CI API Bug Exposes Thousands of Secret User Access Tokens
uri: Unpatched-Travis-CI-API-Bug-Exposes-Thousands-of-Secret-User-Access-To
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4800739454960993637
content:
An unpatched security issue in the Travis CI API has left tens of thousands of developers' user tokens exposed to potential attacks, effectively allowing threat actors to breach cloud infrastructures, make unauthorized code changes, and initiate supply chain attacks.
"More than 770 million logs of free tier users are available, from which you can easily extract tokens, secrets, and other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJyVMnWR-iM:6UgmNwfZXIM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJyVMnWR-iM:6UgmNwfZXIM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJyVMnWR-iM:6UgmNwfZXIM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZJyVMnWR-iM:6UgmNwfZXIM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJyVMnWR-iM:6UgmNwfZXIM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZJyVMnWR-iM:6UgmNwfZXIM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZJyVMnWR-iM:6UgmNwfZXIM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZJyVMnWR-iM:6UgmNwfZXIM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-118101588057333019
title: New Syslogk Linux Rootkit Lets Attackers Remotely Command It Using "Magic Packets"
uri: New-Syslogk-Linux-Rootkit-Lets-Attackers-Remotely-Command-It-Using-Ma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/118101588057333019
content:
A new covert Linux kernel rootkit named Syslogk has been spotted under development in the wild and cloaking a malicious payload that can be remotely commandeered by an adversary using a magic network traffic packet.
"The Syslogk rootkit is heavily based on Adore-Ng but incorporates new functionalities making the user-mode application and the kernel rootkit hard to detect," Avast security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-QdWnZLi4o:NQjL-BY9LMk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-QdWnZLi4o:NQjL-BY9LMk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-QdWnZLi4o:NQjL-BY9LMk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-QdWnZLi4o:NQjL-BY9LMk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-QdWnZLi4o:NQjL-BY9LMk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-QdWnZLi4o:NQjL-BY9LMk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y-QdWnZLi4o:NQjL-BY9LMk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y-QdWnZLi4o:NQjL-BY9LMk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4179839307346970782
title: Researchers Detail PureCrypter Loader Cyber Criminals Using to Distribute Malware
uri: Researchers-Detail-PureCrypter-Loader-Cyber-Criminals-Using-to-Distrib
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4179839307346970782
content:
Cybersecurity researchers have detailed the workings of a fully-featured malware loader dubbed PureCrypter that's being purchased by cyber criminals to deliver remote access trojans (RATs) and information stealers.
"The loader is a .NET executable obfuscated with SmartAssembly and makes use of compression, encryption, and obfuscation to evade antivirus software products," Zscaler's Romain Dumont<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wchbXWGQ9C8:uQ4Oz3t2i1U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wchbXWGQ9C8:uQ4Oz3t2i1U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wchbXWGQ9C8:uQ4Oz3t2i1U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wchbXWGQ9C8:uQ4Oz3t2i1U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wchbXWGQ9C8:uQ4Oz3t2i1U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wchbXWGQ9C8:uQ4Oz3t2i1U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wchbXWGQ9C8:uQ4Oz3t2i1U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wchbXWGQ9C8:uQ4Oz3t2i1U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5286633145608613602
title: Technical Details Released for 'SynLapse' RCE Vulnerability Reported in Microsoft Azure
uri: Technical-Details-Released-for-SynLapse-RCE-Vulnerability-Reported-i
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5286633145608613602
content:
Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines.
The latest safeguards include moving the shared integration runtimes to sandboxed ephemeral instances and using scoped tokens to prevent adversaries from using a client <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1jiVGW-mJDc:UXUu07tM_DU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1jiVGW-mJDc:UXUu07tM_DU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1jiVGW-mJDc:UXUu07tM_DU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1jiVGW-mJDc:UXUu07tM_DU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1jiVGW-mJDc:UXUu07tM_DU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1jiVGW-mJDc:UXUu07tM_DU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1jiVGW-mJDc:UXUu07tM_DU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1jiVGW-mJDc:UXUu07tM_DU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3244381913363529566
title: New Zimbra Email Vulnerability Could Let Attackers Steal Your Login Credentials
uri: New-Zimbra-Email-Vulnerability-Could-Let-Attackers-Steal-Your-Login-Cr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3244381913363529566
content:
A new high-severity vulnerability has been disclosed in the Zimbra email suite that, if successfully exploited, enables an unauthenticated attacker to steal cleartext passwords of users sans any user interaction.
"With the consequent access to the victims' mailboxes, attackers can potentially escalate their access to targeted organizations and gain access to various internal services and steal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VSxFzQMrT0M:TcLyjikF2pM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VSxFzQMrT0M:TcLyjikF2pM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VSxFzQMrT0M:TcLyjikF2pM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VSxFzQMrT0M:TcLyjikF2pM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VSxFzQMrT0M:TcLyjikF2pM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VSxFzQMrT0M:TcLyjikF2pM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VSxFzQMrT0M:TcLyjikF2pM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VSxFzQMrT0M:TcLyjikF2pM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5253753902759101177
title: What is the Essential Eight (And Why Non-Aussies Should Care)
uri: What-is-the-Essential-Eight-(And-Why-Non-Aussies-Should-Care)
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5253753902759101177
content:
In 2017, The Australian Cyber Security Center (ACSC) published a set of mitigation strategies that were designed to help organizations to protect themselves against cyber security incidents. These strategies, which became known as the Essential Eight, are designed specifically for use on Windows networks, although variations of these strategies are commonly applied to other platforms.
What is <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wyTvHgzGkEo:rGbox6nxE-g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wyTvHgzGkEo:rGbox6nxE-g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wyTvHgzGkEo:rGbox6nxE-g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wyTvHgzGkEo:rGbox6nxE-g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wyTvHgzGkEo:rGbox6nxE-g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wyTvHgzGkEo:rGbox6nxE-g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wyTvHgzGkEo:rGbox6nxE-g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wyTvHgzGkEo:rGbox6nxE-g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5379105380367655772
title: Patch Tuesday: Microsoft Issues Fix for Actively Exploited 'Follina' Vulnerability
uri: Patch-Tuesday-Microsoft-Issues-Fix-for-Actively-Exploited-Follina-V
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5379105380367655772
content:
Microsoft officially released fixes to address an actively exploited Windows zero-day vulnerability known as Follina as part of its Patch Tuesday updates.
Also addressed by the tech giant are 55 other flaws, three of which are rated Critical, 51 are rated Important, and one is rated Moderate in severity. Separately, five other shortcomings were resolved in the Microsoft Edge browser.
&lt;!-<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BVZrKsLfXrA:Y9H2oNLpPPo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BVZrKsLfXrA:Y9H2oNLpPPo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BVZrKsLfXrA:Y9H2oNLpPPo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BVZrKsLfXrA:Y9H2oNLpPPo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BVZrKsLfXrA:Y9H2oNLpPPo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BVZrKsLfXrA:Y9H2oNLpPPo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BVZrKsLfXrA:Y9H2oNLpPPo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BVZrKsLfXrA:Y9H2oNLpPPo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7839371575389611431
title: Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second
uri: Cloudflare-Saw-Record-Breaking-DDoS-Attack-Peaking-at-26-Million-Reque
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7839371575389611431
content:
Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second (RPS) distributed denial-of-service (DDoS) attack last week, making it the largest HTTPS DDoS attack detected to date.
The web performance and security company said the attack was directed against an unnamed customer website using its Free plan and emanated from a "powerful" botnet of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ssooa9bx7lo:_At_gMOswUY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ssooa9bx7lo:_At_gMOswUY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ssooa9bx7lo:_At_gMOswUY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ssooa9bx7lo:_At_gMOswUY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ssooa9bx7lo:_At_gMOswUY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ssooa9bx7lo:_At_gMOswUY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ssooa9bx7lo:_At_gMOswUY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ssooa9bx7lo:_At_gMOswUY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2644665035421551913
title: New Hertzbleed Side-Channel Attack Affects All Modern AMD and Intel CPUs
uri: New-Hertzbleed-Side-Channel-Attack-Affects-All-Modern-AMD-and-Intel-CP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2644665035421551913
content:
A newly discovered security vulnerability in modern Intel and AMD processors could let remote attackers steal encryption keys via a power side channel attack.
Dubbed Hertzbleed by a group of researchers from the University of Texas, University of Illinois Urbana-Champaign, and the University of Washington, the issue is rooted in dynamic voltage and frequency scaling (DVFS), power and thermal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4B0sRDHTIgg:7RSNYC0jmbM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4B0sRDHTIgg:7RSNYC0jmbM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4B0sRDHTIgg:7RSNYC0jmbM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4B0sRDHTIgg:7RSNYC0jmbM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4B0sRDHTIgg:7RSNYC0jmbM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4B0sRDHTIgg:7RSNYC0jmbM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=4B0sRDHTIgg:7RSNYC0jmbM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=4B0sRDHTIgg:7RSNYC0jmbM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8804535319112873527
title: Comprehensive, Easy Cybersecurity for Lean IT Security Teams Starts with XDR
uri: Comprehensive-Easy-Cybersecurity-for-Lean-IT-Security-Teams-Starts-wi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8804535319112873527
content:
Breaches don't just happen to large enterprises. Threat actors are increasingly targeting small businesses. In fact, 43% of data breaches involved small to medium-sized businesses. But there is a glaring discrepancy. Larger businesses typically have the budget to keep their lights on if they are breached. Most small businesses (83%), however, don't have the financial resources to recover if they<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JPT-iSskofM:Nv9270l5EkA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JPT-iSskofM:Nv9270l5EkA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JPT-iSskofM:Nv9270l5EkA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JPT-iSskofM:Nv9270l5EkA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JPT-iSskofM:Nv9270l5EkA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JPT-iSskofM:Nv9270l5EkA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=JPT-iSskofM:Nv9270l5EkA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=JPT-iSskofM:Nv9270l5EkA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4589527478317017603
title: Panchan: A New Golang-based Peer-To-Peer Botnet Targeting Linux Servers
uri: Panchan-A-New-Golang-based-Peer-To-Peer-Botnet-Targeting-Linux-Server
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4589527478317017603
content:
A new Golang-based peer-to-peer (P2P) botnet has been spotted actively targeting Linux servers in the education sector since its emergence in March 2022.
Dubbed Panchan by Akamai Security Research, the malware "utilizes its built-in concurrency features to maximize spreadability and execute malware modules" and "harvests SSH keys to perform lateral movement."
&lt;!--adsense--&gt;
The feature-packed <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3oMAQEudh9A:GAiu4aA9Zug:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3oMAQEudh9A:GAiu4aA9Zug:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3oMAQEudh9A:GAiu4aA9Zug:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3oMAQEudh9A:GAiu4aA9Zug:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3oMAQEudh9A:GAiu4aA9Zug:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3oMAQEudh9A:GAiu4aA9Zug:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=3oMAQEudh9A:GAiu4aA9Zug:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=3oMAQEudh9A:GAiu4aA9Zug:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8397044104262514278
title: MaliBot: A New Android Banking Trojan Spotted in the Wild
uri: MaliBot-A-New-Android-Banking-Trojan-Spotted-in-the-Wild
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8397044104262514278
content:
A new strain of Android malware has been spotted in the wild targeting online banking and cryptocurrency wallet customers in Spain and Italy, just weeks after a coordinated law enforcement operation dismantled FluBot.
The information stealing trojan, codenamed MaliBot by F5 Labs, is as feature-rich as its counterparts, allowing it to steal credentials and cookies, bypass multi-factor <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RIiOLW95XGs:HPIhxgp6Aqw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RIiOLW95XGs:HPIhxgp6Aqw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RIiOLW95XGs:HPIhxgp6Aqw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RIiOLW95XGs:HPIhxgp6Aqw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RIiOLW95XGs:HPIhxgp6Aqw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RIiOLW95XGs:HPIhxgp6Aqw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RIiOLW95XGs:HPIhxgp6Aqw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RIiOLW95XGs:HPIhxgp6Aqw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8124903826341490234
title: Critical Flaw in Cisco Secure Email and Web Manager Lets Attackers Bypass Authentication
uri: Critical-Flaw-in-Cisco-Secure-Email-and-Web-Manager-Lets-Attackers-Byp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8124903826341490234
content:
Cisco on Wednesday rolled out fixes to address a critical security flaw affecting Email Security Appliance (ESA) and Secure Email and Web Manager that could be exploited by an unauthenticated, remote attacker to sidestep authentication.
Assigned the CVE identifier CVE-2022-20798, the bypass vulnerability is rated 9.8 out of a maximum of 10 on the CVSS scoring system and stems from improper <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XtnMbXkbX28:oOB_GsgjXzc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XtnMbXkbX28:oOB_GsgjXzc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XtnMbXkbX28:oOB_GsgjXzc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XtnMbXkbX28:oOB_GsgjXzc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XtnMbXkbX28:oOB_GsgjXzc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XtnMbXkbX28:oOB_GsgjXzc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XtnMbXkbX28:oOB_GsgjXzc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XtnMbXkbX28:oOB_GsgjXzc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3664622618475560465
title: High-Severity RCE Vulnerability Reported in Popular Fastjson Library
uri: High-Severity-RCE-Vulnerability-Reported-in-Popular-Fastjson-Library
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3664622618475560465
content:
Cybersecurity researchers have detailed a recently patched high-severity security vulnerability in the popular Fastjson library that could be potentially exploited to achieve remote code execution.
Tracked as CVE-2022-25845 (CVSS score: 8.1), the issue relates to a case of deserialization of untrusted data in a supported feature called "AutoType." It was patched by the project maintainers in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8x3j3k7hZjw:d1YiOxRC31k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8x3j3k7hZjw:d1YiOxRC31k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8x3j3k7hZjw:d1YiOxRC31k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8x3j3k7hZjw:d1YiOxRC31k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8x3j3k7hZjw:d1YiOxRC31k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8x3j3k7hZjw:d1YiOxRC31k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8x3j3k7hZjw:d1YiOxRC31k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8x3j3k7hZjw:d1YiOxRC31k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7813101641608610541
title: A Microsoft Office 365 Feature Could Help Ransomware Hackers Hold Cloud Files Hostage
uri: A-Microsoft-Office-365-Feature-Could-Help-Ransomware-Hackers-Hold-Clou
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7813101641608610541
content:
A "dangerous piece of functionality" has been discovered in Microsoft 365 suite that could be potentially abused by a malicious actor to ransom files stored on SharePoint and OneDrive and launch attacks on cloud infrastructure.
The cloud ransomware attack makes it possible to launch file-encrypting malware to "encrypt files stored on SharePoint and OneDrive in a way that makes them unrecoverable<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Id2Odh6KqX4:cmR4K4RBpUY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Id2Odh6KqX4:cmR4K4RBpUY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Id2Odh6KqX4:cmR4K4RBpUY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Id2Odh6KqX4:cmR4K4RBpUY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Id2Odh6KqX4:cmR4K4RBpUY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Id2Odh6KqX4:cmR4K4RBpUY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Id2Odh6KqX4:cmR4K4RBpUY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Id2Odh6KqX4:cmR4K4RBpUY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7555201903122785966
title: Difference Between Agent-Based and Network-Based Internal Vulnerability Scanning
uri: Difference-Between-Agent-Based-and-Network-Based-Internal-Vulnerabilit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7555201903122785966
content:
For years, the two most popular methods for internal scanning: agent-based and network-based were considered to be about equal in value, each bringing its own strengths to bear. However, with remote working now the norm in most if not all workplaces, it feels a lot more like agent-based scanning is a must, while network-based scanning is an optional extra.
This article will go in-depth on the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Kw0XYXo-JM:netYOFM0ANM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Kw0XYXo-JM:netYOFM0ANM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Kw0XYXo-JM:netYOFM0ANM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Kw0XYXo-JM:netYOFM0ANM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Kw0XYXo-JM:netYOFM0ANM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Kw0XYXo-JM:netYOFM0ANM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Kw0XYXo-JM:netYOFM0ANM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Kw0XYXo-JM:netYOFM0ANM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6716324912044809484
title: BlackCat Ransomware Gang Targeting Unpatched Microsoft Exchange Servers
uri: BlackCat-Ransomware-Gang-Targeting-Unpatched-Microsoft-Exchange-Server
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6716324912044809484
content:
Microsoft is warning that the BlackCat ransomware crew is leveraging exploits for unpatched Exchange server vulnerabilities to gain access to targeted networks.
Upon gaining an entry point, the attackers swiftly moved to gather information about the compromised machines, followed by carrying out credential theft and lateral movement activities, before harvesting intellectual property and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tDmrY7-1N8U:qlNVsiK4Uxw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tDmrY7-1N8U:qlNVsiK4Uxw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tDmrY7-1N8U:qlNVsiK4Uxw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tDmrY7-1N8U:qlNVsiK4Uxw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tDmrY7-1N8U:qlNVsiK4Uxw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tDmrY7-1N8U:qlNVsiK4Uxw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tDmrY7-1N8U:qlNVsiK4Uxw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tDmrY7-1N8U:qlNVsiK4Uxw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3508917621806556194
title: Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity
uri: Chinese-Hackers-Exploited-Sophos-Firewall-Zero-Day-Flaw-to-Target-Sout
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3508917621806556194
content:
A sophisticated Chinese advanced persistent threat (APT) actor exploited a critical security vulnerability in Sophos' firewall product that came to light earlier this year to infiltrate an unnamed South Asian target as part of a highly-targeted attack.
"The attacker implement[ed] an interesting web shell backdoor, create[d] a secondary form of persistence, and ultimately launch[ed] attacks <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pN988n7LdPg:GmsJ-Mh13Ik:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pN988n7LdPg:GmsJ-Mh13Ik:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pN988n7LdPg:GmsJ-Mh13Ik:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pN988n7LdPg:GmsJ-Mh13Ik:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pN988n7LdPg:GmsJ-Mh13Ik:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pN988n7LdPg:GmsJ-Mh13Ik:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pN988n7LdPg:GmsJ-Mh13Ik:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pN988n7LdPg:GmsJ-Mh13Ik:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7082670950732071641
title: Over a Million WordPress Sites Forcibly Updated to Patch a Critical Plugin Vulnerability
uri: Over-a-Million-WordPress-Sites-Forcibly-Updated-to-Patch-a-Critical-Pl
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7082670950732071641
content:
WordPress websites using a widely used plugin named Ninja Forms have been updated automatically to remediate a critical security vulnerability that's suspected of having been actively exploited in the wild.
The issue, which relates to a case of code injection, is rated 9.8 out of 10 for severity and affects multiple versions starting from 3.0. It has been fixed in 3.0.34.2, 3.1.10, 3.2.28, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=12JJtsJnhMA:gvgoc8y8gOE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=12JJtsJnhMA:gvgoc8y8gOE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=12JJtsJnhMA:gvgoc8y8gOE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=12JJtsJnhMA:gvgoc8y8gOE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=12JJtsJnhMA:gvgoc8y8gOE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=12JJtsJnhMA:gvgoc8y8gOE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=12JJtsJnhMA:gvgoc8y8gOE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=12JJtsJnhMA:gvgoc8y8gOE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6107742195423287140
title: Researchers Uncover 'Hermit' Android Spyware Used in Kazakhstan, Syria, and Italy
uri: Researchers-Uncover-Hermit-Android-Spyware-Used-in-Kazakhstan-Syria
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6107742195423287140
content:
An enterprise-grade surveillanceware dubbed Hermit has been put to use by entities operating from within Kazakhstan, Syria, and Italy over the years since 2019, new research has revealed.
Lookout attributed the spy software, which is equipped to target both Android and iOS, to an Italian company named RCS Lab S.p.A and Tykelab Srl, a telecom services provider which it suspects to be a front <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hrptBjkBBnI:KbyIwhzJ8NE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hrptBjkBBnI:KbyIwhzJ8NE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hrptBjkBBnI:KbyIwhzJ8NE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hrptBjkBBnI:KbyIwhzJ8NE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hrptBjkBBnI:KbyIwhzJ8NE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hrptBjkBBnI:KbyIwhzJ8NE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hrptBjkBBnI:KbyIwhzJ8NE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hrptBjkBBnI:KbyIwhzJ8NE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8043111956217476477
title: Reimagine Hybrid Work: Same CyberSec in Office and at Home
uri: Reimagine-Hybrid-Work-Same-CyberSec-in-Office-and-at-Home
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8043111956217476477
content:
It was first the pandemic that changed the usual state of work - before, it was commuting, working in the office &amp; coming home for most corporate employees. Then, when we had to adapt to the self-isolation rules, the work moved to home offices, which completely changed the workflow for many businesses.As the pandemic went down, we realized success never relied on where the work was done. Whether<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bfz_2GYBMZ4:tZ6qZ87X2LU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bfz_2GYBMZ4:tZ6qZ87X2LU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bfz_2GYBMZ4:tZ6qZ87X2LU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Bfz_2GYBMZ4:tZ6qZ87X2LU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bfz_2GYBMZ4:tZ6qZ87X2LU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Bfz_2GYBMZ4:tZ6qZ87X2LU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Bfz_2GYBMZ4:tZ6qZ87X2LU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Bfz_2GYBMZ4:tZ6qZ87X2LU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-775210985201657399
title: Atlassian Confluence Flaw Being Used to Deploy Ransomware and Crypto Miners
uri: Atlassian-Confluence-Flaw-Being-Used-to-Deploy-Ransomware-and-Crypto-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/775210985201657399
content:
A recently patched critical security flaw in Atlassian Confluence Server and Data Center products is being actively weaponized in real-world attacks to drop cryptocurrency miners and ransomware payloads.
In at least two of the Windows-related incidents observed by cybersecurity vendor Sophos, adversaries exploited the vulnerability to deliver Cerber ransomware and a crypto miner called z0miner <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HlINcWg3D5k:7QQar49XfDc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HlINcWg3D5k:7QQar49XfDc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HlINcWg3D5k:7QQar49XfDc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HlINcWg3D5k:7QQar49XfDc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HlINcWg3D5k:7QQar49XfDc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HlINcWg3D5k:7QQar49XfDc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HlINcWg3D5k:7QQar49XfDc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HlINcWg3D5k:7QQar49XfDc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7142199694317569559
title: Over a Dozen Flaws Found in Siemens' Industrial Network Management System
uri: Over-a-Dozen-Flaws-Found-in-Siemens-Industrial-Network-Management-Sys
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7142199694317569559
content:
Cybersecurity researchers have disclosed details about 15 security flaws in Siemens SINEC network management system (NMS), some of which could be chained by an attacker to achieve remote code execution on affected systems.
"The vulnerabilities, if exploited, pose a number of risks to Siemens devices on the network including denial-of-service attacks, credential leaks, and remote code execution <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=okzmsJ8KPVY:_UrKlyK3o7M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=okzmsJ8KPVY:_UrKlyK3o7M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=okzmsJ8KPVY:_UrKlyK3o7M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=okzmsJ8KPVY:_UrKlyK3o7M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=okzmsJ8KPVY:_UrKlyK3o7M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=okzmsJ8KPVY:_UrKlyK3o7M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=okzmsJ8KPVY:_UrKlyK3o7M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=okzmsJ8KPVY:_UrKlyK3o7M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7889858841999146283
title: Learn Cybersecurity with Palo Alto Networks Through this PCCSA Course @ 93% OFF
uri: Learn-Cybersecurity-with-Palo-Alto-Networks-Through-this-PCCSA-Course
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7889858841999146283
content:
In the world of cybersecurity, reputation is everything. Most business owners have little understanding of the technical side, so they have to rely on credibility.
Founded back in 2005, Palo Alto Networks is a cybersecurity giant that has earned the trust of the business community thanks to its impressive track record. The company now provides services to over 70,000 organizations in 150 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Obe7HW_MB5E:1wcnykO74RU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Obe7HW_MB5E:1wcnykO74RU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Obe7HW_MB5E:1wcnykO74RU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Obe7HW_MB5E:1wcnykO74RU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Obe7HW_MB5E:1wcnykO74RU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Obe7HW_MB5E:1wcnykO74RU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Obe7HW_MB5E:1wcnykO74RU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Obe7HW_MB5E:1wcnykO74RU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6849869825093314616
title: Authorities Shut Down Russian RSOCKS Botnet That Hacked Millions of Devices
uri: Authorities-Shut-Down-Russian-RSOCKS-Botnet-That-Hacked-Millions-of-De
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6849869825093314616
content:
The U.S. Department of Justice (DoJ) on Thursday disclosed that it took down the infrastructure associated with a Russian botnet known as RSOCKS in collaboration with law enforcement partners in Germany, the Netherlands, and the U.K.
The botnet, operated by a sophisticated cybercrime organization, is believed to have ensnared millions of internet-connected devices, including Internet of Things (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x9iGMa6Nk1w:Mm9zz7dCxrw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x9iGMa6Nk1w:Mm9zz7dCxrw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x9iGMa6Nk1w:Mm9zz7dCxrw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x9iGMa6Nk1w:Mm9zz7dCxrw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x9iGMa6Nk1w:Mm9zz7dCxrw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x9iGMa6Nk1w:Mm9zz7dCxrw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x9iGMa6Nk1w:Mm9zz7dCxrw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x9iGMa6Nk1w:Mm9zz7dCxrw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4059870793327930834
title: BRATA Android Malware Gains Advanced Mobile Threat Capabilities
uri: BRATA-Android-Malware-Gains-Advanced-Mobile-Threat-Capabilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4059870793327930834
content:
The operators behind BRATA have once again added more capabilities to the Android mobile malware in an attempt to make their attacks against financial apps more stealthy.
"In fact, the modus operandi now fits into an Advanced Persistent Threat (APT) activity pattern," Italian cybersecurity firm Cleafy said in a report last week. "This term is used to describe an attack campaign in which <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1e6lVUf3wmA:pRbdlIhl4VU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1e6lVUf3wmA:pRbdlIhl4VU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1e6lVUf3wmA:pRbdlIhl4VU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1e6lVUf3wmA:pRbdlIhl4VU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1e6lVUf3wmA:pRbdlIhl4VU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1e6lVUf3wmA:pRbdlIhl4VU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1e6lVUf3wmA:pRbdlIhl4VU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1e6lVUf3wmA:pRbdlIhl4VU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9161292229201623395
title: Google Researchers Detail 5-Year-Old Apple Safari Vulnerability Exploited in the Wild
uri: Google-Researchers-Detail-5-Year-Old-Apple-Safari-Vulnerability-Exploi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9161292229201623395
content:
A security flaw in Apple Safari that was exploited in the wild earlier this year was originally fixed in 2013 and reintroduced in December 2016, according to a new report from Google Project Zero.
The issue, tracked as CVE-2022-22620 (CVSS score: 8.8), concerns a case of a use-after-free vulnerability in the WebKit component that could be exploited by a piece of specially crafted web content to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SByHHK7-f_0:dRRW2Hr9d4w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SByHHK7-f_0:dRRW2Hr9d4w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SByHHK7-f_0:dRRW2Hr9d4w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SByHHK7-f_0:dRRW2Hr9d4w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SByHHK7-f_0:dRRW2Hr9d4w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SByHHK7-f_0:dRRW2Hr9d4w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=SByHHK7-f_0:dRRW2Hr9d4w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=SByHHK7-f_0:dRRW2Hr9d4w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2708697806247659574
title: Do You Have Ransomware Insurance? Look at the Fine Print
uri: Do-You-Have-Ransomware-Insurance-Look-at-the-Fine-Print
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2708697806247659574
content:
Insurance exists to protect the insured party against catastrophe, but the insurer needs protection so that its policies are not abused – and that's where the fine print comes in. However, in the case of ransomware insurance, the fine print is becoming contentious and arguably undermining the usefulness of ransomware insurance.
In this article, we'll outline why, particularly given the current <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rZtfqUlkeMc:LFcuv5nWWr4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rZtfqUlkeMc:LFcuv5nWWr4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rZtfqUlkeMc:LFcuv5nWWr4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rZtfqUlkeMc:LFcuv5nWWr4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rZtfqUlkeMc:LFcuv5nWWr4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rZtfqUlkeMc:LFcuv5nWWr4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rZtfqUlkeMc:LFcuv5nWWr4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rZtfqUlkeMc:LFcuv5nWWr4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-568428102574790458
title: Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors
uri: Researchers-Disclose-56-Vulnerabilities-Impacting-OT-Devices-from-10-V
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/568428102574790458
content:
Nearly five dozen security vulnerabilities have been disclosed in devices from 10 operational technology (OT) vendors due to what researchers call are "insecure-by-design practices."
Collectively dubbed OT:ICEFALL by Forescout, the 56 issues span as many as 26 device models from Bently Nevada, Emerson, Honeywell, JTEKT, Motorola, Omron, Phoenix Contact, Siemens, and Yokogawa.
"Exploiting these <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dp_o0IiR7KA:hWOn2uPIRPU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dp_o0IiR7KA:hWOn2uPIRPU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dp_o0IiR7KA:hWOn2uPIRPU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dp_o0IiR7KA:hWOn2uPIRPU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dp_o0IiR7KA:hWOn2uPIRPU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dp_o0IiR7KA:hWOn2uPIRPU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dp_o0IiR7KA:hWOn2uPIRPU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dp_o0IiR7KA:hWOn2uPIRPU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-382247355895447634
title: Mitigate Ransomware in a Remote-First World
uri: Mitigate-Ransomware-in-a-Remote-First-World
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/382247355895447634
content:
Ransomware has been a thorn in the side of cybersecurity teams for years. With the move to remote and hybrid work, this insidious threat has become even more of a challenge for organizations everywhere.
2021 was a case study in ransomware due to the wide variety of attacks, significant financial and economic impact, and diverse ways that organizations responded. These attacks should be seen as a<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrQ1AS5kGOE:4F5EihH0PYk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrQ1AS5kGOE:4F5EihH0PYk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrQ1AS5kGOE:4F5EihH0PYk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xrQ1AS5kGOE:4F5EihH0PYk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrQ1AS5kGOE:4F5EihH0PYk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xrQ1AS5kGOE:4F5EihH0PYk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xrQ1AS5kGOE:4F5EihH0PYk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xrQ1AS5kGOE:4F5EihH0PYk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3879514615368726724
title: Former Amazon Employee Found Guilty in 2019 Capital One Data Breach
uri: Former-Amazon-Employee-Found-Guilty-in-2019-Capital-One-Data-Breach
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3879514615368726724
content:
A 36-year-old former Amazon employee was convicted of wire fraud and computer intrusions in the U.S. for her role in the theft of personal data of no fewer than 100 million people in the 2019 Capital One breach.
Paige Thompson, who operated under the online alias "erratic" and worked for the tech giant till 2016, was found guilty of wire fraud, five counts of unauthorized access to a protected <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fhpgsbv6ENY:140ShkCGx8M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fhpgsbv6ENY:140ShkCGx8M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fhpgsbv6ENY:140ShkCGx8M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fhpgsbv6ENY:140ShkCGx8M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fhpgsbv6ENY:140ShkCGx8M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fhpgsbv6ENY:140ShkCGx8M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fhpgsbv6ENY:140ShkCGx8M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fhpgsbv6ENY:140ShkCGx8M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6251695848985201575
title: New NTLM Relay Attack Lets Attackers Take Control Over Windows Domain
uri: New-NTLM-Relay-Attack-Lets-Attackers-Take-Control-Over-Windows-Domain
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6251695848985201575
content:
A new kind of Windows NTLM relay attack dubbed DFSCoerce has been uncovered that leverages the Distributed File System (DFS): Namespace Management Protocol (MS-DFSNM) to seize control of a domain.
"Spooler service disabled, RPC filters installed to prevent PetitPotam and File Server VSS Agent Service not installed but you still want to relay [Domain Controller authentication to [Active Directory<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VL72fM5oykE:DfyJC5KQpMg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VL72fM5oykE:DfyJC5KQpMg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VL72fM5oykE:DfyJC5KQpMg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VL72fM5oykE:DfyJC5KQpMg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VL72fM5oykE:DfyJC5KQpMg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VL72fM5oykE:DfyJC5KQpMg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VL72fM5oykE:DfyJC5KQpMg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VL72fM5oykE:DfyJC5KQpMg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2800834080428876204
title: New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers
uri: New-ToddyCat-Hacker-Group-on-Experts-Radar-After-Targeting-MS-Exchang
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2800834080428876204
content:
An advanced persistent threat (APT) actor codenamed ToddyCat has been linked to a string of attacks aimed at high-profile entities in Europe and Asia since at least December 2020.
The relatively new adversarial collective is said to have commenced its operations by targeting Microsoft Exchange servers in Taiwan and Vietnam using an unknown exploit to deploy the China Chopper web shell and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWmYguvdEag:2PTzkx7G8hA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWmYguvdEag:2PTzkx7G8hA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWmYguvdEag:2PTzkx7G8hA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nWmYguvdEag:2PTzkx7G8hA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWmYguvdEag:2PTzkx7G8hA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nWmYguvdEag:2PTzkx7G8hA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nWmYguvdEag:2PTzkx7G8hA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nWmYguvdEag:2PTzkx7G8hA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-244305144508734372
title: RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer
uri: RIG-Exploit-Kit-Now-Infects-Victims-PCs-With-Dridex-Instead-of-Raccoo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/244305144508734372
content:
The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022.
The switch in modus operandi, spotted by Romanian company Bitdefender, comes in the wake of Raccoon Stealer temporarily closing the project after one of its team members responsible for critical operations passed away in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lfCmYmJ8Nzg:ag4vUlAPLgE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lfCmYmJ8Nzg:ag4vUlAPLgE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lfCmYmJ8Nzg:ag4vUlAPLgE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lfCmYmJ8Nzg:ag4vUlAPLgE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lfCmYmJ8Nzg:ag4vUlAPLgE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lfCmYmJ8Nzg:ag4vUlAPLgE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lfCmYmJ8Nzg:ag4vUlAPLgE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lfCmYmJ8Nzg:ag4vUlAPLgE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5929402144948907127
title: Europol Busts Phishing Gang Responsible for Millions in Losses
uri: Europol-Busts-Phishing-Gang-Responsible-for-Millions-in-Losses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5929402144948907127
content:
Europol on Tuesday announced the dismantling of an organized crime group that dabbled in phishing, fraud, scams, and money laundering activities.
The cross-border operation, which involved law enforcement authorities from Belgium and the Netherlands, saw the arrests of nine individuals in the Dutch nation.
The suspects are men between the ages of 25 and 36 from Amsterdam, Almere, Rotterdam, and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=axXc0yUKEUs:eYbdQbxBPLQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=axXc0yUKEUs:eYbdQbxBPLQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=axXc0yUKEUs:eYbdQbxBPLQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=axXc0yUKEUs:eYbdQbxBPLQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=axXc0yUKEUs:eYbdQbxBPLQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=axXc0yUKEUs:eYbdQbxBPLQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=axXc0yUKEUs:eYbdQbxBPLQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=axXc0yUKEUs:eYbdQbxBPLQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1792560097992320096
title: Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign
uri: Newly-Discovered-Magecart-Infrastructure-Reveals-the-Scale-of-Ongoing
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1792560097992320096
content:
A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021.
To that end, it has come to light that two malware domains identified as hosting credit card skimmer code — "scanalytic[.]org" and "js.staticounter[.]net" — are part of a broader infrastructure used to carry out the intrusions, Malwarebytes said in a Tuesday analysis<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gN_S4VUkAQ:-E7rqTGQ36o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gN_S4VUkAQ:-E7rqTGQ36o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gN_S4VUkAQ:-E7rqTGQ36o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2gN_S4VUkAQ:-E7rqTGQ36o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gN_S4VUkAQ:-E7rqTGQ36o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2gN_S4VUkAQ:-E7rqTGQ36o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2gN_S4VUkAQ:-E7rqTGQ36o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2gN_S4VUkAQ:-E7rqTGQ36o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-514880125005341272
title: Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine
uri: Russian-Hackers-Exploiting-Microsoft-Follina-Vulnerability-Against-Ukr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/514880125005341272
content:
The Computer Emergency Response Team of Ukraine (CERT-UA) has cautioned of a new set of spear-phishing attacks exploiting the "Follina" flaw in the Windows operating system to deploy password-stealing malware.
Attributing the intrusions to a Russian nation-state group tracked as APT28 (aka Fancy Bear or Sofacy), the agency said the attacks commence with a lure document titled "Nuclear Terrorism <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cPYW3k6-4Z0:Kg5J2hWRXBA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cPYW3k6-4Z0:Kg5J2hWRXBA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cPYW3k6-4Z0:Kg5J2hWRXBA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cPYW3k6-4Z0:Kg5J2hWRXBA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cPYW3k6-4Z0:Kg5J2hWRXBA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cPYW3k6-4Z0:Kg5J2hWRXBA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cPYW3k6-4Z0:Kg5J2hWRXBA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cPYW3k6-4Z0:Kg5J2hWRXBA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6551255572775063514
title: Researchers Uncover Ways to Break the Encryption of 'MEGA' Cloud Storage Service
uri: Researchers-Uncover-Ways-to-Break-the-Encryption-of-MEGA-Cloud-Stora
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6551255572775063514
content:
A new piece of research from academics at ETH Zurich has identified a number of critical security issues in the MEGA cloud storage service that could be leveraged to break the confidentiality and integrity of user data.
In a paper titled "MEGA: Malleable Encryption Goes Awry," the researchers point out how MEGA's system does not protect its users against a malicious server, thereby enabling a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIfi8YwHlvw:acHn3FPojKM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIfi8YwHlvw:acHn3FPojKM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIfi8YwHlvw:acHn3FPojKM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EIfi8YwHlvw:acHn3FPojKM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIfi8YwHlvw:acHn3FPojKM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EIfi8YwHlvw:acHn3FPojKM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EIfi8YwHlvw:acHn3FPojKM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EIfi8YwHlvw:acHn3FPojKM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7188094428626163722
title: Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside
uri: Chinese-Hackers-Distributing-SMS-Bomber-Tool-with-Malware-Hidden-Insid
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7188094428626163722
content:
A threat cluster with ties to a hacking group called Tropic Trooper has been spotted using a previously undocumented malware coded in Nim language to strike targets as part of a newly discovered campaign.
The novel loader, dubbed Nimbda, is "bundled with a Chinese language greyware 'SMS Bomber' tool that is most likely illegally distributed in the Chinese-speaking web," Israeli cybersecurity <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pMF78Ycf4tY:h7NYUN0Jljw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pMF78Ycf4tY:h7NYUN0Jljw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pMF78Ycf4tY:h7NYUN0Jljw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pMF78Ycf4tY:h7NYUN0Jljw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pMF78Ycf4tY:h7NYUN0Jljw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pMF78Ycf4tY:h7NYUN0Jljw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=pMF78Ycf4tY:h7NYUN0Jljw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=pMF78Ycf4tY:h7NYUN0Jljw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1688117594394669156
title: Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks
uri: Critical-PHP-Vulnerability-Exposes-QNAP-NAS-Devices-to-Remote-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1688117594394669156
content:
QNAP, Taiwanese maker of network-attached storage (NAS) devices, on Wednesday said it's in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code execution.
"A vulnerability has been reported to affect PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24, and 7.3.x below 7.3.11 with improper nginx config," the hardware vendor said in an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Af5eSCt8faE:93Lp1xjNB88:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Af5eSCt8faE:93Lp1xjNB88:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Af5eSCt8faE:93Lp1xjNB88:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Af5eSCt8faE:93Lp1xjNB88:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Af5eSCt8faE:93Lp1xjNB88:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Af5eSCt8faE:93Lp1xjNB88:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Af5eSCt8faE:93Lp1xjNB88:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Af5eSCt8faE:93Lp1xjNB88:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8011420072110238145
title: NSO Confirms Pegasus Spyware Used by at least 5 European Countries
uri: NSO-Confirms-Pegasus-Spyware-Used-by-at-least-5-European-Countries
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8011420072110238145
content:
The beleaguered Israeli surveillanceware vendor NSO Group this week admitted to the European Union lawmakers that its Pegasus tool was used by at least five countries in the region.
"We're trying to do the right thing and that's more than other companies working in the industry," Chaim Gelfand, the company's general counsel and chief compliance officer, said, according to a report from Politico.<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-PtHw6V958w:T0ahVmAo60g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-PtHw6V958w:T0ahVmAo60g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-PtHw6V958w:T0ahVmAo60g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-PtHw6V958w:T0ahVmAo60g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-PtHw6V958w:T0ahVmAo60g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-PtHw6V958w:T0ahVmAo60g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-PtHw6V958w:T0ahVmAo60g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-PtHw6V958w:T0ahVmAo60g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1339149035856870823
title: Manual vs. SSPM: Research on What Streamlines SaaS Security Detection & Remediation
uri: Manual-vs-SSPM-Research-on-What-Streamlines-SaaS-Security-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1339149035856870823
content:
When it comes to keeping SaaS stacks secure, IT and security teams need to be able to streamline the detection and remediation of misconfigurations in order to best protect their SaaS stack from threats. However, while companies adopt more and more apps, their increase in SaaS security tools and staff has lagged behind, as found in the 2022 SaaS Security Survey Report. 
The survey report, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHoMOS5aQGA:z_UAGIPx-AE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHoMOS5aQGA:z_UAGIPx-AE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHoMOS5aQGA:z_UAGIPx-AE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vHoMOS5aQGA:z_UAGIPx-AE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHoMOS5aQGA:z_UAGIPx-AE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vHoMOS5aQGA:z_UAGIPx-AE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vHoMOS5aQGA:z_UAGIPx-AE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vHoMOS5aQGA:z_UAGIPx-AE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2240593327631398483
title: Log4Shell Still Being Exploited to Hack VMWare Servers to Exfiltrate Sensitive Data
uri: Log4Shell-Still-Being-Exploited-to-Hack-VMWare-Servers-to-Exfiltrate-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2240593327631398483
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the Coast Guard Cyber Command (CGCYBER), on Thursday released a joint advisory warning of continued attempts on the part of threat actors to exploit the Log4Shell flaw in VMware Horizon servers to breach target networks.
"Since December 2021, multiple threat actor groups have exploited Log4Shell on unpatched, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-h9cgMdvMpk:QrOaY4RqaZs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-h9cgMdvMpk:QrOaY4RqaZs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-h9cgMdvMpk:QrOaY4RqaZs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-h9cgMdvMpk:QrOaY4RqaZs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-h9cgMdvMpk:QrOaY4RqaZs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-h9cgMdvMpk:QrOaY4RqaZs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=-h9cgMdvMpk:QrOaY4RqaZs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=-h9cgMdvMpk:QrOaY4RqaZs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2552510094330063704
title: New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts
uri: New-Quantum-Builder-Lets-Attackers-Easily-Create-Malicious-Windows-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2552510094330063704
content:
A new malware tool that enables cybercriminal actors to build malicious Windows shortcut (.LNK) files has been spotted for sale on cybercrime forums.
Dubbed Quantum Lnk Builder, the software makes it possible to spoof any extension and choose from over 300 icons, not to mention support UAC and Windows SmartScreen bypass as well as "multiple payloads per .LNK" file. Also offered are capabilities <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_16ythp8um0:NRIBDkN0_XI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_16ythp8um0:NRIBDkN0_XI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_16ythp8um0:NRIBDkN0_XI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_16ythp8um0:NRIBDkN0_XI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_16ythp8um0:NRIBDkN0_XI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_16ythp8um0:NRIBDkN0_XI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_16ythp8um0:NRIBDkN0_XI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_16ythp8um0:NRIBDkN0_XI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2766659281118193195
title: State-Backed Hackers Using Ransomware as a Decoy for Cyber Espionage Attacks
uri: State-Backed-Hackers-Using-Ransomware-as-a-Decoy-for-Cyber-Espionage-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2766659281118193195
content:
A China-based advanced persistent threat (APT) group is possibly deploying short-lived ransomware families as a decoy to cover up the true operational and tactical objectives behind its campaigns.
The activity cluster, attributed to a hacking group dubbed Bronze Starlight by Secureworks, involves the deployment of post-intrusion ransomware such as LockFile, Atom Silo, Rook, Night Sky, Pandora, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BG3IZUddv9g:KFYfdCiHmy0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BG3IZUddv9g:KFYfdCiHmy0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BG3IZUddv9g:KFYfdCiHmy0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BG3IZUddv9g:KFYfdCiHmy0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BG3IZUddv9g:KFYfdCiHmy0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BG3IZUddv9g:KFYfdCiHmy0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BG3IZUddv9g:KFYfdCiHmy0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BG3IZUddv9g:KFYfdCiHmy0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6091661353384797808
title: Multiple Backdoored Python Libraries Caught Stealing AWS Secrets and Keys
uri: Multiple-Backdoored-Python-Libraries-Caught-Stealing-AWS-Secrets-and-K
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6091661353384797808
content:
Researchers have discovered a number of malicious Python packages in the official third-party software repository that are engineered to exfiltrate AWS credentials and environment variables to a publicly exposed endpoint.
The list of packages includes loglib-modules, pyg-modules, pygrata, pygrata-utils, and hkg-sol-utils, according to Sonatype security researcher Ax Sharma. The packages and as <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rYzYc0dvhNs:jBtqVskNWbE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rYzYc0dvhNs:jBtqVskNWbE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rYzYc0dvhNs:jBtqVskNWbE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rYzYc0dvhNs:jBtqVskNWbE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rYzYc0dvhNs:jBtqVskNWbE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rYzYc0dvhNs:jBtqVskNWbE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rYzYc0dvhNs:jBtqVskNWbE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rYzYc0dvhNs:jBtqVskNWbE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8925321329934360071
title: Google Says ISPs Helped Attackers Infect Targeted Smartphones with Hermit Spyware
uri: Google-Says-ISPs-Helped-Attackers-Infect-Targeted-Smartphones-with-Her
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8925321329934360071
content:
A week after it emerged that a sophisticated mobile spyware dubbed Hermit was used by the government of Kazakhstan within its borders, Google said it has notified Android users of infected devices.
Additionally, necessary changes have been implemented in Google Play Protect — Android's built-in malware defense service — to protect all users, Benoit Sevens and Clement Lecigne of Google Threat <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q83T0b2CW5k:UMpvZJNm_F8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q83T0b2CW5k:UMpvZJNm_F8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q83T0b2CW5k:UMpvZJNm_F8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q83T0b2CW5k:UMpvZJNm_F8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q83T0b2CW5k:UMpvZJNm_F8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q83T0b2CW5k:UMpvZJNm_F8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q83T0b2CW5k:UMpvZJNm_F8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q83T0b2CW5k:UMpvZJNm_F8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4144532538584155796
title: Hackers Exploit Mitel VoIP Zero-Day in Likely Ransomware Attack
uri: Hackers-Exploit-Mitel-VoIP-Zero-Day-in-Likely-Ransomware-Attack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4144532538584155796
content:
A suspected ransomware intrusion against an unnamed target leveraged a Mitel VoIP appliance as an entry point to achieve remote code execution and gain initial access to the environment.
The findings come from cybersecurity firm CrowdStrike, which traced the source of the attack to a Linux-based Mitel VoIP device sitting on the network perimeter, while also identifying a previously unknown <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YpfqrHyP848:WZyNCcFAznw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YpfqrHyP848:WZyNCcFAznw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YpfqrHyP848:WZyNCcFAznw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YpfqrHyP848:WZyNCcFAznw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YpfqrHyP848:WZyNCcFAznw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YpfqrHyP848:WZyNCcFAznw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YpfqrHyP848:WZyNCcFAznw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YpfqrHyP848:WZyNCcFAznw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6484296671303496290
title: Learn NIST Inside Out With 21 Hours of Training @ 86% OFF
uri: Learn-NIST-Inside-Out-With-21-Hours-of-Training-86-OFF
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6484296671303496290
content:
In cybersecurity, many of the best jobs involve working on government projects. To get a security clearance, you need to prove that you meet NIST standards. Cybersecurity firms are particularly interested in people who understand the RMF, or Risk Management Framework — a U.S. government guideline for taking care of data.
The NIST Cybersecurity &amp; Risk Management Frameworks Course helps you <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gB4LAzrupVg:F2inKB6M7lo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gB4LAzrupVg:F2inKB6M7lo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gB4LAzrupVg:F2inKB6M7lo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gB4LAzrupVg:F2inKB6M7lo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gB4LAzrupVg:F2inKB6M7lo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gB4LAzrupVg:F2inKB6M7lo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gB4LAzrupVg:F2inKB6M7lo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gB4LAzrupVg:F2inKB6M7lo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8300566405641250907
title: Researchers Warn of 'Matanbuchus' Malware Campaign Dropping Cobalt Strike Beacons
uri: Researchers-Warn-of-Matanbuchus-Malware-Campaign-Dropping-Cobalt-Str
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8300566405641250907
content:
A malware-as-a-service (Maas) dubbed Matanbuchus has been observed spreading through phishing campaigns, ultimately dropping the Cobalt Strike post-exploitation framework on compromised machines.
Matanbuchus, like other malware loaders such as BazarLoader, Bumblebee, and Colibri, is engineered to download and execute second-stage executables from command-and-control (C&amp;C) servers on infected <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwKQVxMPgv8:p9HG9Mi2uIE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwKQVxMPgv8:p9HG9Mi2uIE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwKQVxMPgv8:p9HG9Mi2uIE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WwKQVxMPgv8:p9HG9Mi2uIE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwKQVxMPgv8:p9HG9Mi2uIE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WwKQVxMPgv8:p9HG9Mi2uIE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WwKQVxMPgv8:p9HG9Mi2uIE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WwKQVxMPgv8:p9HG9Mi2uIE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7714470465654902853
title: Critical Security Flaws Identified in CODESYS ICS Automation Software
uri: Critical-Security-Flaws-Identified-in-CODESYS-ICS-Automation-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7714470465654902853
content:
CODESYS has released patches to address as many as 11 security flaws that, if successfully exploited, could result in information disclosure and a denial-of-service (DoS) condition, among others. 
"These vulnerabilities are simple to exploit, and they can be successfully exploited to cause consequences such as sensitive information leakage, PLCs entering a severe fault state, and arbitrary code <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnTIes8RNJ4:V8F3dmMFwGw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnTIes8RNJ4:V8F3dmMFwGw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnTIes8RNJ4:V8F3dmMFwGw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cnTIes8RNJ4:V8F3dmMFwGw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnTIes8RNJ4:V8F3dmMFwGw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cnTIes8RNJ4:V8F3dmMFwGw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cnTIes8RNJ4:V8F3dmMFwGw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cnTIes8RNJ4:V8F3dmMFwGw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-726449344428736689
title: What Are Shadow IDs, and How Are They Crucial in 2022?
uri: What-Are-Shadow-IDs-and-How-Are-They-Crucial-in-2022
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/726449344428736689
content:
Just before last Christmas, in a first-of-a-kind case, JPMorgan was fined $200M for employees using non-sanctioned applications for communicating about financial strategy. No mention of insider trading, naked shorting, or any malevolence. Just employees circumventing regulation using, well, Shadow IT. Not because they tried to obfuscate or hide anything, simply because it was a convenient tool <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DExrp_0Xuog:hMFBpx4Ns18:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DExrp_0Xuog:hMFBpx4Ns18:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DExrp_0Xuog:hMFBpx4Ns18:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DExrp_0Xuog:hMFBpx4Ns18:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DExrp_0Xuog:hMFBpx4Ns18:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DExrp_0Xuog:hMFBpx4Ns18:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DExrp_0Xuog:hMFBpx4Ns18:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DExrp_0Xuog:hMFBpx4Ns18:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5244450764314899949
title: Italy Data Protection Authority Warns Websites Against Use of Google Analytics
uri: Italy-Data-Protection-Authority-Warns-Websites-Against-Use-of-Google-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5244450764314899949
content:
Following the footsteps of Austria and France, the Italian Data Protection Authority has become the latest regulator to find the use of Google Analytics to be non-compliant with E.U. data protection regulations.
The Garante per la Protezione dei Dati Personali, in a press release published last week, called out a local web publisher for using the widely used analytics tool in a manner that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NiPtsEZPcyA:1yJNyv-UXaM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NiPtsEZPcyA:1yJNyv-UXaM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NiPtsEZPcyA:1yJNyv-UXaM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NiPtsEZPcyA:1yJNyv-UXaM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NiPtsEZPcyA:1yJNyv-UXaM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NiPtsEZPcyA:1yJNyv-UXaM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NiPtsEZPcyA:1yJNyv-UXaM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NiPtsEZPcyA:1yJNyv-UXaM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2612943535319691910
title: Cybersecurity Experts Warn of Emerging Threat of "Black Basta" Ransomware
uri: Cybersecurity-Experts-Warn-of-Emerging-Threat-of-Black-Basta-Ransomw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2612943535319691910
content:
The Black Basta ransomware-as-a-service (RaaS) syndicate has amassed nearly 50 victims in the U.S., Canada, the U.K., Australia, and New Zealand within two months of its emergence in the wild, making it a prominent threat in a short window.
"Black Basta has been observed targeting a range of industries, including manufacturing, construction, transportation, telcos, pharmaceuticals, cosmetics, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3JuNnCRpvc:2WmCisMkpGw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3JuNnCRpvc:2WmCisMkpGw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3JuNnCRpvc:2WmCisMkpGw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L3JuNnCRpvc:2WmCisMkpGw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3JuNnCRpvc:2WmCisMkpGw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L3JuNnCRpvc:2WmCisMkpGw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=L3JuNnCRpvc:2WmCisMkpGw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=L3JuNnCRpvc:2WmCisMkpGw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1698202535746673873
title: New Android Banking Trojan 'Revive' Targeting Users of Spanish Financial Services
uri: New-Android-Banking-Trojan-Revive-Targeting-Users-of-Spanish-Financi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1698202535746673873
content:
A previously unknown Android banking trojan has been discovered in the wild, targeting users of the Spanish financial services company BBVA.
Said to be in its early stages of development, the malware — dubbed Revive by Italian cybersecurity firm Cleafy — was first observed on June 15, 2022 and distributed by means of phishing campaigns.
"The name Revive has been chosen since one of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cAzpKMPjk54:DtzDrPmIVv4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cAzpKMPjk54:DtzDrPmIVv4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cAzpKMPjk54:DtzDrPmIVv4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cAzpKMPjk54:DtzDrPmIVv4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cAzpKMPjk54:DtzDrPmIVv4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cAzpKMPjk54:DtzDrPmIVv4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cAzpKMPjk54:DtzDrPmIVv4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cAzpKMPjk54:DtzDrPmIVv4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4730209193081393753
title: OpenSSL to Release Security Patch for Remote Memory Corruption Vulnerability
uri: OpenSSL-to-Release-Security-Patch-for-Remote-Memory-Corruption-Vulnera
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4730209193081393753
content:
The latest version of the OpenSSL library has been discovered as susceptible to a remote memory-corruption vulnerability on select systems.
The issue has been identified in OpenSSL version 3.0.4, which was released on June 21, 2022, and impacts x64 systems with the AVX-512 instruction set. OpenSSL 1.1.1 as well as OpenSSL forks BoringSSL and LibreSSL are not affected.
&lt;!--adsense--&gt;
Security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faUUaLV16_4:jS5tBxWHZxg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faUUaLV16_4:jS5tBxWHZxg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faUUaLV16_4:jS5tBxWHZxg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=faUUaLV16_4:jS5tBxWHZxg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faUUaLV16_4:jS5tBxWHZxg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=faUUaLV16_4:jS5tBxWHZxg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=faUUaLV16_4:jS5tBxWHZxg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=faUUaLV16_4:jS5tBxWHZxg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4600721213300373475
title: APT Hackers Targeting Industrial Control Systems with ShadowPad Backdoor
uri: APT-Hackers-Targeting-Industrial-Control-Systems-with-ShadowPad-Backdo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4600721213300373475
content:
Entities located in Afghanistan, Malaysia, and Pakistan are in the crosshairs of an attack campaign that targets unpatched Microsoft Exchange Servers as an initial access vector to deploy the ShadowPad malware.
Russian cybersecurity firm Kaspersky, which first detected the activity in mid-October 2021, attributed it to a previously unknown Chinese-speaking threat actor. Targets include <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCqq9ULrbfU:T2H_zUNpiKc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCqq9ULrbfU:T2H_zUNpiKc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCqq9ULrbfU:T2H_zUNpiKc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gCqq9ULrbfU:T2H_zUNpiKc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCqq9ULrbfU:T2H_zUNpiKc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gCqq9ULrbfU:T2H_zUNpiKc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=gCqq9ULrbfU:T2H_zUNpiKc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=gCqq9ULrbfU:T2H_zUNpiKc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5844641142906841187
title: Overview of Top Mobile Security Threats in 2022
uri: Overview-of-Top-Mobile-Security-Threats-in-2022
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5844641142906841187
content:
Your smartphone is your daily companion. The chances are that most of our activities rely on them, from ordering food to booking medical appointments. However, the threat landscape always reminds us how vulnerable smartphones can be. 
Consider the recent discovery by Oversecured, a security startup. These experts observed the dynamic code loading and its potential dangers. Why is this a problem?<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ATdNLsUDBzM:bqnHKyqN1VE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ATdNLsUDBzM:bqnHKyqN1VE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ATdNLsUDBzM:bqnHKyqN1VE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ATdNLsUDBzM:bqnHKyqN1VE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ATdNLsUDBzM:bqnHKyqN1VE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ATdNLsUDBzM:bqnHKyqN1VE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ATdNLsUDBzM:bqnHKyqN1VE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ATdNLsUDBzM:bqnHKyqN1VE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2807859946774273774
title: ZuoRAT Malware Hijacking Home-Office Routers to Spy on Targeted Networks
uri: ZuoRAT-Malware-Hijacking-Home-Office-Routers-to-Spy-on-Targeted-Networ
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2807859946774273774
content:
A never-before-seen remote access trojan dubbed ZuoRAT has been singling out small office/home office (SOHO) routers as part of a sophisticated campaign targeting North American and European networks.
The malware "grants the actor the ability to pivot into the local network and gain access to additional systems on the LAN by hijacking network communications to maintain an undetected foothold," <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q5mxY2blnjQ:9IrRRZhSiWo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q5mxY2blnjQ:9IrRRZhSiWo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q5mxY2blnjQ:9IrRRZhSiWo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q5mxY2blnjQ:9IrRRZhSiWo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q5mxY2blnjQ:9IrRRZhSiWo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q5mxY2blnjQ:9IrRRZhSiWo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q5mxY2blnjQ:9IrRRZhSiWo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q5mxY2blnjQ:9IrRRZhSiWo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-968804561847200265
title: CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the Wild
uri: CISA-Warns-of-Active-Exploitation-of-PwnKit-Linux-Vulnerability-in-t
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/968804561847200265
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week moved to add a Linux vulnerability dubbed PwnKit to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation.
The issue, tracked as CVE-2021-4034 (CVSS score: 7.8), came to light in January 2022 and concerns a case of local privilege escalation in polkit's pkexec utility, which allows an <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zTfIhdjfWe0:kCSi93bSjoo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zTfIhdjfWe0:kCSi93bSjoo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zTfIhdjfWe0:kCSi93bSjoo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zTfIhdjfWe0:kCSi93bSjoo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zTfIhdjfWe0:kCSi93bSjoo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zTfIhdjfWe0:kCSi93bSjoo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zTfIhdjfWe0:kCSi93bSjoo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zTfIhdjfWe0:kCSi93bSjoo:F7zBnMyn0Lo" border="0"></img></a>
</div>


