# articles

feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-114637889674044484
title: 2022 Cybersecurity Predictions from Lookout: Work From Anywhere Ends On-Premises Security
uri: 2022-Cybersecurity-Predictions-from-Lookout-Work-From-Anywhere-Ends-O
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/114637889674044484
content:
Lookout, an endpoint-to-cloud cyber security company, have put together their cyber security predictions for 2022. 
1 — Cloud connectivity and cloud-to-cloud connectivity will amplify supply-chain breaches
One area organizations need to continue to monitor in 2022 is the software supply chain. We tend to think of cloud apps as disparate islands used as destinations by endpoints and end-users to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1aBWHdsWGOY:5HJaTy-QB30:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1aBWHdsWGOY:5HJaTy-QB30:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1aBWHdsWGOY:5HJaTy-QB30:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1aBWHdsWGOY:5HJaTy-QB30:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1aBWHdsWGOY:5HJaTy-QB30:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1aBWHdsWGOY:5HJaTy-QB30:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1aBWHdsWGOY:5HJaTy-QB30:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1aBWHdsWGOY:5HJaTy-QB30:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5938071193339004038
title: New KCodes NetUSB Bug Affect Millions of Routers from Different Vendors
uri: New-KCodes-NetUSB-Bug-Affect-Millions-of-Routers-from-Different-Vendor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5938071193339004038
content:
Cybersecurity researchers have detailed a high severity flaw in KCodes NetUSB component that's integrated into millions of end-user router devices from Netgear, TP-Link, Tenda, EDiMAX, D-Link, and Western Digital, among others.
KCodes NetUSB is a Linux kernel module that enables devices on a local network to provide USB-based services over IP. Printers, external hard drives, and flash drives <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=piB4zOOIqC4:7pTZCE4DQ3g:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=piB4zOOIqC4:7pTZCE4DQ3g:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=piB4zOOIqC4:7pTZCE4DQ3g:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=piB4zOOIqC4:7pTZCE4DQ3g:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=piB4zOOIqC4:7pTZCE4DQ3g:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=piB4zOOIqC4:7pTZCE4DQ3g:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=piB4zOOIqC4:7pTZCE4DQ3g:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=piB4zOOIqC4:7pTZCE4DQ3g:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1597900151387875106
title: How Can You Leave Log4J in 2021?
uri: How-Can-You-Leave-Log4J-in-2021
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1597900151387875106
content:
With the last month of 2021 dominated by the log4J vulnerabilities discovery, publication, and patches popping up in rapid succession, odds are you have patched your system against Log4J exploitation attempts. At least some systems, if not all. You might even have installed the latest patch – at the time of writing, that is 2.17.1, but, if the last rapid patching cycle persists, it might have <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OPDrTMG-jjQ:0vxgVFCaxCU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OPDrTMG-jjQ:0vxgVFCaxCU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OPDrTMG-jjQ:0vxgVFCaxCU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OPDrTMG-jjQ:0vxgVFCaxCU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OPDrTMG-jjQ:0vxgVFCaxCU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OPDrTMG-jjQ:0vxgVFCaxCU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OPDrTMG-jjQ:0vxgVFCaxCU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OPDrTMG-jjQ:0vxgVFCaxCU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-692233996663606020
title: FBI, NSA and CISA Warns of Russian Hackers Targeting Critical Infrastructure
uri: FBI-NSA-and-CISA-Warns-of-Russian-Hackers-Targeting-Critical-Infrastr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/692233996663606020
content:
Amid renewed tensions between the U.S. and Russia over Ukraine and Kazakhstan, American cybersecurity and intelligence agencies on Tuesday released a joint advisory on how to detect, respond to, and mitigate cyberattacks orchestrated by Russian state-sponsored actors.
To that end, the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and National <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oOla5FYsgvk:nLE3J68cjrY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oOla5FYsgvk:nLE3J68cjrY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oOla5FYsgvk:nLE3J68cjrY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oOla5FYsgvk:nLE3J68cjrY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oOla5FYsgvk:nLE3J68cjrY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oOla5FYsgvk:nLE3J68cjrY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oOla5FYsgvk:nLE3J68cjrY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oOla5FYsgvk:nLE3J68cjrY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7946151086988261237
title: First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability
uri: First-Patch-Tuesday-of-2022-Brings-Fix-for-a-Critical-Wormable-Windo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7946151086988261237
content:
Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability.
Of the 96 vulnerabilities, nine are rated Critical and 89 are rated Important in severity, with six zero-day publicly known at the time of the release. This is in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E0BhO1bxQHY:yd7YwH0CXDw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E0BhO1bxQHY:yd7YwH0CXDw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E0BhO1bxQHY:yd7YwH0CXDw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E0BhO1bxQHY:yd7YwH0CXDw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E0BhO1bxQHY:yd7YwH0CXDw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E0BhO1bxQHY:yd7YwH0CXDw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E0BhO1bxQHY:yd7YwH0CXDw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E0BhO1bxQHY:yd7YwH0CXDw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1065016924655603886
title: New SysJoker Espionage Malware Targeting Windows, macOS, and Linux Users
uri: New-SysJoker-Espionage-Malware-Targeting-Windows-macOS-and-Linux-Use
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1065016924655603886
content:
A new cross-platform backdoor called "SysJoker" has been observed targeting machines running Windows, Linux, and macOS operating systems as part of an ongoing espionage campaign that's believed to have been initiated during the second half of 2021.
"SysJoker masquerades as a system update and generates its [command-and-control server] by decoding a string retrieved from a text file hosted on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxhWVUQZdN8:E2R4omFUBSQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxhWVUQZdN8:E2R4omFUBSQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxhWVUQZdN8:E2R4omFUBSQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WxhWVUQZdN8:E2R4omFUBSQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxhWVUQZdN8:E2R4omFUBSQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WxhWVUQZdN8:E2R4omFUBSQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxhWVUQZdN8:E2R4omFUBSQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WxhWVUQZdN8:E2R4omFUBSQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3310528939353779939
title: XDR: Redefining the game for MSSPs serving SMBs and SMEs
uri: XDR-Redefining-the-game-for-MSSPs-serving-SMBs-and-SMEs
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3310528939353779939
content:
SMBs and SMEs are increasingly turning to MSSPs to secure their businesses because they simply do not have the resources to manage an effective security technology stack. However, it’s also challenging for MSSPs to piece together an effective but manageable security technology stack to protect their clients, especially at an affordable price point.
This is where Extended Detection and Response (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9mAzuWWBv9A:lAFDvW9ys2I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9mAzuWWBv9A:lAFDvW9ys2I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9mAzuWWBv9A:lAFDvW9ys2I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9mAzuWWBv9A:lAFDvW9ys2I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9mAzuWWBv9A:lAFDvW9ys2I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9mAzuWWBv9A:lAFDvW9ys2I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9mAzuWWBv9A:lAFDvW9ys2I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9mAzuWWBv9A:lAFDvW9ys2I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4472623069558618959
title: Hackers Use Cloud Services to Distribute Nanocore, Netwire, and AsyncRAT Malware
uri: Hackers-Use-Cloud-Services-to-Distribute-Nanocore-Netwire-and-AsyncR
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4472623069558618959
content:
Threat actors are actively incorporating public cloud services from Amazon and Microsoft into their malicious campaigns to deliver commodity remote access trojans (RATs) such as Nanocore, Netwire, and AsyncRAT to siphon sensitive information from compromised systems.
The spear-phishing attacks, which commenced in October 2021, have primarily targeted entities located in the U.S., Canada, Italy, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i1ttAWSiZ8w:9NO7InvhNCA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i1ttAWSiZ8w:9NO7InvhNCA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i1ttAWSiZ8w:9NO7InvhNCA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i1ttAWSiZ8w:9NO7InvhNCA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i1ttAWSiZ8w:9NO7InvhNCA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i1ttAWSiZ8w:9NO7InvhNCA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=i1ttAWSiZ8w:9NO7InvhNCA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=i1ttAWSiZ8w:9NO7InvhNCA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6727029222852173814
title: US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence
uri: US-Cyber-Command-Links-MuddyWater-Hacking-Group-to-Iranian-Intellige
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6727029222852173814
content:
The U.S. Cyber Command (USCYBERCOM) on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus, while simultaneously detailing the various tools and tactics adopted by the espionage actor to burrow into victim networks.
"MuddyWater has been seen using a variety of techniques to maintain access to victim networks," USCYBERCOM's Cyber National Mission Force (CNMF) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iAPx1A94YVY:r7FKzyCIBAk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iAPx1A94YVY:r7FKzyCIBAk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iAPx1A94YVY:r7FKzyCIBAk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iAPx1A94YVY:r7FKzyCIBAk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iAPx1A94YVY:r7FKzyCIBAk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iAPx1A94YVY:r7FKzyCIBAk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iAPx1A94YVY:r7FKzyCIBAk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iAPx1A94YVY:r7FKzyCIBAk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6023535189281048977
title: Apple Releases iPhone and iPad Updates to Patch HomeKit DoS Vulnerability
uri: Apple-Releases-iPhone-and-iPad-Updates-to-Patch-HomeKit-DoS-Vulnerabil
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6023535189281048977
content:
Apple on Wednesday rolled out software updates for iOS and iPadOS to remediate a persistent denial-of-service (DoS) issue affecting the HomeKit smart home framework that could be potentially exploited to launch ransomware-like attacks targeting the devices.
The iPhone maker, in its release notes for iOS and iPadOS 15.2.1, termed it as a "resource exhaustion issue" that could be triggered when <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tf63QPxohyI:F7HaVEyEfX8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tf63QPxohyI:F7HaVEyEfX8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tf63QPxohyI:F7HaVEyEfX8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tf63QPxohyI:F7HaVEyEfX8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tf63QPxohyI:F7HaVEyEfX8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tf63QPxohyI:F7HaVEyEfX8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tf63QPxohyI:F7HaVEyEfX8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tf63QPxohyI:F7HaVEyEfX8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8004345102322696622
title: Iranian Hackers Exploit Log4j Vulnerability to Deploy PowerShell Backdoor
uri: Iranian-Hackers-Exploit-Log4j-Vulnerability-to-Deploy-PowerShell-Backd
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8004345102322696622
content:
An Iranian state-sponsored actor has been observed scanning and attempting to abuse the Log4Shell flaw in publicly-exposed Java applications to deploy a hitherto undocumented PowerShell-based modular backdoor dubbed "CharmPower" for follow-on post-exploitation.
"The actor's attack setup was obviously rushed, as they used the basic open-source tool for the exploitation and based their operations <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0f2xtHJ9wu4:H662D2T9PHw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0f2xtHJ9wu4:H662D2T9PHw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0f2xtHJ9wu4:H662D2T9PHw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0f2xtHJ9wu4:H662D2T9PHw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0f2xtHJ9wu4:H662D2T9PHw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0f2xtHJ9wu4:H662D2T9PHw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0f2xtHJ9wu4:H662D2T9PHw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0f2xtHJ9wu4:H662D2T9PHw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8861584927896991149
title: Meeting Patching-Related Compliance Requirements with TuxCare
uri: Meeting-Patching-Related-Compliance-Requirements-with-TuxCare
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8861584927896991149
content:
Cybersecurity teams have many demands competing for limited resources. Restricted budgets are a problem, and restricted staff resources are also a bottleneck. There is also the need to maintain business continuity at all times. It's a frustrating mix of challenges – with resources behind tasks such as patching rarely sufficient to meet security prerogatives or compliance deadlines.
The multitude<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VTvjRaJLaNw:chGbOLADuy8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VTvjRaJLaNw:chGbOLADuy8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VTvjRaJLaNw:chGbOLADuy8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VTvjRaJLaNw:chGbOLADuy8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VTvjRaJLaNw:chGbOLADuy8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VTvjRaJLaNw:chGbOLADuy8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VTvjRaJLaNw:chGbOLADuy8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VTvjRaJLaNw:chGbOLADuy8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6675436150918420384
title: Researchers Decrypted Qakbot Banking Trojan’s Encrypted Registry Keys
uri: Researchers-Decrypted-Qakbot-Banking-Trojan-s-Encrypted-Registry-Key
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6675436150918420384
content:
Cybersecurity researchers have decoded the mechanism by which the versatile Qakbot banking trojan handles the insertion of encrypted configuration data into the Windows Registry.
Qakbot, also known as QBot, QuackBot and Pinkslipbot, has been observed in the wild since 2007. Although mainly fashioned as an information-stealing malware, Qakbot has since shifted its goals and acquired new <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s7XsfToZlHM:AS7Lc2tv5ys:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s7XsfToZlHM:AS7Lc2tv5ys:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s7XsfToZlHM:AS7Lc2tv5ys:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s7XsfToZlHM:AS7Lc2tv5ys:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s7XsfToZlHM:AS7Lc2tv5ys:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s7XsfToZlHM:AS7Lc2tv5ys:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=s7XsfToZlHM:AS7Lc2tv5ys:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=s7XsfToZlHM:AS7Lc2tv5ys:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7680360995068867846
title: GootLoader Hackers Targeting Employees of Law and Accounting Firms
uri: GootLoader-Hackers-Targeting-Employees-of-Law-and-Accounting-Firms
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7680360995068867846
content:
Operators of the GootLoader campaign are setting their sights on employees of accounting and law firms as part of a fresh onslaught of widespread cyberattacks to deploy malware on infected systems, an indication that the adversary is expanding its focus to other high-value targets.
"GootLoader is a stealthy initial access malware, which after getting a foothold into the victim's computer system,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mCqc6no0zVU:kOrYgS2nKXY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mCqc6no0zVU:kOrYgS2nKXY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mCqc6no0zVU:kOrYgS2nKXY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mCqc6no0zVU:kOrYgS2nKXY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mCqc6no0zVU:kOrYgS2nKXY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mCqc6no0zVU:kOrYgS2nKXY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mCqc6no0zVU:kOrYgS2nKXY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mCqc6no0zVU:kOrYgS2nKXY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1281633031259791940
title: U.K. Hacker Jailed for Spying on Children and Downloading Indecent Images
uri: U-K-Hacker-Jailed-for-Spying-on-Children-and-Downloading-Indecent-Ima
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1281633031259791940
content:
A man from the U.K. city of Nottingham has been sentenced to more than two years in prison for illegally breaking into the phones and computers of a number of victims, including women and children, to spy on them and amass a collection of indecent images.
Robert Davies, 32, is said to have purchased an arsenal of cyber crime tools in 2019, including crypters and remote administration tools (RATs<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LF9DuNV-VSM:dboZvJ3BVTw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LF9DuNV-VSM:dboZvJ3BVTw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LF9DuNV-VSM:dboZvJ3BVTw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LF9DuNV-VSM:dboZvJ3BVTw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LF9DuNV-VSM:dboZvJ3BVTw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LF9DuNV-VSM:dboZvJ3BVTw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LF9DuNV-VSM:dboZvJ3BVTw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LF9DuNV-VSM:dboZvJ3BVTw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8289071136074569526
title: Husband-Wife Arrested in Ukraine for Ransomware Attacks on Foreign Companies
uri: Husband-Wife-Arrested-in-Ukraine-for-Ransomware-Attacks-on-Foreign-Com
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8289071136074569526
content:
Ukrainian police authorities have nabbed five members of a gang that's believed to have helped orchestrate attacks against more than 50 companies across Europe and the U.S and caused losses to the tune of more than $1 million.
The special operation, which was carried out in assistance with law enforcement officials from the U.K. and U.S., saw the arrest of an unnamed 36-year-old individual from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gph-lRcyhrM:T5jUQ7l3kAY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gph-lRcyhrM:T5jUQ7l3kAY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gph-lRcyhrM:T5jUQ7l3kAY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gph-lRcyhrM:T5jUQ7l3kAY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gph-lRcyhrM:T5jUQ7l3kAY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gph-lRcyhrM:T5jUQ7l3kAY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gph-lRcyhrM:T5jUQ7l3kAY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gph-lRcyhrM:T5jUQ7l3kAY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4539358671060762252
title: Cisco Releases Patch for Critical Bug Affecting Unified CCMP and Unified CCDM
uri: Cisco-Releases-Patch-for-Critical-Bug-Affecting-Unified-CCMP-and-Unifi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4539358671060762252
content:
Cisco Systems has rolled out security updates for a critical security vulnerability affecting Unified Contact Center Management Portal (Unified CCMP) and Unified Contact Center Domain Manager (Unified CCDM) that could be exploited by a remote attacker to take control of an affected system.
Tracked as CVE-2022-20658, the vulnerability has been rated 9.6 in severity on the CVSS scoring system, and<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kjq_DFMS0b0:dnlaS1k5_-o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kjq_DFMS0b0:dnlaS1k5_-o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kjq_DFMS0b0:dnlaS1k5_-o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Kjq_DFMS0b0:dnlaS1k5_-o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kjq_DFMS0b0:dnlaS1k5_-o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Kjq_DFMS0b0:dnlaS1k5_-o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Kjq_DFMS0b0:dnlaS1k5_-o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Kjq_DFMS0b0:dnlaS1k5_-o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6155217453868035201
title: North Korean Hackers Stole Millions from Cryptocurrency Startups Worldwide
uri: North-Korean-Hackers-Stole-Millions-from-Cryptocurrency-Startups-World
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6155217453868035201
content:
Operators associated with the Lazarus sub-group BlueNoroff have been linked to a series of cyberattacks targeting small and medium-sized companies worldwide with an aim to drain their cryptocurrency funds, in what's yet another financially motivated operation mounted by the prolific North Korean state-sponsored actor.
Russian cybersecurity company Kaspersky, which is tracking the intrusions <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNe7yZf-5sA:eBAVuXG3zqA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNe7yZf-5sA:eBAVuXG3zqA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNe7yZf-5sA:eBAVuXG3zqA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nNe7yZf-5sA:eBAVuXG3zqA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNe7yZf-5sA:eBAVuXG3zqA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nNe7yZf-5sA:eBAVuXG3zqA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNe7yZf-5sA:eBAVuXG3zqA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nNe7yZf-5sA:eBAVuXG3zqA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-441789884265350815
title: Massive Cyber Attack Knocks Down Ukrainian Government Websites
uri: Massive-Cyber-Attack-Knocks-Down-Ukrainian-Government-Websites
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/441789884265350815
content:
No fewer than 70 websites operated by the Ukrainian government went offline on Friday for hours in what appears to be a coordinated cyber attack amid heightened tensions with Russia.
"As a result of a massive cyber attack, the websites of the Ministry of Foreign Affairs and a number of other government agencies are temporarily down," Oleg Nikolenko, MFA spokesperson, tweeted.
The Security <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jg7WL1r9yPI:wqMAm3GrVxc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jg7WL1r9yPI:wqMAm3GrVxc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jg7WL1r9yPI:wqMAm3GrVxc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jg7WL1r9yPI:wqMAm3GrVxc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jg7WL1r9yPI:wqMAm3GrVxc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jg7WL1r9yPI:wqMAm3GrVxc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Jg7WL1r9yPI:wqMAm3GrVxc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Jg7WL1r9yPI:wqMAm3GrVxc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1060262312561972230
title: Russia Arrests REvil Ransomware Gang Responsible for High-Profile Cyber Attacks
uri: Russia-Arrests-REvil-Ransomware-Gang-Responsible-for-High-Profile-Cybe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1060262312561972230
content:
In an unprecedented move, Russia's Federal Security Service (FSB), the country's principal security agency, on Friday disclosed that it arrested several members belonging to the notorious REvil ransomware gang and neutralized its operations.
The surprise operation, which it said was carried out at the request of the U.S. authorities, saw the law enforcement agency conduct raids at 25 addresses <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0NNc3FEQ35g:u6rPVL-K4xU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0NNc3FEQ35g:u6rPVL-K4xU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0NNc3FEQ35g:u6rPVL-K4xU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0NNc3FEQ35g:u6rPVL-K4xU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0NNc3FEQ35g:u6rPVL-K4xU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0NNc3FEQ35g:u6rPVL-K4xU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0NNc3FEQ35g:u6rPVL-K4xU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0NNc3FEQ35g:u6rPVL-K4xU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6753170717113986954
title: Get Lifetime Access to Cybersecurity Certification Prep Courses
uri: Get-Lifetime-Access-to-Cybersecurity-Certification-Prep-Courses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6753170717113986954
content:
You can't go far in professional IT without being asked for some key certifications. In particular, most large companies today require new hires to be well versed in the fundamentals of cybersecurity.
Adding the likes of CISSP, CISM, and CompTIA CASP+ to your résumé can open the door to many opportunities — including six-figure roles. There is just a small matter of some exams to pass.
To help <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rdrYpCOFG_A:KJBo7vl9L1Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rdrYpCOFG_A:KJBo7vl9L1Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rdrYpCOFG_A:KJBo7vl9L1Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rdrYpCOFG_A:KJBo7vl9L1Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rdrYpCOFG_A:KJBo7vl9L1Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rdrYpCOFG_A:KJBo7vl9L1Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rdrYpCOFG_A:KJBo7vl9L1Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rdrYpCOFG_A:KJBo7vl9L1Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1962790661099223017
title: A New Destructive Malware Targeting Ukrainian Government and Business Entities
uri: A-New-Destructive-Malware-Targeting-Ukrainian-Government-and-Business
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1962790661099223017
content:
Cybersecurity teams from Microsoft on Saturday disclosed they identified evidence of a new destructive malware operation targeting government, non-profit, and information technology entities in Ukraine amid brewing geopolitical tensions between the country and Russia.
"The malware is disguised as ransomware but, if activated by the attacker, would render the infected computer system inoperable,"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbM7WohsGxc:5IzdbAB5xVc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbM7WohsGxc:5IzdbAB5xVc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbM7WohsGxc:5IzdbAB5xVc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qbM7WohsGxc:5IzdbAB5xVc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbM7WohsGxc:5IzdbAB5xVc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qbM7WohsGxc:5IzdbAB5xVc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qbM7WohsGxc:5IzdbAB5xVc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qbM7WohsGxc:5IzdbAB5xVc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-630277116016033095
title: New Unpatched Apple Safari Browser Bug Allows Cross-Site User Tracking
uri: New-Unpatched-Apple-Safari-Browser-Bug-Allows-Cross-Site-User-Tracking
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/630277116016033095
content:
A software bug introduced in Apple Safari 15's implementation of the IndexedDB API could be abused by a malicious website to track users' online activity in the web browser and worse, even reveal their identity.
The vulnerability, dubbed IndexedDB Leaks, was disclosed by fraud protection software company FingerprintJS, which reported the issue to the iPhone maker on November 28, 2021.
IndexedDB <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Sm2AR8f5iY:ba94zH5652k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Sm2AR8f5iY:ba94zH5652k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Sm2AR8f5iY:ba94zH5652k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Sm2AR8f5iY:ba94zH5652k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Sm2AR8f5iY:ba94zH5652k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Sm2AR8f5iY:ba94zH5652k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Sm2AR8f5iY:ba94zH5652k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Sm2AR8f5iY:ba94zH5652k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4713974783044316374
title: High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites
uri: High-Severity-Vulnerability-in-3-WordPress-Plugins-Affected-84-000-Web
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4713974783044316374
content:
Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicious actor to take over vulnerable sites.
"This flaw made it possible for an attacker to update arbitrary site options on a vulnerable site, provided they could trick a site's administrator into performing an action, such as clicking on a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvuxQg_6SBI:JEtVJg_g2NE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvuxQg_6SBI:JEtVJg_g2NE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvuxQg_6SBI:JEtVJg_g2NE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fvuxQg_6SBI:JEtVJg_g2NE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvuxQg_6SBI:JEtVJg_g2NE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fvuxQg_6SBI:JEtVJg_g2NE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fvuxQg_6SBI:JEtVJg_g2NE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fvuxQg_6SBI:JEtVJg_g2NE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8249360302373851053
title: Ukrainian Government Officially Accuses Russia of Recent Cyberattacks
uri: Ukrainian-Government-Officially-Accuses-Russia-of-Recent-Cyberattacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8249360302373851053
content:
The government of Ukraine on Sunday formally accused Russia of masterminding the attacks that targeted websites of public institutions and government agencies this past week.
"All the evidence points to the fact that Russia is behind the cyber attack," the Ministry of Digital Transformation said in a statement. "Moscow continues to wage a hybrid war and is actively building forces in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mDrcULflMtg:b4EYnP_AYKg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mDrcULflMtg:b4EYnP_AYKg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mDrcULflMtg:b4EYnP_AYKg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mDrcULflMtg:b4EYnP_AYKg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mDrcULflMtg:b4EYnP_AYKg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mDrcULflMtg:b4EYnP_AYKg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mDrcULflMtg:b4EYnP_AYKg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mDrcULflMtg:b4EYnP_AYKg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8221755108356876815
title: Dark Web's Largest Marketplace for Stolen Credit Cards is Shutting Down
uri: Dark-Web-s-Largest-Marketplace-for-Stolen-Credit-Cards-is-Shutting-Dow
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8221755108356876815
content:
UniCC, the biggest dark web marketplace of stolen credit and debit cards, has announced that it's shuttering its operations after earning $358 million in purchases since 2013 using cryptocurrencies such as Bitcoin, Litecoin, Ether, and Dash.
"Don't build any conspiracy theories about us leaving," the anonymous operators of UniCC said in a farewell posted on dark web carding forums, according to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QaTTtEjuC10:tvcIOKRWNmA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QaTTtEjuC10:tvcIOKRWNmA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QaTTtEjuC10:tvcIOKRWNmA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QaTTtEjuC10:tvcIOKRWNmA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QaTTtEjuC10:tvcIOKRWNmA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QaTTtEjuC10:tvcIOKRWNmA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QaTTtEjuC10:tvcIOKRWNmA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QaTTtEjuC10:tvcIOKRWNmA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4891051482056915896
title: Chrome Limits Websites' Direct Access to Private Networks for Security Reasons
uri: Chrome-Limits-Websites-Direct-Access-to-Private-Networks-for-Security
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4891051482056915896
content:
Google Chrome has announced plans to prohibit public websites from directly accessing endpoints located within private networks as part of an upcoming major security shakeup to prevent intrusions via the browser.
The proposed change is set to be rolled out in two phases as part of releases Chrome 98 and Chrome 101 scheduled in the coming months via a newly implemented W3C specification called <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lXiGAmazriE:ctcQ-SxDWaY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lXiGAmazriE:ctcQ-SxDWaY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lXiGAmazriE:ctcQ-SxDWaY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lXiGAmazriE:ctcQ-SxDWaY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lXiGAmazriE:ctcQ-SxDWaY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lXiGAmazriE:ctcQ-SxDWaY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lXiGAmazriE:ctcQ-SxDWaY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lXiGAmazriE:ctcQ-SxDWaY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6240696902217554649
title: Earth Lusca Hackers Aimed at High-Value Targets in Government and Private Sectors
uri: Earth-Lusca-Hackers-Aimed-at-High-Value-Targets-in-Government-and-Priv
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6240696902217554649
content:
An elusive threat actor called Earth Lusca has been observed striking organizations across the world as part of what appears to be simultaneously an espionage campaign and an attempt to reap monetary profits.
"The list of its victims includes high-value targets such as government and educational institutions, religious movements, pro-democracy and human rights organizations in Hong Kong, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DXiYF_x8zHY:rwKJgMVAqpU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DXiYF_x8zHY:rwKJgMVAqpU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DXiYF_x8zHY:rwKJgMVAqpU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DXiYF_x8zHY:rwKJgMVAqpU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DXiYF_x8zHY:rwKJgMVAqpU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DXiYF_x8zHY:rwKJgMVAqpU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DXiYF_x8zHY:rwKJgMVAqpU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DXiYF_x8zHY:rwKJgMVAqpU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7645408427458924744
title: Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central
uri: Zoho-Releases-Patch-for-Critical-Flaw-Affecting-ManageEngine-Desktop-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7645408427458924744
content:
Enterprise software maker Zoho on Monday issued patches for a critical security vulnerability in Desktop Central and Desktop Central MSP that a remote adversary could exploit to perform unauthorized actions in affected servers.
Tracked as CVE-2021-44757, the shortcoming concerns an instance of authentication bypass that "may allow an attacker to read unauthorized data or write an arbitrary zip <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RzAxslDuRpI:1ZPPDjFrxhg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RzAxslDuRpI:1ZPPDjFrxhg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RzAxslDuRpI:1ZPPDjFrxhg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RzAxslDuRpI:1ZPPDjFrxhg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RzAxslDuRpI:1ZPPDjFrxhg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RzAxslDuRpI:1ZPPDjFrxhg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RzAxslDuRpI:1ZPPDjFrxhg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RzAxslDuRpI:1ZPPDjFrxhg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6260145037889986654
title: Europol Shuts Down VPNLab, Cybercriminals' Favourite VPN Service
uri: Europol-Shuts-Down-VPNLab-Cybercriminals-Favourite-VPN-Service
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6260145037889986654
content:
VPNLab.net, a VPN provider that was used by malicious actors to deploy ransomware and facilitate other cybercrimes, was taken offline following a coordinated law enforcement operation.
Europol said it took action against the misuse of the VPN service by grounding 15 of its servers on January 17 and rendering it inoperable as part of a disruptive action that took place across Germany, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-0SRy-YgxM:mSh436wefF0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-0SRy-YgxM:mSh436wefF0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-0SRy-YgxM:mSh436wefF0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-0SRy-YgxM:mSh436wefF0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-0SRy-YgxM:mSh436wefF0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-0SRy-YgxM:mSh436wefF0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-0SRy-YgxM:mSh436wefF0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-0SRy-YgxM:mSh436wefF0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1666102006232515388
title: Don't Use Public Wi-Fi Without DNS Filtering
uri: Don-t-Use-Public-Wi-Fi-Without-DNS-Filtering
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1666102006232515388
content:
Providing public Wi-Fi is a great service to offer your customers as it becomes more and more standard in today's society. I like the fact that I do not have to worry about accessing the Internet while I am away, or spending a lot of money on an international connection, or just staying offline while I am away.
With public Wi-Fi, modern life has become a constant connection to the Internet, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9GbhQmj5h4o:ot_Q8357YgI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9GbhQmj5h4o:ot_Q8357YgI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9GbhQmj5h4o:ot_Q8357YgI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9GbhQmj5h4o:ot_Q8357YgI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9GbhQmj5h4o:ot_Q8357YgI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9GbhQmj5h4o:ot_Q8357YgI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9GbhQmj5h4o:ot_Q8357YgI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9GbhQmj5h4o:ot_Q8357YgI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2758203323676533518
title: Researchers Bypass SMS-based Multi-Factor Authentication Protecting Box Accounts
uri: Researchers-Bypass-SMS-based-Multi-Factor-Authentication-Protecting-Bo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2758203323676533518
content:
Cybersecurity researchers have disclosed details of a now-patched bug in Box's multi-factor authentication (MFA) mechanism that could be abused to completely sidestep SMS-based login verification.
"Using this technique, an attacker could use stolen credentials to compromise an organization's Box account and exfiltrate sensitive data without access to the victim's phone," Varonis researchers said<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y6YsxGrrmKY:Y3J8ZEpeTZI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y6YsxGrrmKY:Y3J8ZEpeTZI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y6YsxGrrmKY:Y3J8ZEpeTZI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y6YsxGrrmKY:Y3J8ZEpeTZI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y6YsxGrrmKY:Y3J8ZEpeTZI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y6YsxGrrmKY:Y3J8ZEpeTZI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=y6YsxGrrmKY:Y3J8ZEpeTZI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=y6YsxGrrmKY:Y3J8ZEpeTZI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6979939678660758642
title: DDoS IRC Bot Malware Spreading Through Korean WebHard Platforms
uri: DDoS-IRC-Bot-Malware-Spreading-Through-Korean-WebHard-Platforms
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6979939678660758642
content:
An IRC (Internet Relay Chat) bot strain programmed in GoLang is being used to launch distributed denial-of-service (DDoS) attacks targeting users in Korea.
"The malware is being distributed under the guise of adult games," researchers from AhnLab's Security Emergency-response Center (ASEC) said in a new report published on Wednesday. "Additionally, the DDoS malware was installed via downloader <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PWK5yuYlZ2s:nHTwPXd9gj0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PWK5yuYlZ2s:nHTwPXd9gj0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PWK5yuYlZ2s:nHTwPXd9gj0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PWK5yuYlZ2s:nHTwPXd9gj0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PWK5yuYlZ2s:nHTwPXd9gj0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PWK5yuYlZ2s:nHTwPXd9gj0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PWK5yuYlZ2s:nHTwPXd9gj0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PWK5yuYlZ2s:nHTwPXd9gj0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2683414929678490916
title: Ukraine: Recent Cyber Attacks Part of Wider Plot to Sabotage Critical Infrastructure
uri: Ukraine-Recent-Cyber-Attacks-Part-of-Wider-Plot-to-Sabotage-Critical
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2683414929678490916
content:
The coordinated cyberattacks targeting Ukrainian government websites and the deployment of a data-wiper malware called WhisperGate on select government systems are part of a broader wave of malicious activities aimed at sabotaging critical infrastructure in the country.
The Secret Service of Ukraine on Monday confirmed that the two incidents are related, adding the breaches also exploited the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZMZ3Al_9yHQ:az-R-12AHsI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZMZ3Al_9yHQ:az-R-12AHsI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZMZ3Al_9yHQ:az-R-12AHsI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZMZ3Al_9yHQ:az-R-12AHsI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZMZ3Al_9yHQ:az-R-12AHsI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZMZ3Al_9yHQ:az-R-12AHsI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZMZ3Al_9yHQ:az-R-12AHsI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZMZ3Al_9yHQ:az-R-12AHsI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2227445528508794713
title: Russian Hackers Heavily Using Malicious Traffic Direction System to Distribute Malware
uri: Russian-Hackers-Heavily-Using-Malicious-Traffic-Direction-System-to-Di
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2227445528508794713
content:
Potential connections between a subscription-based crimeware-as-a-service (Caas) solution and a cracked copy of Cobalt Strike have been established in what the researchers suspect is being offered as a tool for its customers to stage post-exploitation activities.
Prometheus, as the service is called, first came to light in August 2021 when cybersecurity company Group-IB disclosed details of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qCfcP44OC7Y:rpIC0PYGBNM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qCfcP44OC7Y:rpIC0PYGBNM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qCfcP44OC7Y:rpIC0PYGBNM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qCfcP44OC7Y:rpIC0PYGBNM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qCfcP44OC7Y:rpIC0PYGBNM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qCfcP44OC7Y:rpIC0PYGBNM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qCfcP44OC7Y:rpIC0PYGBNM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qCfcP44OC7Y:rpIC0PYGBNM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6912317371324165462
title: FIN8 Hackers Spotted Using New 'White Rabbit' Ransomware in Recent Attacks
uri: FIN8-Hackers-Spotted-Using-New-White-Rabbit-Ransomware-in-Recent-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6912317371324165462
content:
The financially motivated FIN8 actor, in all likelihood, has resurfaced with a never-before-seen ransomware strain called "White Rabbit" that was recently deployed against a local bank in the U.S. in December 2021.
That's according to new findings published by Trend Micro, calling out the malware's overlaps with Egregor, which was taken down by Ukrainian law enforcement authorities in February <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7HCI5nRRGs:gsBJLPq0-Ho:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7HCI5nRRGs:gsBJLPq0-Ho:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7HCI5nRRGs:gsBJLPq0-Ho:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7HCI5nRRGs:gsBJLPq0-Ho:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7HCI5nRRGs:gsBJLPq0-Ho:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7HCI5nRRGs:gsBJLPq0-Ho:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=k7HCI5nRRGs:gsBJLPq0-Ho:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=k7HCI5nRRGs:gsBJLPq0-Ho:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6361034953813130641
title: Cyber Threat Protection — It All Starts with Visibility
uri: Cyber-Threat-Protection-It-All-Starts-with-Visibility
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6361034953813130641
content:
Just as animals use their senses to detect danger, cybersecurity depends on sensors to identify signals in the computing environment that may signal danger. The more highly tuned, diverse and coordinated the senses, the more likely one is to detect important signals that indicate danger.
This, however, can be a double-edged sword. Too many signals with too little advanced signal processing just <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWyyS7fZULs:jG-zaXuylKQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWyyS7fZULs:jG-zaXuylKQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWyyS7fZULs:jG-zaXuylKQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iWyyS7fZULs:jG-zaXuylKQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWyyS7fZULs:jG-zaXuylKQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iWyyS7fZULs:jG-zaXuylKQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iWyyS7fZULs:jG-zaXuylKQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iWyyS7fZULs:jG-zaXuylKQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1321819186542986604
title: New BHUNT Password Stealer Malware Targeting Cryptocurrency Wallets
uri: New-BHUNT-Password-Stealer-Malware-Targeting-Cryptocurrency-Wallets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1321819186542986604
content:
A new evasive crypto wallet stealer named BHUNT has been spotted in the wild with the goal of financial gain, adding to a list of digital currency stealing malware such as CryptBot, Redline Stealer, and WeSteal.
"BHUNT is a modular stealer written in .NET, capable of exfiltrating wallet (Exodus, Electrum, Atomic, Jaxx, Ethereum, Bitcoin, Litecoin wallets) contents, passwords stored in the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iveZ_3Gaak4:NZfdD5JRtcQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iveZ_3Gaak4:NZfdD5JRtcQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iveZ_3Gaak4:NZfdD5JRtcQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iveZ_3Gaak4:NZfdD5JRtcQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iveZ_3Gaak4:NZfdD5JRtcQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iveZ_3Gaak4:NZfdD5JRtcQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iveZ_3Gaak4:NZfdD5JRtcQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iveZ_3Gaak4:NZfdD5JRtcQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5232773873187643143
title: Microsoft: Hackers Exploiting New SolarWinds Serv-U Bug Related to Log4j Attacks
uri: Microsoft-Hackers-Exploiting-New-SolarWinds-Serv-U-Bug-Related-to-Log
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5232773873187643143
content:
Microsoft on Wednesday disclosed details of a new security vulnerability in SolarWinds Serv-U software that it said was being weaponized by threat actors to propagate attacks leveraging the Log4j flaws to compromise targets.
Tracked as CVE-2021-35247 (CVSS score: 5.3), the issue is an " input validation vulnerability that could allow attackers to build a query given some input and send that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LLjPIrbSvt8:cpcyXAT2Ljw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LLjPIrbSvt8:cpcyXAT2Ljw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LLjPIrbSvt8:cpcyXAT2Ljw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LLjPIrbSvt8:cpcyXAT2Ljw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LLjPIrbSvt8:cpcyXAT2Ljw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LLjPIrbSvt8:cpcyXAT2Ljw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LLjPIrbSvt8:cpcyXAT2Ljw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LLjPIrbSvt8:cpcyXAT2Ljw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1133147458940187009
title: DoNot Hacking Team Targeting Government and Military Entities in South Asia
uri: DoNot-Hacking-Team-Targeting-Government-and-Military-Entities-in-South
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1133147458940187009
content:
A threat actor with potential links to an Indian cybersecurity company has been nothing if remarkably persistent in its attacks against military organizations based in South Asia, including Bangladesh, Nepal, and Sri Lanka, since at least September 2020 by deploying different variants of its bespoke malware framework.
Slovak cybersecurity firm ESET attributed the highly targeted attack to a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RpSfOHin-bc:wzuucuGokFc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RpSfOHin-bc:wzuucuGokFc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RpSfOHin-bc:wzuucuGokFc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RpSfOHin-bc:wzuucuGokFc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RpSfOHin-bc:wzuucuGokFc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RpSfOHin-bc:wzuucuGokFc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RpSfOHin-bc:wzuucuGokFc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RpSfOHin-bc:wzuucuGokFc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6555397384176270605
title: A Trip to the Dark Site — Leak Sites Analyzed
uri: A-Trip-to-the-Dark-Site-Leak-Sites-Analyzed
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6555397384176270605
content:
Gone are the days when ransomware operators were happy with encrypting files on-site and more or less discretely charged their victims money for a decryption key. What we commonly find now is encryption with the additional threat of leaking stolen data, generally called Double-Extortion (or, as we like to call it: Cyber Extortion or Cy-X). This is a unique form of cybercrime in that we can <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6rQBuaHxF4:OEywHa1nFKk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6rQBuaHxF4:OEywHa1nFKk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6rQBuaHxF4:OEywHa1nFKk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l6rQBuaHxF4:OEywHa1nFKk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6rQBuaHxF4:OEywHa1nFKk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l6rQBuaHxF4:OEywHa1nFKk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=l6rQBuaHxF4:OEywHa1nFKk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=l6rQBuaHxF4:OEywHa1nFKk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1108981830720539451
title: Interpol Busted 11 Members of Nigerian BEC Cybercrime Gang
uri: Interpol-Busted-11-Members-of-Nigerian-BEC-Cybercrime-Gang
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1108981830720539451
content:
A coordinated law enforcement operation has resulted in the arrest of 11 members allegedly belonging to a Nigerian cybercrime gang notorious for perpetrating business email compromise (BEC) attacks targeting more than 50,000 victims in recent years.
The disruption of the BEC network is the result of a ten-day investigation dubbed Operation Falcon II undertaken by the Interpol along with <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TebGibLh31k:0n0RmQLJix0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TebGibLh31k:0n0RmQLJix0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TebGibLh31k:0n0RmQLJix0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TebGibLh31k:0n0RmQLJix0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TebGibLh31k:0n0RmQLJix0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TebGibLh31k:0n0RmQLJix0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TebGibLh31k:0n0RmQLJix0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TebGibLh31k:0n0RmQLJix0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2176598879559549568
title: Google Details Two Zero-Day Bugs Reported in Zoom Clients and MMR Servers
uri: Google-Details-Two-Zero-Day-Bugs-Reported-in-Zoom-Clients-and-MMR-Serv
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2176598879559549568
content:
An exploration of zero-click attack surface for the popular video conferencing solution Zoom has yielded two previously undisclosed security vulnerabilities that could be exploited to crash the service, execute malicious code, and even leak arbitrary areas of its memory.
Natalie Silvanovich of Google Project Zero, who discovered and reported the two flaws last year, said the issues impact both <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0gezwgZnwxs:J5HOUSoUe8k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0gezwgZnwxs:J5HOUSoUe8k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0gezwgZnwxs:J5HOUSoUe8k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0gezwgZnwxs:J5HOUSoUe8k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0gezwgZnwxs:J5HOUSoUe8k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0gezwgZnwxs:J5HOUSoUe8k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0gezwgZnwxs:J5HOUSoUe8k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0gezwgZnwxs:J5HOUSoUe8k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3713964069224844662
title: Cisco Issues Patch for Critical RCE Vulnerability in RCM for StarOS Software
uri: Cisco-Issues-Patch-for-Critical-RCE-Vulnerability-in-RCM-for-StarOS-So
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3713964069224844662
content:
Cisco Systems has rolled out fixes for a critical security flaw affecting Redundancy Configuration Manager (RCM) for Cisco StarOS Software that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and take over vulnerable machines.
Tracked as CVE-2022-20649 (CVSS score: 9.0), the vulnerability stems from the fact that the debug mode has been incorrectly enabled <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elt3_zurr4k:VNc_XhyZqU4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elt3_zurr4k:VNc_XhyZqU4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elt3_zurr4k:VNc_XhyZqU4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=elt3_zurr4k:VNc_XhyZqU4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elt3_zurr4k:VNc_XhyZqU4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=elt3_zurr4k:VNc_XhyZqU4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=elt3_zurr4k:VNc_XhyZqU4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=elt3_zurr4k:VNc_XhyZqU4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5248501210347363517
title: U.S. Sanctions 4 Ukrainians for Working with Russia to Destabilize Ukraine
uri: U-S-Sanctions-4-Ukrainians-for-Working-with-Russia-to-Destabilize-Ukr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5248501210347363517
content:
The U.S. Treasury Department on Thursday announced sanctions against four current and former Ukrainian government officials for engaging in "Russian government-directed influence activities" in the country, including gathering sensitive information about its critical infrastructure.
The agency said the four individuals were involved in different roles as part of a concerted influence campaign to<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hmve4TbrP68:QfPZGy6ajgw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hmve4TbrP68:QfPZGy6ajgw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hmve4TbrP68:QfPZGy6ajgw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hmve4TbrP68:QfPZGy6ajgw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hmve4TbrP68:QfPZGy6ajgw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hmve4TbrP68:QfPZGy6ajgw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hmve4TbrP68:QfPZGy6ajgw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hmve4TbrP68:QfPZGy6ajgw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5613630647773483725
title: Chinese Hackers Spotted Using New UEFI Firmware Implant in Targeted Attacks
uri: Chinese-Hackers-Spotted-Using-New-UEFI-Firmware-Implant-in-Targeted-At
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5613630647773483725
content:
A previously undocumented firmware implant deployed to maintain stealthy persistence as part of a targeted espionage campaign has been linked to the Chinese-speaking Winnti advanced persistent threat group (APT41).
Kaspersky, which codenamed the rootkit MoonBounce, characterized the malware as the "most advanced UEFI firmware implant discovered in the wild to date," adding "the purpose of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9ICewOpkI1s:7xpxTqbfAnA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9ICewOpkI1s:7xpxTqbfAnA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9ICewOpkI1s:7xpxTqbfAnA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9ICewOpkI1s:7xpxTqbfAnA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9ICewOpkI1s:7xpxTqbfAnA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9ICewOpkI1s:7xpxTqbfAnA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9ICewOpkI1s:7xpxTqbfAnA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9ICewOpkI1s:7xpxTqbfAnA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-548865298107419431
title: Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes
uri: Hackers-Planted-Secret-Backdoor-in-Dozens-of-WordPress-Plugins-and-The
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/548865298107419431
content:
In yet another instance of software supply chain attack, dozens of WordPress themes and plugins hosted on a developer's website were backdoored with malicious code in the first half of September 2021 with the goal of infecting further sites.
The backdoor gave the attackers full administrative control over websites that used 40 themes and 53 plugins belonging to AccessPress Themes, a Nepal-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQKxcwQ-AWI:jVw89BLZLyI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQKxcwQ-AWI:jVw89BLZLyI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQKxcwQ-AWI:jVw89BLZLyI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AQKxcwQ-AWI:jVw89BLZLyI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQKxcwQ-AWI:jVw89BLZLyI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AQKxcwQ-AWI:jVw89BLZLyI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=AQKxcwQ-AWI:jVw89BLZLyI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=AQKxcwQ-AWI:jVw89BLZLyI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2214805226446548312
title: Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks
uri: Critical-Bugs-in-Control-Web-Panel-Expose-Linux-Servers-to-RCE-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2214805226446548312
content:
Researchers have disclosed details of two critical security vulnerabilities in Control Web Panel that could be abused as part of an exploit chain to achieve pre-authenticated remote code execution on affected servers.
Tracked as CVE-2021-45467, the issue concerns a case of a file inclusion vulnerability, which occurs when a web application is tricked into exposing or running arbitrary files on <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdK8KCfggn4:pHvwoxWf3G0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdK8KCfggn4:pHvwoxWf3G0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdK8KCfggn4:pHvwoxWf3G0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hdK8KCfggn4:pHvwoxWf3G0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdK8KCfggn4:pHvwoxWf3G0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hdK8KCfggn4:pHvwoxWf3G0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hdK8KCfggn4:pHvwoxWf3G0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hdK8KCfggn4:pHvwoxWf3G0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2122145430891640757
title: Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine
uri: Experts-Find-Strategic-Similarities-b-w-NotPetya-and-WhisperGate-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2122145430891640757
content:
Latest analysis into the wiper malware that targeted dozens of Ukrainian agencies earlier this month has revealed "strategic similarities" to NotPetya malware that was unleashed against the country's infrastructure and elsewhere in 2017.
The malware, dubbed WhisperGate, was discovered by Microsoft last week, which said it observed the destructive cyber campaign targeting government, non-profit, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wpn25EUMsg8:8iVkC6eCjw4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wpn25EUMsg8:8iVkC6eCjw4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wpn25EUMsg8:8iVkC6eCjw4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wpn25EUMsg8:8iVkC6eCjw4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wpn25EUMsg8:8iVkC6eCjw4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wpn25EUMsg8:8iVkC6eCjw4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Wpn25EUMsg8:8iVkC6eCjw4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Wpn25EUMsg8:8iVkC6eCjw4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2310974543889732821
title: Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure
uri: Molerats-Hackers-Hiding-New-Espionage-Attacks-Behind-Public-Cloud-Infr
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2310974543889732821
content:
An active espionage campaign has been attributed to the threat actor known as Molerats that abuses legitimate cloud services like Google Drive and Dropbox to host malware payloads and for command-and-control and the exfiltration of data from targets across the Middle East.
The cyber offensive is believed to have been underway since at least July 2021, according to cloud-based information <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CZdQK-QnZAI:yffrkp3hQ2A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CZdQK-QnZAI:yffrkp3hQ2A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CZdQK-QnZAI:yffrkp3hQ2A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CZdQK-QnZAI:yffrkp3hQ2A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CZdQK-QnZAI:yffrkp3hQ2A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CZdQK-QnZAI:yffrkp3hQ2A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CZdQK-QnZAI:yffrkp3hQ2A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CZdQK-QnZAI:yffrkp3hQ2A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8847479189386833793
title: Emotet Now Using Unconventional IP Address Formats to Evade Detection
uri: Emotet-Now-Using-Unconventional-IP-Address-Formats-to-Evade-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8847479189386833793
content:
Social engineering campaigns involving the deployment of the Emotet malware botnet have been observed using "unconventional" IP address formats for the first time in a bid to sidestep detection by security solutions.
This involves the use of hexadecimal and octal representations of the IP address that, when processed by the underlying operating systems, get automatically converted "to the dotted<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2YYv0NpnVo:e9KiGMwQsK0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2YYv0NpnVo:e9KiGMwQsK0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2YYv0NpnVo:e9KiGMwQsK0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q2YYv0NpnVo:e9KiGMwQsK0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2YYv0NpnVo:e9KiGMwQsK0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q2YYv0NpnVo:e9KiGMwQsK0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Q2YYv0NpnVo:e9KiGMwQsK0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Q2YYv0NpnVo:e9KiGMwQsK0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5464330568616340516
title: High-Severity Rust Programming Bug Could Lead to File, Directory Deletion
uri: High-Severity-Rust-Programming-Bug-Could-Lead-to-File-Directory-Delet
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5464330568616340516
content:
The maintainers of the Rust programming language have released a security update for a high-severity vulnerability that could be abused by a malicious party to purge files and directories from a vulnerable system in an unauthorized manner.
"An attacker could use this security issue to trick a privileged program into deleting files and directories the attacker couldn't otherwise access or delete,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sFnYlxVpNCc:ELvzbWIEcpI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sFnYlxVpNCc:ELvzbWIEcpI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sFnYlxVpNCc:ELvzbWIEcpI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sFnYlxVpNCc:ELvzbWIEcpI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sFnYlxVpNCc:ELvzbWIEcpI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sFnYlxVpNCc:ELvzbWIEcpI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sFnYlxVpNCc:ELvzbWIEcpI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sFnYlxVpNCc:ELvzbWIEcpI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4345050898720206090
title: Hackers Creating Fraudulent Crypto Tokens as Part of 'Rug Pull' Scams
uri: Hackers-Creating-Fraudulent-Crypto-Tokens-as-Part-of-Rug-Pull-Scams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4345050898720206090
content:
Misconfigurations in smart contracts are being exploited by scammers to create malicious cryptocurrency tokens with the goal of stealing funds from unsuspecting users.
The instances of token fraud in the wild include hiding 99% fee functions and concealing backdoor routines, researchers from Check Point said in a report shared with The Hacker News.
Smart contracts are programs stored on the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=381bbyrk4wk:KdH7YEzNHT4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=381bbyrk4wk:KdH7YEzNHT4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=381bbyrk4wk:KdH7YEzNHT4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=381bbyrk4wk:KdH7YEzNHT4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=381bbyrk4wk:KdH7YEzNHT4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=381bbyrk4wk:KdH7YEzNHT4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=381bbyrk4wk:KdH7YEzNHT4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=381bbyrk4wk:KdH7YEzNHT4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-642984707695064521
title: ZTNAs Address Requirements VPNs Cannot. Here's Why.
uri: ZTNAs-Address-Requirements-VPNs-Cannot-Here-s-Why
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/642984707695064521
content:
I recently hopped on the Lookout podcast to talk about virtual private networks (VPNs) and how they've been extended beyond their original use case of connecting remote laptops to your corporate network. Even in this new world where people are using personal devices and cloud apps, VPN continues to be the go-to solution for remote access and cloud access. After my conversation with Hank Schless,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LZj1e8lqZ_U:xRHPFaE2fp8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LZj1e8lqZ_U:xRHPFaE2fp8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LZj1e8lqZ_U:xRHPFaE2fp8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LZj1e8lqZ_U:xRHPFaE2fp8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LZj1e8lqZ_U:xRHPFaE2fp8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LZj1e8lqZ_U:xRHPFaE2fp8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LZj1e8lqZ_U:xRHPFaE2fp8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LZj1e8lqZ_U:xRHPFaE2fp8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3458073741806321221
title: Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities
uri: Mobile-Banking-Trojan-BRATA-Gains-New-Dangerous-Capabilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3458073741806321221
content:
The Android malware tracked as BRATA has been updated with new features that grants it the ability to track device locations and even perform a factory reset in an apparent bid to cover up fraudulent wire transfers.
The latest variants, detected late last year, are said to be distributed through a downloader to avoid being detected by security software, Italian cybersecurity firm Cleafy said in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65-zbgb4R6A:I6sTfQEj0GA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65-zbgb4R6A:I6sTfQEj0GA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65-zbgb4R6A:I6sTfQEj0GA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=65-zbgb4R6A:I6sTfQEj0GA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65-zbgb4R6A:I6sTfQEj0GA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=65-zbgb4R6A:I6sTfQEj0GA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=65-zbgb4R6A:I6sTfQEj0GA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=65-zbgb4R6A:I6sTfQEj0GA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6661116358499125166
title: Hackers Using New Malware Packer DTPacker to Avoid Analysis, Detection
uri: Hackers-Using-New-Malware-Packer-DTPacker-to-Avoid-Analysis-Detection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6661116358499125166
content:
A previously undocumented malware packer named DTPacker has been observed distributing multiple remote access trojans (RATs) and information stealers such as Agent Tesla, Ave Maria, AsyncRAT, and FormBook to plunder information and facilitate follow-on attacks.
"The malware uses multiple obfuscation techniques to evade antivirus, sandboxing, and analysis," enterprise security company Proofpoint <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3_u3Hm61Mg:Wte3H-cN5H8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3_u3Hm61Mg:Wte3H-cN5H8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3_u3Hm61Mg:Wte3H-cN5H8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V3_u3Hm61Mg:Wte3H-cN5H8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3_u3Hm61Mg:Wte3H-cN5H8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V3_u3Hm61Mg:Wte3H-cN5H8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3_u3Hm61Mg:Wte3H-cN5H8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V3_u3Hm61Mg:Wte3H-cN5H8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1795029808748144582
title: Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets
uri: Hackers-Exploited-MSHTML-Flaw-to-Spy-on-Government-and-Defense-Targets
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1795029808748144582
content:
Cybersecurity researchers on Tuesday took the wraps off a multi-stage espionage campaign targeting high-ranking government officials overseeing national security policy and individuals in the defense industry in Western Asia.
The attack is unique as it leverages Microsoft OneDrive as a command-and-control (C2) server and is split into as many as six stages to stay as hidden as possible, Trellix,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lsVFYuqW2kA:TpQg417IgtU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lsVFYuqW2kA:TpQg417IgtU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lsVFYuqW2kA:TpQg417IgtU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lsVFYuqW2kA:TpQg417IgtU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lsVFYuqW2kA:TpQg417IgtU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lsVFYuqW2kA:TpQg417IgtU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lsVFYuqW2kA:TpQg417IgtU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lsVFYuqW2kA:TpQg417IgtU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3351399132780286706
title: Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks
uri: Hackers-Infect-macOS-with-New-DazzleSpy-Backdoor-in-Watering-Hole-Atta
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3351399132780286706
content:
A previously undocumented cyber-espionage malware aimed at Apple's macOS operating system leveraged a Safari web browser exploit as part of a watering hole attack targeting politically active, pro-democracy individuals in Hong Kong.
Slovak cybersecurity firm ESET attributed the intrusion to an actor with "strong technical capabilities," calling out the campaign's overlaps to that of a similar <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tBz5-s0DuMw:IHQALTkDWeU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tBz5-s0DuMw:IHQALTkDWeU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tBz5-s0DuMw:IHQALTkDWeU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tBz5-s0DuMw:IHQALTkDWeU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tBz5-s0DuMw:IHQALTkDWeU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tBz5-s0DuMw:IHQALTkDWeU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tBz5-s0DuMw:IHQALTkDWeU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tBz5-s0DuMw:IHQALTkDWeU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5806569773555123845
title: TrickBot Malware Using New Techniques to Evade Web Injection Attacks
uri: TrickBot-Malware-Using-New-Techniques-to-Evade-Web-Injection-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5806569773555123845
content:
The cybercrime operators behind the notorious TrickBot malware have once again upped the ante by fine-tuning its techniques by adding multiple layers of defense to slip past antimalware products.
"As part of that escalation, malware injections have been fitted with added protection to keep researchers out and get through security controls," IBM Trusteer said in a report. "In most cases, these <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=54duMWDrNOc:lXiPgoKsX5w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=54duMWDrNOc:lXiPgoKsX5w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=54duMWDrNOc:lXiPgoKsX5w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=54duMWDrNOc:lXiPgoKsX5w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=54duMWDrNOc:lXiPgoKsX5w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=54duMWDrNOc:lXiPgoKsX5w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=54duMWDrNOc:lXiPgoKsX5w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=54duMWDrNOc:lXiPgoKsX5w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7721119630617509571
title: Google Drops FLoC and Introduces Topics API to Replace Tracking Cookies for Ads
uri: Google-Drops-FLoC-and-Introduces-Topics-API-to-Replace-Tracking-Cookie
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7721119630617509571
content:
Google on Tuesday announced that it is abandoning its controversial plans for replacing third-party cookies in favor of a new Privacy Sandbox proposal called Topics, which categorizes users' browsing habits into approximately 350 topics.
Thee new framework, which takes the place of FLoC (short for Federated Learning of Cohorts), slots users' browsing history for a given week into a handful of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dVPj_2DX7p8:YAGTS3BNlM8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dVPj_2DX7p8:YAGTS3BNlM8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dVPj_2DX7p8:YAGTS3BNlM8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dVPj_2DX7p8:YAGTS3BNlM8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dVPj_2DX7p8:YAGTS3BNlM8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dVPj_2DX7p8:YAGTS3BNlM8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dVPj_2DX7p8:YAGTS3BNlM8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dVPj_2DX7p8:YAGTS3BNlM8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6406908310000637797
title: 12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access
uri: 12-Year-Old-Polkit-Flaw-Lets-Unprivileged-Linux-Users-Gain-Root-Access
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6406908310000637797
content:
A 12-year-old security vulnerability has been disclosed in a system utility called Polkit that grants attackers root privileges on Linux systems, even as a proof-of-concept (PoC) exploit has emerged in the wild merely hours after technical details of the bug became public.
Dubbed "PwnKit" by cybersecurity firm Qualys, the weakness impacts a component in polkit called pkexec, a program that's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BPUmmg7oua4:RrpxhYSiQzw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BPUmmg7oua4:RrpxhYSiQzw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BPUmmg7oua4:RrpxhYSiQzw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BPUmmg7oua4:RrpxhYSiQzw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BPUmmg7oua4:RrpxhYSiQzw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BPUmmg7oua4:RrpxhYSiQzw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BPUmmg7oua4:RrpxhYSiQzw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BPUmmg7oua4:RrpxhYSiQzw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-791975756749198594
title: Initial Access Broker Involved in Log4Shell Attacks Against VMware Horizon Servers
uri: Initial-Access-Broker-Involved-in-Log4Shell-Attacks-Against-VMware-Hor
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/791975756749198594
content:
An initial access broker group tracked as Prophet Spider has been linked to a set of malicious activities that exploits the Log4Shell vulnerability in unpatched VMware Horizon Servers.
According to new research published by BlackBerry Research &amp; Intelligence and Incident Response (IR) teams today, the cybercrime actor has been opportunistically weaponizing the shortcoming to download a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TR73W8kykQo:5OmUh-tBPHE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TR73W8kykQo:5OmUh-tBPHE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TR73W8kykQo:5OmUh-tBPHE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TR73W8kykQo:5OmUh-tBPHE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TR73W8kykQo:5OmUh-tBPHE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TR73W8kykQo:5OmUh-tBPHE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TR73W8kykQo:5OmUh-tBPHE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TR73W8kykQo:5OmUh-tBPHE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8286572614600183888
title: Webinar: How to See More, But Respond Less with Enhanced Threat Visibility
uri: Webinar-How-to-See-More-But-Respond-Less-with-Enhanced-Threat-Visibi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8286572614600183888
content:
The subject of threat visibility is a recurring one in cybersecurity. With an expanding attack surface due to the remote work transformation, cloud and SaaS computing and the proliferation of personal devices, seeing all the threats that are continuously bombarding the company is beyond challenging. This especially rings true for small to medium-sized enterprises with limited security budgets <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TmMK72UhcQA:X6xenD8Uhtw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TmMK72UhcQA:X6xenD8Uhtw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TmMK72UhcQA:X6xenD8Uhtw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TmMK72UhcQA:X6xenD8Uhtw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TmMK72UhcQA:X6xenD8Uhtw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TmMK72UhcQA:X6xenD8Uhtw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TmMK72UhcQA:X6xenD8Uhtw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TmMK72UhcQA:X6xenD8Uhtw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2255811040781770847
title: Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability
uri: Apple-Releases-iOS-and-macOS-Updates-to-Patch-Actively-Exploited-0-Day
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2255811040781770847
content:
Apple on Wednesday released iOS 15.3 and macOS Monterey 12.2 with a fix for the privacy-defeating bug in Safari, as well as to contain a zero-day flaw, which it said has been exploited in the wild to break into its devices.
Tracked as CVE-2022-22587, the vulnerability relates to a memory corruption issue in the IOMobileFrameBuffer component that could be abused by a malicious application to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B_3e1Ak_BA:l5hyKcIBIlc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B_3e1Ak_BA:l5hyKcIBIlc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B_3e1Ak_BA:l5hyKcIBIlc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_B_3e1Ak_BA:l5hyKcIBIlc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B_3e1Ak_BA:l5hyKcIBIlc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_B_3e1Ak_BA:l5hyKcIBIlc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_B_3e1Ak_BA:l5hyKcIBIlc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_B_3e1Ak_BA:l5hyKcIBIlc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1739109171629645081
title: Hackers Using New Evasive Technique to Deliver AsyncRAT Malware
uri: Hackers-Using-New-Evasive-Technique-to-Deliver-AsyncRAT-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1739109171629645081
content:
A new, sophisticated phishing attack has been observed delivering the AsyncRAT trojan as part of a malware campaign that's believed to have commenced in September 2021.
"Through a simple email phishing tactic with an html attachment, threat attackers are delivering AsyncRAT (a remote access trojan) designed to remotely monitor and control its infected computers through a secure, encrypted <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hpQH86mK7xI:LZMrK-3Ph8Q:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hpQH86mK7xI:LZMrK-3Ph8Q:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hpQH86mK7xI:LZMrK-3Ph8Q:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hpQH86mK7xI:LZMrK-3Ph8Q:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hpQH86mK7xI:LZMrK-3Ph8Q:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hpQH86mK7xI:LZMrK-3Ph8Q:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hpQH86mK7xI:LZMrK-3Ph8Q:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hpQH86mK7xI:LZMrK-3Ph8Q:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3801445765853516500
title: Widespread FluBot and TeaBot Malware Campaigns Targeting Android Devices
uri: Widespread-FluBot-and-TeaBot-Malware-Campaigns-Targeting-Android-Devic
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3801445765853516500
content:
Researchers from the Bitdefender Mobile Threats team said they have intercepted more than 100,000 malicious SMS messages attempting to distribute Flubot malware since the beginning of December.
"Findings indicate attackers are modifying their subject lines and using older yet proven scams to entice users to click," the Romanian cybersecurity firm detailed in a report published Wednesday. "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_OsMlteFHTI:Cf0CosKQC-o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_OsMlteFHTI:Cf0CosKQC-o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_OsMlteFHTI:Cf0CosKQC-o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_OsMlteFHTI:Cf0CosKQC-o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_OsMlteFHTI:Cf0CosKQC-o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_OsMlteFHTI:Cf0CosKQC-o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_OsMlteFHTI:Cf0CosKQC-o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_OsMlteFHTI:Cf0CosKQC-o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3342782622020551119
title: Patching the CentOS 8 Encryption Bug is Urgent – What Are Your Plans?
uri: Patching-the-CentOS-8-Encryption-Bug-is-Urgent-What-Are-Your-Plans
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3342782622020551119
content:
There are three things you can be sure of in life: death, taxes – and new CVEs. For organizations that rely on CentOS 8, the inevitable has now happened, and it didn’t take long. Just two weeks after reaching the official end of life, something broke spectacularly, leaving CentOS 8 users at major risk of a severe attack – and with no support from CentOS.
You’d think that this issue no longer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNHLnXgrf3E:TyhIWahtLJA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNHLnXgrf3E:TyhIWahtLJA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNHLnXgrf3E:TyhIWahtLJA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nNHLnXgrf3E:TyhIWahtLJA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNHLnXgrf3E:TyhIWahtLJA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nNHLnXgrf3E:TyhIWahtLJA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nNHLnXgrf3E:TyhIWahtLJA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nNHLnXgrf3E:TyhIWahtLJA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3604871998935860001
title: Chaes Banking Trojan Hijacks Chrome Browser with Malicious Extensions
uri: Chaes-Banking-Trojan-Hijacks-Chrome-Browser-with-Malicious-Extensions
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3604871998935860001
content:
A financially-motivated malware campaign has compromised over 800 WordPress websites to deliver a banking trojan dubbed Chaes targeting Brazilian customers of Banco do Brasil, Loja Integrada, Mercado Bitcoin, Mercado Livre, and Mercado Pago.
First documented by Cybereason in November 2020, the info-stealing malware is delivered via a sophisticated infection chain that's engineered to harvest <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q_BM_Tk5Br8:_dF3mNEQ-ks:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q_BM_Tk5Br8:_dF3mNEQ-ks:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q_BM_Tk5Br8:_dF3mNEQ-ks:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q_BM_Tk5Br8:_dF3mNEQ-ks:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q_BM_Tk5Br8:_dF3mNEQ-ks:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q_BM_Tk5Br8:_dF3mNEQ-ks:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=q_BM_Tk5Br8:_dF3mNEQ-ks:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=q_BM_Tk5Br8:_dF3mNEQ-ks:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2651926745308761673
title: Microsoft Mitigated Record-Breaking 3.47 Tbps DDoS Attack on Azure Customers
uri: Microsoft-Mitigated-Record-Breaking-3-47-Tbps-DDoS-Attack-on-Azure-Cus
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2651926745308761673
content:
Microsoft this week revealed that it had fended off a record number of distributed denial-of-service (DDoS) attacks aimed at its customers in 2021, three of which surpassed 2.4 terabit per second (Tbps).
One of the DDoS attacks took place in November, targeting an unnamed Azure customer in Asia and lasted a total of 15 minutes. It hit a peak throughput of 3.47 Tbps and a packet rate of 340 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7zTCd_RAbR4:To48OlzGItI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7zTCd_RAbR4:To48OlzGItI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7zTCd_RAbR4:To48OlzGItI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7zTCd_RAbR4:To48OlzGItI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7zTCd_RAbR4:To48OlzGItI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7zTCd_RAbR4:To48OlzGItI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7zTCd_RAbR4:To48OlzGItI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7zTCd_RAbR4:To48OlzGItI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4785357974238864721
title: QNAP Warns of DeadBolt Ransomware Targeting Internet-Facing NAS Devices
uri: QNAP-Warns-of-DeadBolt-Ransomware-Targeting-Internet-Facing-NAS-Device
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4785357974238864721
content:
Taiwanese company QNAP has warned customers to secure network-attached storage (NAS) appliances and routers against a new ransomware variant called DeadBolt.
"DeadBolt has been widely targeting all NAS exposed to the Internet without any protection and encrypting users' data for Bitcoin ransom," the company said. "QNAP urges all QNAP NAS users to […] immediately update QTS to the latest <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybLtOmQxe1E:hlLP9eJbxKU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybLtOmQxe1E:hlLP9eJbxKU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybLtOmQxe1E:hlLP9eJbxKU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ybLtOmQxe1E:hlLP9eJbxKU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybLtOmQxe1E:hlLP9eJbxKU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ybLtOmQxe1E:hlLP9eJbxKU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ybLtOmQxe1E:hlLP9eJbxKU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ybLtOmQxe1E:hlLP9eJbxKU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-167435655473811110
title: North Korean Hackers Return with Stealthier Variant of KONNI RAT Malware
uri: North-Korean-Hackers-Return-with-Stealthier-Variant-of-KONNI-RAT-Malwa
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/167435655473811110
content:
A cyberespionage group with ties to North Korea has resurfaced with a stealthier variant of its remote access trojan called Konni to attack political institutions located in Russia and South Korea.
"The authors are constantly making code improvements," Malwarebytes researcher Roberto Santos said. "Their efforts are aimed at breaking the typical flow recorded by sandboxes and making detection <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XSiAL17vpSE:gFnyUzry-4c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XSiAL17vpSE:gFnyUzry-4c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XSiAL17vpSE:gFnyUzry-4c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XSiAL17vpSE:gFnyUzry-4c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XSiAL17vpSE:gFnyUzry-4c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XSiAL17vpSE:gFnyUzry-4c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XSiAL17vpSE:gFnyUzry-4c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XSiAL17vpSE:gFnyUzry-4c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7398741327171142997
title: North Korean Hackers Using Windows Update Service to Infect PCs with Malware
uri: North-Korean-Hackers-Using-Windows-Update-Service-to-Infect-PCs-with-M
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7398741327171142997
content:
The notorious Lazarus Group actor has been observed mounting a new campaign that makes use of the Windows Update service to execute its malicious payload, expanding the arsenal of living-off-the-land (LotL) techniques leveraged by the APT group to further its objectives.
The Lazarus Group, also known as APT38, Hidden Cobra, Whois Hacking Team, and Zinc, is the moniker assigned to the North <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ln0P-M3pKWw:xvGg3EXKuoQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ln0P-M3pKWw:xvGg3EXKuoQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ln0P-M3pKWw:xvGg3EXKuoQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ln0P-M3pKWw:xvGg3EXKuoQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ln0P-M3pKWw:xvGg3EXKuoQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ln0P-M3pKWw:xvGg3EXKuoQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Ln0P-M3pKWw:xvGg3EXKuoQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Ln0P-M3pKWw:xvGg3EXKuoQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6870377388647077727
title: Hackers Using Device Registration Trick to Attack Enterprises with Lateral Phishing
uri: Hackers-Using-Device-Registration-Trick-to-Attack-Enterprises-with-Lat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6870377388647077727
content:
Microsoft has disclosed details of a large-scale, multi-phase phishing campaign that uses stolen credentials to register devices on a victim's network to further propagate spam emails and widen the infection pool.
The tech giant said the attacks manifested through accounts that were not secured using multi-factor authentication (MFA), thereby making it possible for the adversary to take <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BIzr571rzxk:P1GgiRYif9o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BIzr571rzxk:P1GgiRYif9o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BIzr571rzxk:P1GgiRYif9o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BIzr571rzxk:P1GgiRYif9o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BIzr571rzxk:P1GgiRYif9o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BIzr571rzxk:P1GgiRYif9o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BIzr571rzxk:P1GgiRYif9o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BIzr571rzxk:P1GgiRYif9o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5380785989317361504
title: How Wazuh Can Improve Digital Security for Businesses
uri: How-Wazuh-Can-Improve-Digital-Security-for-Businesses
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5380785989317361504
content:
2021 was a year peppered by cyberattacks, with numerous data breaches happening. Not only that, but ransomware has also become a prominent player in the hackers' world.
Now, more than ever, it's important for enterprises to step up cybersecurity measures. They can do this through several pieces of technology, such as an open-source security platform like Wazuh. 
Wazuh is a free and open source <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iBn2d1Zi7Vw:UJ9KWNVLxeo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iBn2d1Zi7Vw:UJ9KWNVLxeo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iBn2d1Zi7Vw:UJ9KWNVLxeo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iBn2d1Zi7Vw:UJ9KWNVLxeo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iBn2d1Zi7Vw:UJ9KWNVLxeo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iBn2d1Zi7Vw:UJ9KWNVLxeo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iBn2d1Zi7Vw:UJ9KWNVLxeo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iBn2d1Zi7Vw:UJ9KWNVLxeo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8162908154428208203
title: German Court Rules Websites Embedding Google Fonts Violates GDPR
uri: German-Court-Rules-Websites-Embedding-Google-Fonts-Violates-GDPR
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8162908154428208203
content:
A regional court in the German city of Munich has ordered a website operator to pay €100 in damages for transferring a user's personal data — i.e., IP address — to Google via the search giant's Fonts library without the individual's consent.
The unauthorized disclosure of the plaintiff's IP address by the unnamed website to Google constitutes a contravention of the user's privacy rights, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCES3J1qi3U:_bZU6kq9JK0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCES3J1qi3U:_bZU6kq9JK0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCES3J1qi3U:_bZU6kq9JK0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rCES3J1qi3U:_bZU6kq9JK0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCES3J1qi3U:_bZU6kq9JK0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rCES3J1qi3U:_bZU6kq9JK0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=rCES3J1qi3U:_bZU6kq9JK0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=rCES3J1qi3U:_bZU6kq9JK0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3764827962707062041
title: Researchers Use Natural Silk Fibers to Generate Secure Keys for Strong Authentication
uri: Researchers-Use-Natural-Silk-Fibers-to-Generate-Secure-Keys-for-Strong
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3764827962707062041
content:
A group of academics at South Korea's Gwangju Institute of Science and Technology (GIST) have utilized natural silk fibers from domesticated silkworms to build an environmentally friendly digital security system that they say is "practically unbreachable."
"The first natural physical unclonable function (PUF) […] takes advantage of the diffraction of light through natural microholes in native <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qwj6qrcs-gI:tHS_EflLJRE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qwj6qrcs-gI:tHS_EflLJRE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qwj6qrcs-gI:tHS_EflLJRE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qwj6qrcs-gI:tHS_EflLJRE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qwj6qrcs-gI:tHS_EflLJRE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qwj6qrcs-gI:tHS_EflLJRE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qwj6qrcs-gI:tHS_EflLJRE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qwj6qrcs-gI:tHS_EflLJRE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6859061148978527335
title: Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam
uri: Apple-Pays-100-500-Bounty-to-Hacker-Who-Found-Way-to-Hack-MacBook-Web
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6859061148978527335
content:
Apple last year fixed a new set of macOS vulnerabilities that exposed Safari browser to attack, potentially allowing malicious actors to access users' online accounts, microphone, and webcam.
Security researcher Ryan Pickren, who discovered and reported the bugs to the iPhone maker, was compensated with a $100,500 bug bounty, underscoring the severity of the issues.
By exploiting a chain of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=40Ia0mC6EAQ:xsGN3vpmuIE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=40Ia0mC6EAQ:xsGN3vpmuIE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=40Ia0mC6EAQ:xsGN3vpmuIE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=40Ia0mC6EAQ:xsGN3vpmuIE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=40Ia0mC6EAQ:xsGN3vpmuIE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=40Ia0mC6EAQ:xsGN3vpmuIE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=40Ia0mC6EAQ:xsGN3vpmuIE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=40Ia0mC6EAQ:xsGN3vpmuIE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8648117104354008786
title: DeepDotWeb News Site Operator Sentenced to 8 Years for Money Laundering
uri: DeepDotWeb-News-Site-Operator-Sentenced-to-8-Years-for-Money-Launderin
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8648117104354008786
content:
An Israeli national was sentenced to 97 months in prison in connection with operating the DeepDotWeb (DDW) clearnet website, nearly a year after the individual pleaded guilty to the charges.
Tal Prihar, 37, an Israeli citizen residing in Brazil, is said to have played the role of an administrator of DDW since the website became functional in October 2013. He pleaded guilty to money laundering <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zaul1lDe_zg:uo4Yv7nOvac:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zaul1lDe_zg:uo4Yv7nOvac:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zaul1lDe_zg:uo4Yv7nOvac:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zaul1lDe_zg:uo4Yv7nOvac:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zaul1lDe_zg:uo4Yv7nOvac:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zaul1lDe_zg:uo4Yv7nOvac:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zaul1lDe_zg:uo4Yv7nOvac:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zaul1lDe_zg:uo4Yv7nOvac:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3198553090183501726
title: Your Graphics Card Fingerprint Can Be Used to Track Your Activities Across the Web
uri: Your-Graphics-Card-Fingerprint-Can-Be-Used-to-Track-Your-Activities-Ac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3198553090183501726
content:
Researchers have demonstrated a new type of fingerprinting technique that exploits a machine's graphics processing unit (GPU) as a means to track users across the web persistently.
Dubbed DrawnApart, the method "identifies a device from the unique properties of its GPU stack," researchers from Australia, France, and Israel said in a new paper," adding " variations in speed among the multiple <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IKTCdQokLZg:d6XHG-YhT18:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IKTCdQokLZg:d6XHG-YhT18:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IKTCdQokLZg:d6XHG-YhT18:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IKTCdQokLZg:d6XHG-YhT18:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IKTCdQokLZg:d6XHG-YhT18:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IKTCdQokLZg:d6XHG-YhT18:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=IKTCdQokLZg:d6XHG-YhT18:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=IKTCdQokLZg:d6XHG-YhT18:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8477665275375413970
title: New SureMDM Vulnerabilities Could Expose Companies to Supply Chain Attacks
uri: New-SureMDM-Vulnerabilities-Could-Expose-Companies-to-Supply-Chain-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8477665275375413970
content:
A number of security vulnerabilities have been disclosed in 42 Gears' SureMDM device management solution that could be weaponized by attackers to perform a supply chain compromise against affected organizations.
Cybersecurity firm Immersive Labs, in a technical write-up detailing the findings, said that 42Gears released a series of updates between November 2021 and January 2022 to close out <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCOtAyw_I4Y:IASSXiJobXs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCOtAyw_I4Y:IASSXiJobXs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCOtAyw_I4Y:IASSXiJobXs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oCOtAyw_I4Y:IASSXiJobXs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCOtAyw_I4Y:IASSXiJobXs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oCOtAyw_I4Y:IASSXiJobXs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oCOtAyw_I4Y:IASSXiJobXs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oCOtAyw_I4Y:IASSXiJobXs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4522457598441732728
title: New Samba Bug Allows Remote Attackers to Execute Arbitrary Code as Root
uri: New-Samba-Bug-Allows-Remote-Attackers-to-Execute-Arbitrary-Code-as-Roo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4522457598441732728
content:
Samba has issued software updates to address multiple security vulnerabilities that, if successfully exploited, could allow remote attackers to execute arbitrary code with the highest privileges on affected installations.
Chief among them is CVE-2021-44142, which impacts all versions of Samba before 4.13.17 and concerns an out-of-bounds heap read/write vulnerability in the VFS module "vfs_fruit"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FYZgzrQ3OTE:RVPPLKrj-FM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FYZgzrQ3OTE:RVPPLKrj-FM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FYZgzrQ3OTE:RVPPLKrj-FM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FYZgzrQ3OTE:RVPPLKrj-FM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FYZgzrQ3OTE:RVPPLKrj-FM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FYZgzrQ3OTE:RVPPLKrj-FM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FYZgzrQ3OTE:RVPPLKrj-FM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FYZgzrQ3OTE:RVPPLKrj-FM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4089492277649042562
title: Behind The Buzzword: Four Ways to Assess Your Zero Trust Security Posture
uri: Behind-The-Buzzword-Four-Ways-to-Assess-Your-Zero-Trust-Security-Post
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4089492277649042562
content:
With just about everything delivered from the cloud these days, employees can now collaborate and access what they need from anywhere and on any device. While this newfound flexibility has changed the way we think about productivity, it has also created new cybersecurity challenges for organizations.
Historically, enterprise data was stored inside data centers and guarded by perimeter-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=73I1gcP0Hww:YIQ1fOufb14:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=73I1gcP0Hww:YIQ1fOufb14:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=73I1gcP0Hww:YIQ1fOufb14:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=73I1gcP0Hww:YIQ1fOufb14:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=73I1gcP0Hww:YIQ1fOufb14:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=73I1gcP0Hww:YIQ1fOufb14:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=73I1gcP0Hww:YIQ1fOufb14:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=73I1gcP0Hww:YIQ1fOufb14:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8105557713228606535
title: Researchers Uncover New Iranian Hacking Campaign Targeting Turkish Users
uri: Researchers-Uncover-New-Iranian-Hacking-Campaign-Targeting-Turkish-Use
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8105557713228606535
content:
Details have emerged about a previously undocumented malware campaign undertaken by the Iranian MuddyWater advanced persistent threat (APT) group targeting Turkish private organizations and governmental institutions.
"This campaign utilizes malicious PDFs, XLS files and Windows executables to deploy malicious PowerShell-based downloaders acting as initial footholds into the target's enterprise,"<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sz_3OErO88k:rJnvUuajo5o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sz_3OErO88k:rJnvUuajo5o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sz_3OErO88k:rJnvUuajo5o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sz_3OErO88k:rJnvUuajo5o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sz_3OErO88k:rJnvUuajo5o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sz_3OErO88k:rJnvUuajo5o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Sz_3OErO88k:rJnvUuajo5o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Sz_3OErO88k:rJnvUuajo5o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8050468381656120664
title: Ukraine Continues to Face Cyber Espionage Attacks from Russian Hackers
uri: Ukraine-Continues-to-Face-Cyber-Espionage-Attacks-from-Russian-Hackers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8050468381656120664
content:
Cybersecurity researchers on Monday said they uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021.
Broadcom-owned Symantec, in a new report published Monday, attributed the attacks to an actor tracked as Gamaredon (aka Shuckworm or Armageddon), a cyber-espionage collective known to be active since at least 2013.
In November 2021,<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6DVkAoyQ1gY:YZ_18uQfJ9w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6DVkAoyQ1gY:YZ_18uQfJ9w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6DVkAoyQ1gY:YZ_18uQfJ9w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6DVkAoyQ1gY:YZ_18uQfJ9w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6DVkAoyQ1gY:YZ_18uQfJ9w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6DVkAoyQ1gY:YZ_18uQfJ9w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6DVkAoyQ1gY:YZ_18uQfJ9w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6DVkAoyQ1gY:YZ_18uQfJ9w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5905779128667039459
title: Reasons Why Every Business is a Target of DDoS Attacks
uri: Reasons-Why-Every-Business-is-a-Target-of-DDoS-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5905779128667039459
content:
DDoS (Distributed Denial of Service) attacks are making headlines almost every day. 2021 saw a 434% upsurge in DDoS attacks, 5.5 times higher than 2020. Q3 2021 saw a 24% increase in the number of DDoS attacks in comparison to Q3 2020. 
Advanced DDoS attacks that are typically targeted, known as smart attacks, rose by 31% in the same period. Further, 73% of DDoS attacks in Q3 2021 were <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KeNrmDffrek:YckMtI2ZOJw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KeNrmDffrek:YckMtI2ZOJw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KeNrmDffrek:YckMtI2ZOJw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KeNrmDffrek:YckMtI2ZOJw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KeNrmDffrek:YckMtI2ZOJw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KeNrmDffrek:YckMtI2ZOJw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KeNrmDffrek:YckMtI2ZOJw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KeNrmDffrek:YckMtI2ZOJw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4465365642883857691
title: Iranian Hackers Using New PowerShell Backdoor in Cyber Espionage Attacks
uri: Iranian-Hackers-Using-New-PowerShell-Backdoor-in-Cyber-Espionage-Attac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4465365642883857691
content:
An advanced persistent threat group with links to Iran has updated its malware toolset to include a novel PowerShell-based implant called PowerLess Backdoor, according to new research published by Cybereason.
The Boston-headquartered cybersecurity company attributed the malware to a hacking group known as Charming Kitten (aka Phosphorous, APT35, or TA453), while also calling out the backdoor's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-K1yBLnNN0:jNsOm2g38cg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-K1yBLnNN0:jNsOm2g38cg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-K1yBLnNN0:jNsOm2g38cg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-K1yBLnNN0:jNsOm2g38cg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-K1yBLnNN0:jNsOm2g38cg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-K1yBLnNN0:jNsOm2g38cg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-K1yBLnNN0:jNsOm2g38cg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-K1yBLnNN0:jNsOm2g38cg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3262002505426908315
title: Solarmarker Malware Uses Novel Techniques to Persist on Hacked Systems
uri: Solarmarker-Malware-Uses-Novel-Techniques-to-Persist-on-Hacked-Systems
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3262002505426908315
content:
In a sign that threat actors continuously shift tactics and update their defensive measures, the operators of the SolarMarker information stealer and backdoor have been found leveraging stealthy tricks to establish long-term persistence on compromised systems.
Cybersecurity firm Sophos, which spotted the new behavior, said that the remote access implants are still being detected on targeted <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yAyErssMZ-g:EQ49i5DFFZg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yAyErssMZ-g:EQ49i5DFFZg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yAyErssMZ-g:EQ49i5DFFZg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yAyErssMZ-g:EQ49i5DFFZg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yAyErssMZ-g:EQ49i5DFFZg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yAyErssMZ-g:EQ49i5DFFZg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yAyErssMZ-g:EQ49i5DFFZg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yAyErssMZ-g:EQ49i5DFFZg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8089747374139491266
title: Dozens of Security Flaws Discovered in UEFI Firmware Used by Several Vendors
uri: Dozens-of-Security-Flaws-Discovered-in-UEFI-Firmware-Used-by-Several-V
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8089747374139491266
content:
As many as 23 new high severity security vulnerabilities have been disclosed in different implementations of Unified Extensible Firmware Interface (UEFI) firmware used by numerous vendors, including Bull Atos, Fujitsu, HP, Juniper Networks, Lenovo, among others.
The vulnerabilities reside in Insyde Software's InsydeH2O UEFI firmware, according to enterprise firmware security company Binarly, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OkskudmJFuk:SiTSUYPgcG8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OkskudmJFuk:SiTSUYPgcG8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OkskudmJFuk:SiTSUYPgcG8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OkskudmJFuk:SiTSUYPgcG8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OkskudmJFuk:SiTSUYPgcG8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OkskudmJFuk:SiTSUYPgcG8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=OkskudmJFuk:SiTSUYPgcG8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=OkskudmJFuk:SiTSUYPgcG8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3994503210911403907
title: Hacker Group 'Moses Staff' Using New StrifeWater RAT in Ransomware Attacks
uri: Hacker-Group-Moses-Staff-Using-New-StrifeWater-RAT-in-Ransomware-Att
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3994503210911403907
content:
A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remote access trojan (RAT) that masquerades as the Windows Calculator app as part of a conscious effort to stay under the radar.
Cybersecurity company Cybereason, which has been tracking the operations of the Iranian actor known as Moses Staff<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CGgOMC67xyY:e1f5ItFlGKo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CGgOMC67xyY:e1f5ItFlGKo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CGgOMC67xyY:e1f5ItFlGKo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CGgOMC67xyY:e1f5ItFlGKo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CGgOMC67xyY:e1f5ItFlGKo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CGgOMC67xyY:e1f5ItFlGKo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CGgOMC67xyY:e1f5ItFlGKo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CGgOMC67xyY:e1f5ItFlGKo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2857096164667287572
title: Critical Bug Found in WordPress Plugin for Elementor with Over a Million Installations
uri: Critical-Bug-Found-in-WordPress-Plugin-for-Elementor-with-Over-a-Milli
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2857096164667287572
content:
A WordPress plugin with over one million installs has been found to contain a critical vulnerability that could result in the execution of arbitrary code on compromised websites.
The plugin in question is Essential Addons for Elementor, which provides WordPress site owners with a library of over 80 elements and extensions to help design and customize pages and posts.
"This vulnerability allows <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=azwk3euhyhI:TV07X_RviPk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=azwk3euhyhI:TV07X_RviPk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=azwk3euhyhI:TV07X_RviPk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=azwk3euhyhI:TV07X_RviPk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=azwk3euhyhI:TV07X_RviPk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=azwk3euhyhI:TV07X_RviPk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=azwk3euhyhI:TV07X_RviPk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=azwk3euhyhI:TV07X_RviPk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4413507845802326294
title: New Malware Used by SolarWinds Attackers Went Undetected for Years
uri: New-Malware-Used-by-SolarWinds-Attackers-Went-Undetected-for-Years
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4413507845802326294
content:
The threat actor behind the supply chain compromise of SolarWinds has continued to expand its malware arsenal with new tools and techniques that were deployed in attacks as early as 2019, once indicative of the elusive nature of the campaigns and the adversary's ability to maintain persistent access for years.
According to cybersecurity firm CrowdStrike, which detailed the novel tactics adopted <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PRdleYNuYRE:TowAw-_n8_A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PRdleYNuYRE:TowAw-_n8_A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PRdleYNuYRE:TowAw-_n8_A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PRdleYNuYRE:TowAw-_n8_A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PRdleYNuYRE:TowAw-_n8_A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PRdleYNuYRE:TowAw-_n8_A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PRdleYNuYRE:TowAw-_n8_A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PRdleYNuYRE:TowAw-_n8_A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8546841171858777669
title: Cynet's Keys to Extend Threat Visibility
uri: Cynet-s-Keys-to-Extend-Threat-Visibility
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8546841171858777669
content:
We hear about the need for better visibility in the cybersecurity space – detecting threats earlier and more accurately. We often hear about the dwell time and the time to identify and contain a data breach. Many of us are familiar with IBM’s Cost of a Data Breach Report that has been tracking this statistic for years. In the 2021 report, IBM found that, on average, it takes an average of 212 <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbCLpuMjFWw:9qD45vgYHWM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbCLpuMjFWw:9qD45vgYHWM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbCLpuMjFWw:9qD45vgYHWM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CbCLpuMjFWw:9qD45vgYHWM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbCLpuMjFWw:9qD45vgYHWM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CbCLpuMjFWw:9qD45vgYHWM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CbCLpuMjFWw:9qD45vgYHWM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CbCLpuMjFWw:9qD45vgYHWM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3533715392540712236
title: New Wave of Cyber Attacks Target Palestine with Political Bait and Malware
uri: New-Wave-of-Cyber-Attacks-Target-Palestine-with-Political-Bait-and-Mal
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3533715392540712236
content:
Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.
The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0MQ0-X977s8:D5vJpgJT-pk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0MQ0-X977s8:D5vJpgJT-pk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0MQ0-X977s8:D5vJpgJT-pk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0MQ0-X977s8:D5vJpgJT-pk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0MQ0-X977s8:D5vJpgJT-pk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0MQ0-X977s8:D5vJpgJT-pk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0MQ0-X977s8:D5vJpgJT-pk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0MQ0-X977s8:D5vJpgJT-pk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7442998225663129846
title: New Variant of UpdateAgent Malware Infects Mac Computers with Adware
uri: New-Variant-of-UpdateAgent-Malware-Infects-Mac-Computers-with-Adware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7442998225663129846
content:
Microsoft on Wednesday shed light on a previously undocumented Mac trojan that it said has underwent several iterations since its first appearance in September 2020, effectively granting it an "increasing progression of sophisticated capabilities."
The company's Microsoft 365 Defender Threat Intelligence Team dubbed the new malware family "UpdateAgent," charting its evolution from a barebones <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80K5f5ryj7s:xUIZU7e8Q04:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80K5f5ryj7s:xUIZU7e8Q04:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80K5f5ryj7s:xUIZU7e8Q04:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=80K5f5ryj7s:xUIZU7e8Q04:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80K5f5ryj7s:xUIZU7e8Q04:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=80K5f5ryj7s:xUIZU7e8Q04:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=80K5f5ryj7s:xUIZU7e8Q04:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=80K5f5ryj7s:xUIZU7e8Q04:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-639421349208130472
title: New SEO Poisoning Campaign Distributing Trojanized Versions of Popular Software
uri: New-SEO-Poisoning-Campaign-Distributing-Trojanized-Versions-of-Popular
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/639421349208130472
content:
An ongoing search engine optimization (SEO) poisoning attack campaign has been observed abusing trust in legitimate software utilities to trick users into downloading BATLOADER malware on compromised machines.
"The threat actor used 'free productivity apps installation' or 'free software development tools installation' themes as SEO keywords to lure victims to a compromised website and to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-oRFHhHrH8:aOjl5UqUqMM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-oRFHhHrH8:aOjl5UqUqMM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-oRFHhHrH8:aOjl5UqUqMM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A-oRFHhHrH8:aOjl5UqUqMM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-oRFHhHrH8:aOjl5UqUqMM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A-oRFHhHrH8:aOjl5UqUqMM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=A-oRFHhHrH8:aOjl5UqUqMM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=A-oRFHhHrH8:aOjl5UqUqMM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4839920683057864836
title: How SSPM Simplifies Your SOC2 SaaS Security Posture Audit
uri: How-SSPM-Simplifies-Your-SOC2-SaaS-Security-Posture-Audit
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4839920683057864836
content:
An accountant and a security expert walk into a bar… SOC2 is no joke. 
Whether you're a publicly held or private company, you are probably considering going through a Service Organization Controls (SOC) audit. For publicly held companies, these reports are required by the Securities and Exchange Commission (SEC) and executed by a Certified Public Accountant (CPA). However, customers often ask <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BgcTJZ6PMz4:3kCNxtWg2AE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BgcTJZ6PMz4:3kCNxtWg2AE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BgcTJZ6PMz4:3kCNxtWg2AE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BgcTJZ6PMz4:3kCNxtWg2AE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BgcTJZ6PMz4:3kCNxtWg2AE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BgcTJZ6PMz4:3kCNxtWg2AE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BgcTJZ6PMz4:3kCNxtWg2AE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BgcTJZ6PMz4:3kCNxtWg2AE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2125094620186859104
title: Critical Flaws Discovered in Cisco Small Business RV Series Routers
uri: Critical-Flaws-Discovered-in-Cisco-Small-Business-RV-Series-Routers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2125094620186859104
content:
Cisco has patched multiple critical security vulnerabilities impacting its RV Series routers that could be weaponized to elevate privileges and execute arbitrary code on affected systems, while also warning of the existence of proof-of-concept (PoC) exploit code targeting some of these bugs.
Three of the 15 flaws, tracked as CVE-2022-20699, CVE-2022-20700, and CVE-2022-20707, carry the highest <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K8GLGwwN2OU:wnTIAJ01AQI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K8GLGwwN2OU:wnTIAJ01AQI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K8GLGwwN2OU:wnTIAJ01AQI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K8GLGwwN2OU:wnTIAJ01AQI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K8GLGwwN2OU:wnTIAJ01AQI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K8GLGwwN2OU:wnTIAJ01AQI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K8GLGwwN2OU:wnTIAJ01AQI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K8GLGwwN2OU:wnTIAJ01AQI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2131160461094369753
title: Hackers Exploited 0-Day Vulnerability in Zimbra Email Platform to Spy on Users
uri: Hackers-Exploited-0-Day-Vulnerability-in-Zimbra-Email-Platform-to-Spy
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2131160461094369753
content:
A threat actor, likely Chinese in origin, is actively attempting to exploit a zero-day vulnerability in the Zimbra open-source email platform as part of spear-phishing campaigns that commenced in December 2021.
The espionage operation — codenamed "EmailThief" — was detailed by cybersecurity company Volexity in a technical report published Thursday, noting that successful exploitation of the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYQ5tEOLKGs:KV949FRl0-k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYQ5tEOLKGs:KV949FRl0-k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYQ5tEOLKGs:KV949FRl0-k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYQ5tEOLKGs:KV949FRl0-k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYQ5tEOLKGs:KV949FRl0-k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYQ5tEOLKGs:KV949FRl0-k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eYQ5tEOLKGs:KV949FRl0-k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eYQ5tEOLKGs:KV949FRl0-k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-343638509854319344
title: Russian Gamaredon Hackers Targeted 'Western Government Entity' in Ukraine
uri: Russian-Gamaredon-Hackers-Targeted-Western-Government-Entity-in-Ukra
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/343638509854319344
content:
The Russia-linked Gamaredon hacking group attempted to compromise an unnamed Western government entity operating in Ukraine last month amidst ongoing geopolitical tensions between the two countries.
Palo Alto Networks' Unit 42 threat intelligence team, in a new report publicized on February 3, said that the phishing attack took place on January 19, adding it "mapped out three large clusters of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MNqJYt7q-_U:kNNoBoZFLgU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MNqJYt7q-_U:kNNoBoZFLgU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MNqJYt7q-_U:kNNoBoZFLgU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MNqJYt7q-_U:kNNoBoZFLgU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MNqJYt7q-_U:kNNoBoZFLgU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MNqJYt7q-_U:kNNoBoZFLgU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MNqJYt7q-_U:kNNoBoZFLgU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MNqJYt7q-_U:kNNoBoZFLgU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8371548316629144632
title: Cynet Log4Shell Webinar: A Thorough - And Clear - Explanation
uri: Cynet-Log4Shell-Webinar-A-Thorough-And-Clear-Explanation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8371548316629144632
content:
Most security practitioners are now aware of the Log4Shell vulnerability discovered toward the end of 2021. No one knows how long the vulnerability existed before it was discovered. The past couple of months have had security teams scrambling to patch the Log4Shell vulnerability found in Apache Log4j, a Java library widely used to log error messages in applications. Beyond patching, it's helpful<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ytEslLMqdxA:p8_OJTWsSBc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ytEslLMqdxA:p8_OJTWsSBc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ytEslLMqdxA:p8_OJTWsSBc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ytEslLMqdxA:p8_OJTWsSBc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ytEslLMqdxA:p8_OJTWsSBc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ytEslLMqdxA:p8_OJTWsSBc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ytEslLMqdxA:p8_OJTWsSBc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ytEslLMqdxA:p8_OJTWsSBc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-252843085718544074
title: CISA Warns of Critical Vulnerabilities Discovered in Airspan Networks Mimosa
uri: CISA-Warns-of-Critical-Vulnerabilities-Discovered-in-Airspan-Networks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/252843085718544074
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday published an Industrial Controls Systems Advisory (ICSA) warning of multiple vulnerabilities in the Airspan Networks Mimosa equipment that could be abused to gain remote code execution, create a denial-of-service (DoS) condition, and obtain sensitive information.
"Successful exploitation of these vulnerabilities could <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqJMqfD9KXE:qnJj7Rxk0gI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqJMqfD9KXE:qnJj7Rxk0gI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqJMqfD9KXE:qnJj7Rxk0gI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KqJMqfD9KXE:qnJj7Rxk0gI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqJMqfD9KXE:qnJj7Rxk0gI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KqJMqfD9KXE:qnJj7Rxk0gI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KqJMqfD9KXE:qnJj7Rxk0gI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KqJMqfD9KXE:qnJj7Rxk0gI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6701148121500397224
title: Another Israeli Firm, QuaDream, Caught Weaponizing iPhone Bug for Spyware
uri: Another-Israeli-Firm-QuaDream-Caught-Weaponizing-iPhone-Bug-for-Spyw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6701148121500397224
content:
A now-patched security vulnerability in Apple iOS that was previously found to be exploited by Israeli company NSO Group was also separately weaponized by a different surveillance vendor named QuaDream to hack into the company's devices.
The development was reported by Reuters, citing unnamed sources, noting that "the two rival businesses gained the same ability last year to remotely break into <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ub35ViBmWXI:dFgnJs4h4JQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ub35ViBmWXI:dFgnJs4h4JQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ub35ViBmWXI:dFgnJs4h4JQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ub35ViBmWXI:dFgnJs4h4JQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ub35ViBmWXI:dFgnJs4h4JQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ub35ViBmWXI:dFgnJs4h4JQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ub35ViBmWXI:dFgnJs4h4JQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ub35ViBmWXI:dFgnJs4h4JQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4502099435797907647
title: U.S. Authorities Charge 6 Indian Call Centers Scamming Thousands of Americans
uri: U-S-Authorities-Charge-6-Indian-Call-Centers-Scamming-Thousands-of-Am
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4502099435797907647
content:
A number of India-based call centers and their directors have been indicted for their alleged role in placing tens of millions of scam calls aimed at defrauding thousands of American consumers.
The indictment charged Manu Chawla, Sushil Sachdeva, Nitin Kumar Wadwani, Swarndeep Singh, Dinesh Manohar Sachdev, Gaje Singh Rathore, Sanket Modi, Rajiv Solanki and their respective call centers for <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aYEjDDookFw:HybavjN-7CQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aYEjDDookFw:HybavjN-7CQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aYEjDDookFw:HybavjN-7CQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aYEjDDookFw:HybavjN-7CQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aYEjDDookFw:HybavjN-7CQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aYEjDDookFw:HybavjN-7CQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aYEjDDookFw:HybavjN-7CQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aYEjDDookFw:HybavjN-7CQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3211921799361172795
title: Microsoft Uncovers New Details of Russian Hacking Campaign Targeting Ukraine
uri: Microsoft-Uncovers-New-Details-of-Russian-Hacking-Campaign-Targeting-U
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3211921799361172795
content:
Microsoft on Friday shared more of the tactics, techniques, and procedures (TTPs) adopted by the Russia-based Gamaredon hacking group to facilitate a barrage of cyber espionage attacks aimed at several entities in Ukraine over the past six months.
The attacks are said to have singled out government, military, non-government organizations (NGO), judiciary, law enforcement, and non-profit <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tCiorUgm29E:H8eJovSOMs8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tCiorUgm29E:H8eJovSOMs8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tCiorUgm29E:H8eJovSOMs8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tCiorUgm29E:H8eJovSOMs8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tCiorUgm29E:H8eJovSOMs8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tCiorUgm29E:H8eJovSOMs8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=tCiorUgm29E:H8eJovSOMs8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=tCiorUgm29E:H8eJovSOMs8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5530050030082581945
title: New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps
uri: New-Argo-CD-Bug-Could-Let-Hackers-Steal-Secret-Info-from-Kubernetes-Ap
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5530050030082581945
content:
Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as passwords and API keys.
The flaw, tagged as CVE-2022-24348 (CVSS score: 7.7), affects all versions and has been addressed in versions 2.3.0, 2.2.4, and 2.1.9. Cloud security firm <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fnYdGLlEEno:idGXiL0PFp4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fnYdGLlEEno:idGXiL0PFp4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fnYdGLlEEno:idGXiL0PFp4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fnYdGLlEEno:idGXiL0PFp4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fnYdGLlEEno:idGXiL0PFp4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fnYdGLlEEno:idGXiL0PFp4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fnYdGLlEEno:idGXiL0PFp4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fnYdGLlEEno:idGXiL0PFp4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7993685160656072968
title: CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability
uri: CISA-Orders-Federal-Agencies-to-Patch-Actively-Exploited-Windows-Vulne
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7993685160656072968
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to secure their systems against an actively exploited security vulnerability in Windows that could be abused to gain elevated permissions on affected hosts.
To that end, the agency has added CVE-2022-21882 (CVSS score: 7.0) to the Known Exploited Vulnerabilities Catalog, necessitating that Federal <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvV6AK5lOUs:DG4DbEEOIas:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvV6AK5lOUs:DG4DbEEOIas:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvV6AK5lOUs:DG4DbEEOIas:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UvV6AK5lOUs:DG4DbEEOIas:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvV6AK5lOUs:DG4DbEEOIas:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UvV6AK5lOUs:DG4DbEEOIas:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UvV6AK5lOUs:DG4DbEEOIas:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UvV6AK5lOUs:DG4DbEEOIas:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8416953115051196698
title: Chinese Hackers Target Taiwanese Financial Institutions with a new Stealthy Backdoor
uri: Chinese-Hackers-Target-Taiwanese-Financial-Institutions-with-a-new-Ste
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8416953115051196698
content:
A Chinese advanced persistent threat (APT) group has been targeting Taiwanese financial institutions as part of a "persistent campaign" that lasted for at least 18 months.
The intrusions, whose primary intent was espionage, resulted in the deployment of a backdoor called xPack, granting the adversary extensive control over compromised machines, Broadcom-owned Symantec said in a report published <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nMJpQxYMDgg:vjFg-tdpT9I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nMJpQxYMDgg:vjFg-tdpT9I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nMJpQxYMDgg:vjFg-tdpT9I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nMJpQxYMDgg:vjFg-tdpT9I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nMJpQxYMDgg:vjFg-tdpT9I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nMJpQxYMDgg:vjFg-tdpT9I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=nMJpQxYMDgg:vjFg-tdpT9I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=nMJpQxYMDgg:vjFg-tdpT9I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6802265817097753196
title: New CapraRAT Android Malware Targets Indian Government and Military Personnel
uri: New-CapraRAT-Android-Malware-Targets-Indian-Government-and-Military-Pe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6802265817097753196
content:
A politically motivated advanced persistent threat (APT) group has expanded its malware arsenal to include a new remote access trojan (RAT) in its espionage attacks aimed at Indian military and diplomatic entities.
Called CapraRAT by Trend Micro, the implant is an Android RAT that exhibits a high "degree of crossover" with another Windows malware known as CrimsonRAT that's associated with Earth <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VtJO8E3F_UI:XooS8-QeQwg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VtJO8E3F_UI:XooS8-QeQwg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VtJO8E3F_UI:XooS8-QeQwg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VtJO8E3F_UI:XooS8-QeQwg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VtJO8E3F_UI:XooS8-QeQwg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VtJO8E3F_UI:XooS8-QeQwg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VtJO8E3F_UI:XooS8-QeQwg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VtJO8E3F_UI:XooS8-QeQwg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7743070679974592184
title: Hackers Backdoored Systems at China's National Games Just Before Competition
uri: Hackers-Backdoored-Systems-at-China-s-National-Games-Just-Before-Compe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7743070679974592184
content:
Systems hosting content pertaining to the National Games of China were successfully breached last year by an unnamed Chinese-language-speaking hacking group.
Cybersecurity firm Avast, which dissected the intrusion, said that the attackers gained access to a web server 12 days prior to the start of the event on September 3 to drop multiple reverse web shells for remote access and achieve <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WTKN08nShvw:6-KxDb4_GyI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WTKN08nShvw:6-KxDb4_GyI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WTKN08nShvw:6-KxDb4_GyI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WTKN08nShvw:6-KxDb4_GyI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WTKN08nShvw:6-KxDb4_GyI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WTKN08nShvw:6-KxDb4_GyI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WTKN08nShvw:6-KxDb4_GyI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WTKN08nShvw:6-KxDb4_GyI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-657890899456455354
title: IoT/connected Device Discovery and Security Auditing in Corporate Networks
uri: IoT-connected-Device-Discovery-and-Security-Auditing-in-Corporate-Netw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/657890899456455354
content:
Today's enterprise networks are complex environments with different types of wired and wireless devices being connected and disconnected. The current device discovery solutions have been mainly focused on identifying and monitoring servers, workstation PCs, laptops and infrastructure devices such as network firewalls, switches and routers, because the most valuable information assets of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H62L7yhjaOM:PhESC-vl4VU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H62L7yhjaOM:PhESC-vl4VU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H62L7yhjaOM:PhESC-vl4VU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H62L7yhjaOM:PhESC-vl4VU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H62L7yhjaOM:PhESC-vl4VU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H62L7yhjaOM:PhESC-vl4VU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=H62L7yhjaOM:PhESC-vl4VU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=H62L7yhjaOM:PhESC-vl4VU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-860155578072050739
title: Microsoft Disables Internet Macros in Office Apps by Default to Block Malware Attacks
uri: Microsoft-Disables-Internet-Macros-in-Office-Apps-by-Default-to-Block
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/860155578072050739
content:
Microsoft on Monday said it's taking steps to disable Visual Basic for Applications (VBA) macros by default across its products, including Word, Excel, PowerPoint, Access, and Visio, for documents downloaded from the web in an attempt to eliminate an entire class of attack vector.
"Bad actors send macros in Office files to end users who unknowingly enable them, malicious payloads are delivered, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YTDx3YmaP2w:uGjeQeV-f7A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YTDx3YmaP2w:uGjeQeV-f7A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YTDx3YmaP2w:uGjeQeV-f7A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YTDx3YmaP2w:uGjeQeV-f7A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YTDx3YmaP2w:uGjeQeV-f7A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YTDx3YmaP2w:uGjeQeV-f7A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YTDx3YmaP2w:uGjeQeV-f7A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YTDx3YmaP2w:uGjeQeV-f7A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3440858407952462616
title: Microsoft Temporarily Disables MSIX App Installers to Prevent Malware Abuse
uri: Microsoft-Temporarily-Disables-MSIX-App-Installers-to-Prevent-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3440858407952462616
content:
Microsoft last week announced that it's temporarily disabling the MSIX ms-appinstaller protocol handler in Windows following evidence that a security vulnerability in the installer component was exploited by threat actors to deliver malware such as Emotet, TrickBot, and Bazaloader.
MSIX, based on a combination of .msi, .appx, App-V and ClickOnce installation technologies, is a universal Windows <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v-E6F1r8Wow:GRssAHXRUDI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v-E6F1r8Wow:GRssAHXRUDI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v-E6F1r8Wow:GRssAHXRUDI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v-E6F1r8Wow:GRssAHXRUDI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v-E6F1r8Wow:GRssAHXRUDI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v-E6F1r8Wow:GRssAHXRUDI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=v-E6F1r8Wow:GRssAHXRUDI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=v-E6F1r8Wow:GRssAHXRUDI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5907763709947430212
title: Medusa Android Banking Trojan Spreading Through Flubot's Attacks Network
uri: Medusa-Android-Banking-Trojan-Spreading-Through-Flubot-s-Attacks-Netwo
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5907763709947430212
content:
Two different Android banking Trojans, FluBot and Medusa, are relying on the same delivery vehicle as part of a simultaneous attack campaign, according to new research published by ThreatFabric.
The ongoing side-by-side infections, facilitated through the same smishing (SMS phishing) infrastructure, involved the overlapping usage of "app names, package names, and similar icons," the Dutch mobile<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CUPU7TSrjdo:cdKb5fHWkqM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CUPU7TSrjdo:cdKb5fHWkqM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CUPU7TSrjdo:cdKb5fHWkqM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CUPU7TSrjdo:cdKb5fHWkqM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CUPU7TSrjdo:cdKb5fHWkqM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CUPU7TSrjdo:cdKb5fHWkqM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CUPU7TSrjdo:cdKb5fHWkqM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CUPU7TSrjdo:cdKb5fHWkqM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3511607716307784300
title: How Attack Surface Management Preempts Cyberattacks
uri: How-Attack-Surface-Management-Preempts-Cyberattacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3511607716307784300
content:
The wide-ranging adoption of cloud facilities and the subsequent mushrooming of organizations' networks, combined with the recent migration to remote work, had the direct consequence of a massive expansion of organizations' attack surface and led to a growing number of blind spots in connected architectures.
The unforeseen results of this expanded and attack surface with fragmented monitoring <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6wgZhsACTg:-yBZkwBY4Fk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6wgZhsACTg:-yBZkwBY4Fk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6wgZhsACTg:-yBZkwBY4Fk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x6wgZhsACTg:-yBZkwBY4Fk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6wgZhsACTg:-yBZkwBY4Fk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x6wgZhsACTg:-yBZkwBY4Fk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x6wgZhsACTg:-yBZkwBY4Fk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x6wgZhsACTg:-yBZkwBY4Fk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5296326467149817395
title: 'Roaming Mantis' Android Malware Targeting Europeans via Smishing Campaigns
uri: Roaming-Mantis-Android-Malware-Targeting-Europeans-via-Smishing-Camp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5296326467149817395
content:
A financially motivated campaign that targets Android devices and spreads mobile malware via SMS phishing techniques since at least 2018 has spread its tentacles to strike victims located in France and Germany for the first time.
Dubbed Roaming Mantis, the latest spate of activities observed in 2021 involve sending fake shipping-related texts containing a URL to a landing page from where Android<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LrdK265o7YQ:4gb_X-XDAcM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LrdK265o7YQ:4gb_X-XDAcM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LrdK265o7YQ:4gb_X-XDAcM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LrdK265o7YQ:4gb_X-XDAcM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LrdK265o7YQ:4gb_X-XDAcM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LrdK265o7YQ:4gb_X-XDAcM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LrdK265o7YQ:4gb_X-XDAcM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LrdK265o7YQ:4gb_X-XDAcM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1700980551864277030
title: Palestinian Hackers Use New NimbleMamba Implant in Recent Attacks
uri: Palestinian-Hackers-Use-New-NimbleMamba-Implant-in-Recent-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1700980551864277030
content:
An advanced persistent threat (APT) hacking group operating with motives that likely align with Palestine has embarked on a new campaign that leverages a previously undocumented implant called NimbleMamba.
The intrusions leveraged a sophisticated attack chain targeting Middle Eastern governments, foreign policy think tanks, and a state-affiliated airline, enterprise security firm Proofpoint said<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_bYSg_cE7hM:jC8BzHksWk4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_bYSg_cE7hM:jC8BzHksWk4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_bYSg_cE7hM:jC8BzHksWk4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_bYSg_cE7hM:jC8BzHksWk4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_bYSg_cE7hM:jC8BzHksWk4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_bYSg_cE7hM:jC8BzHksWk4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_bYSg_cE7hM:jC8BzHksWk4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_bYSg_cE7hM:jC8BzHksWk4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7804279431502774530
title: Several Malware Families Using Pay-Per-Install Service to Expand Their Targets
uri: Several-Malware-Families-Using-Pay-Per-Install-Service-to-Expand-Their
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7804279431502774530
content:
A detailed examination of a Pay-per-install (PPI) malware service called PrivateLoader has revealed its crucial role in the delivery of a variety of malware such as SmokeLoader, RedLine Stealer, Vidar, Raccoon, and GCleaner since at least May 2021.
Loaders are malicious programs used for loading additional executables onto the infected machine. With PPI malware services such as PrivateLoader, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VGJHokvocSA:gAXs91oBVbA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VGJHokvocSA:gAXs91oBVbA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VGJHokvocSA:gAXs91oBVbA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VGJHokvocSA:gAXs91oBVbA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VGJHokvocSA:gAXs91oBVbA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VGJHokvocSA:gAXs91oBVbA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VGJHokvocSA:gAXs91oBVbA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VGJHokvocSA:gAXs91oBVbA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4049503444022576417
title: Microsoft and Other Major Software Firms Release February 2022 Patch Updates
uri: Microsoft-and-Other-Major-Software-Firms-Release-February-2022-Patch-U
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4049503444022576417
content:
Microsoft on Tuesday rolled out its monthly security updates with fixes for 51 vulnerabilities across its software line-up consisting of Windows, Office, Teams, Azure Data Explorer, Visual Studio Code, and other components such as Kernel and Win32k.
Among the 51 defects closed, 50 are rated Important and one is rated Moderate in severity, making it one of the rare Patch Tuesday updates without <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxWIGIa4R-A:3F2TAt7DRls:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxWIGIa4R-A:3F2TAt7DRls:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxWIGIa4R-A:3F2TAt7DRls:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RxWIGIa4R-A:3F2TAt7DRls:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxWIGIa4R-A:3F2TAt7DRls:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RxWIGIa4R-A:3F2TAt7DRls:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RxWIGIa4R-A:3F2TAt7DRls:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RxWIGIa4R-A:3F2TAt7DRls:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4022708468180108363
title: U.S. Arrests Two and Seizes $3.6 Billion Cryptocurrency Stolen in 2016 Bitfinex Hack
uri: U-S-Arrests-Two-and-Seizes-3-6-Billion-Cryptocurrency-Stolen-in-2016
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4022708468180108363
content:
The U.S. Justice Department (DoJ) on Tuesday announced the arrest of a married couple in connection with conspiring to launder cryptocurrency worth $4.5 billion that was siphoned during the hack of the virtual currency exchange Bitfinex in 2016.
Ilya Lichtenstein, 34, and his wife, Heather Morgan, 31, both of New York, are alleged to have "stolen funds through a labyrinth of cryptocurrency <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P8Mch_Dp9Wk:2hIXtMj8pmI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P8Mch_Dp9Wk:2hIXtMj8pmI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P8Mch_Dp9Wk:2hIXtMj8pmI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P8Mch_Dp9Wk:2hIXtMj8pmI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P8Mch_Dp9Wk:2hIXtMj8pmI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P8Mch_Dp9Wk:2hIXtMj8pmI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=P8Mch_Dp9Wk:2hIXtMj8pmI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=P8Mch_Dp9Wk:2hIXtMj8pmI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2008347569550532697
title: Guide: Alert Overload and Handling for Lean IT Security Teams
uri: Guide-Alert-Overload-and-Handling-for-Lean-IT-Security-Teams
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2008347569550532697
content:
Alarming research reveals the stress and strains the average cybersecurity team experiences on a daily basis. As many as 70% of teams report feeling emotionally overwhelmed by security alerts. Those alerts come at such high volume, high velocity, and high intensity that they become an extreme source of stress. So extreme, in fact, that people's home lives are negatively affected. Alert overload <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxSwl3nlp_k:3Iw88oeY0k4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxSwl3nlp_k:3Iw88oeY0k4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxSwl3nlp_k:3Iw88oeY0k4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WxSwl3nlp_k:3Iw88oeY0k4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxSwl3nlp_k:3Iw88oeY0k4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WxSwl3nlp_k:3Iw88oeY0k4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WxSwl3nlp_k:3Iw88oeY0k4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WxSwl3nlp_k:3Iw88oeY0k4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8797613161207322554
title: Iranian Hackers Using New Marlin Backdoor in 'Out to Sea' Espionage Campaign
uri: Iranian-Hackers-Using-New-Marlin-Backdoor-in-Out-to-Sea-Espionage-Ca
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8797613161207322554
content:
An advanced persistent threat (APT) group with ties to Iran has refreshed its malware toolset to include a new backdoor dubbed Marlin as part of a long-running espionage campaign that started in April 2018.
Slovak cybersecurity company ESET attributed the attacks — codenamed "Out to Sea" — to a threat actor called OilRig (aka APT34), while also conclusively connecting its activities to a second <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKC9_RtfsQ4:uUMtAbt52Sw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKC9_RtfsQ4:uUMtAbt52Sw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKC9_RtfsQ4:uUMtAbt52Sw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hKC9_RtfsQ4:uUMtAbt52Sw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKC9_RtfsQ4:uUMtAbt52Sw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hKC9_RtfsQ4:uUMtAbt52Sw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=hKC9_RtfsQ4:uUMtAbt52Sw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=hKC9_RtfsQ4:uUMtAbt52Sw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5317993786596583555
title: Russian APT Hackers Used COVID-19 Lures to Target European Diplomats
uri: Russian-APT-Hackers-Used-COVID-19-Lures-to-Target-European-Diplomats
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5317993786596583555
content:
The Russia-linked threat actor known as APT29 targeted European diplomatic missions and Ministries of Foreign Affairs as part of a series of spear-phishing campaigns mounted in October and November 2021.
According to ESET's T3 2021 Threat Report shared with The Hacker News, the intrusions paved the way for the deployment of Cobalt Strike Beacon on compromised systems, followed by leveraging the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThaP5vyTrTQ:M2-NVusTzqI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThaP5vyTrTQ:M2-NVusTzqI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThaP5vyTrTQ:M2-NVusTzqI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ThaP5vyTrTQ:M2-NVusTzqI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThaP5vyTrTQ:M2-NVusTzqI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ThaP5vyTrTQ:M2-NVusTzqI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ThaP5vyTrTQ:M2-NVusTzqI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ThaP5vyTrTQ:M2-NVusTzqI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5632762292329954030
title: Russia Cracks Down on 4 Dark Web Marketplaces for Stolen Credit Cards
uri: Russia-Cracks-Down-on-4-Dark-Web-Marketplaces-for-Stolen-Credit-Cards
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5632762292329954030
content:
A special law enforcement operation undertaken by Russia has led to the seizure and shutdown of four online bazaars that specialized in the theft and sales of stolen credit cards, as the government continues to take active measures against harboring cybercriminals on its territory.
To that end, the domains operated by the card fraud forms and marketplaces, Ferum Shop, Sky-Fraud, Trump's Dumps, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E9-c_lwPXdI:xS-2v_d4x8I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E9-c_lwPXdI:xS-2v_d4x8I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E9-c_lwPXdI:xS-2v_d4x8I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E9-c_lwPXdI:xS-2v_d4x8I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E9-c_lwPXdI:xS-2v_d4x8I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E9-c_lwPXdI:xS-2v_d4x8I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=E9-c_lwPXdI:xS-2v_d4x8I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=E9-c_lwPXdI:xS-2v_d4x8I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4770144271185774633
title: Critical RCE Flaws in 'PHP Everywhere' Plugin Affect Thousands of WordPress Sites
uri: Critical-RCE-Flaws-in-PHP-Everywhere-Plugin-Affect-Thousands-of-Word
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4770144271185774633
content:
Critical security vulnerabilities have been disclosed in a WordPress plugin known as PHP Everywhere that's used by more than 30,000 websites worldwide and could be abused by an attacker to execute arbitrary code on affected systems.
PHP Everywhere is used to flip the switch on PHP code across WordPress installations, enabling users to insert and execute PHP-based code in the content management <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nQjJuuU-A:SiWG-xXNtyI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nQjJuuU-A:SiWG-xXNtyI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nQjJuuU-A:SiWG-xXNtyI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-nQjJuuU-A:SiWG-xXNtyI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nQjJuuU-A:SiWG-xXNtyI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-nQjJuuU-A:SiWG-xXNtyI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nQjJuuU-A:SiWG-xXNtyI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-nQjJuuU-A:SiWG-xXNtyI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1328771610815485056
title: CISA, FBI, NSA Issue Advisory on Severe Increase in Ransomware Attacks
uri: CISA-FBI-NSA-Issue-Advisory-on-Severe-Increase-in-Ransomware-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1328771610815485056
content:
Cybersecurity authorities from Australia, the U.K., and the U.S. have published a joint advisory warning of an increase in sophisticated, high-impact ransomware attacks targeting critical infrastructure organizations across the world in 2021.
The incidents singled out a broad range of sectors, including defense, emergency services, agriculture, government facilities, IT, healthcare, financial <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdMDBnhIjRc:CRFV-y3KRKw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdMDBnhIjRc:CRFV-y3KRKw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdMDBnhIjRc:CRFV-y3KRKw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZdMDBnhIjRc:CRFV-y3KRKw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdMDBnhIjRc:CRFV-y3KRKw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZdMDBnhIjRc:CRFV-y3KRKw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ZdMDBnhIjRc:CRFV-y3KRKw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ZdMDBnhIjRc:CRFV-y3KRKw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2158022346970841673
title: COVID Does Not Spread to Computers
uri: COVID-Does-Not-Spread-to-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2158022346970841673
content:
"…well, of course!" is what you might think. It's a biological threat, so how could it affect digital assets?
But hang on. Among other effects, this pandemic has brought about a massive shift in several technological areas. Not only did it force numerous organizations - that up to now were reluctant - to gear up in cyber to go digital, all at once, oftentimes with hastily pieced together <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c_lPsozwVpE:VoFCC69kZ6U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c_lPsozwVpE:VoFCC69kZ6U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c_lPsozwVpE:VoFCC69kZ6U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c_lPsozwVpE:VoFCC69kZ6U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c_lPsozwVpE:VoFCC69kZ6U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c_lPsozwVpE:VoFCC69kZ6U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=c_lPsozwVpE:VoFCC69kZ6U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=c_lPsozwVpE:VoFCC69kZ6U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6057044744622649154
title: FritzFrog P2P Botnet Attacking Healthcare, Education and Government Sectors
uri: FritzFrog-P2P-Botnet-Attacking-Healthcare-Education-and-Government-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6057044744622649154
content:
A peer-to-peer Golang botnet has resurfaced after more than a year to compromise servers belonging to entities in the healthcare, education, and government sectors within a span of a month, infecting a total of 1,500 hosts.
Dubbed FritzFrog, "the decentralized botnet targets any device that exposes an SSH server — cloud instances, data center servers, routers, etc. — and is capable of running <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLjdNHw4kA8:-U77KN2AYAw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLjdNHw4kA8:-U77KN2AYAw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLjdNHw4kA8:-U77KN2AYAw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vLjdNHw4kA8:-U77KN2AYAw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLjdNHw4kA8:-U77KN2AYAw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vLjdNHw4kA8:-U77KN2AYAw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vLjdNHw4kA8:-U77KN2AYAw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vLjdNHw4kA8:-U77KN2AYAw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2007594865777351691
title: Apple Releases iOS, iPadOS, macOS Updates to Patch Actively Exploited Zero-Day Flaw
uri: Apple-Releases-iOS-iPadOS-macOS-Updates-to-Patch-Actively-Exploited
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2007594865777351691
content:
Apple on Thursday released security updates for iOS, iPadOS, macOS, and Safari to address a new WebKit flaw that it said may have been actively exploited in the wild, making it the company's third zero-day patch since the start of the year.
&lt;!--adsense--&gt;
Tracked as CVE-2022-22620, the issue concerns a use-after-free vulnerability in the WebKit component that powers the Safari web browser and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NrPoXhjgK6M:IU9hDmT_XXk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NrPoXhjgK6M:IU9hDmT_XXk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NrPoXhjgK6M:IU9hDmT_XXk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NrPoXhjgK6M:IU9hDmT_XXk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NrPoXhjgK6M:IU9hDmT_XXk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NrPoXhjgK6M:IU9hDmT_XXk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NrPoXhjgK6M:IU9hDmT_XXk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NrPoXhjgK6M:IU9hDmT_XXk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1516455206116586608
title: France Rules That Using Google Analytics Violates GDPR Data Protection Law
uri: France-Rules-That-Using-Google-Analytics-Violates-GDPR-Data-Protection
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1516455206116586608
content:
French data protection regulators on Thursday found the use of Google Analytics a breach of the European Union's General Data Protection Regulation (GDPR) laws in the country, almost a month after a similar decision was reached in Austria.
To that end, the National Commission on Informatics and Liberty (CNIL) ruled that the transatlantic movement of Google Analytics data to the U.S. is not "<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjDsO8vw_no:dFQ4Ohm3N08:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjDsO8vw_no:dFQ4Ohm3N08:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjDsO8vw_no:dFQ4Ohm3N08:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xjDsO8vw_no:dFQ4Ohm3N08:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjDsO8vw_no:dFQ4Ohm3N08:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xjDsO8vw_no:dFQ4Ohm3N08:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xjDsO8vw_no:dFQ4Ohm3N08:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xjDsO8vw_no:dFQ4Ohm3N08:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4105397769719237565
title: Hackers Planted Fake Digital Evidence on Devices of Indian Activists and Lawyers
uri: Hackers-Planted-Fake-Digital-Evidence-on-Devices-of-Indian-Activists-a
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4105397769719237565
content:
A previously unknown hacking group has been linked to targeted attacks against human rights activists, human rights defenders, academics, and lawyers across India in an attempt to plant "incriminating digital evidence."
Cybersecurity firm SentinelOne attributed the intrusions to a group it tracks as "ModifiedElephant," an elusive threat actor that's been operational since at least 2012, whose <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yGA7TzVIKuc:N8lkekNeWoY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yGA7TzVIKuc:N8lkekNeWoY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yGA7TzVIKuc:N8lkekNeWoY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yGA7TzVIKuc:N8lkekNeWoY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yGA7TzVIKuc:N8lkekNeWoY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yGA7TzVIKuc:N8lkekNeWoY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=yGA7TzVIKuc:N8lkekNeWoY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=yGA7TzVIKuc:N8lkekNeWoY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8815893176739290631
title: Critical Magento 0-Day Vulnerability Under Active Exploitation — Patch Released
uri: Critical-Magento-0-Day-Vulnerability-Under-Active-Exploitation-Pat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8815893176739290631
content:
Adobe on Sunday rolled out patches to contain a critical security vulnerability impacting its Commerce and Magento Open Source products that it said is being actively exploited in the wild.
Tracked as CVE-2022-24086, the shortcoming has a CVSS score of 9.8 out of 10 on the vulnerability scoring system and has been characterized as an "improper input validation" issue that could be weaponized to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RBrP9GCN8Ok:ga9JG7ncVXc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RBrP9GCN8Ok:ga9JG7ncVXc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RBrP9GCN8Ok:ga9JG7ncVXc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RBrP9GCN8Ok:ga9JG7ncVXc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RBrP9GCN8Ok:ga9JG7ncVXc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RBrP9GCN8Ok:ga9JG7ncVXc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=RBrP9GCN8Ok:ga9JG7ncVXc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=RBrP9GCN8Ok:ga9JG7ncVXc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1773941078602159640
title: Critical Security Flaws Reported in Moxa MXview Network Management Software
uri: Critical-Security-Flaws-Reported-in-Moxa-MXview-Network-Management-Sof
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1773941078602159640
content:
Technical details have been disclosed regarding a number of security vulnerabilities affecting Moxa's MXview web-based network management system, some of which could be chained by an unauthenticated adversary to achieve remote code execution on unpatched servers.
The five security weaknesses "could allow a remote, unauthenticated attacker to execute code on the hosting machine with the highest <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ni4eYYLmyw:-0Id23LSbKs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ni4eYYLmyw:-0Id23LSbKs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ni4eYYLmyw:-0Id23LSbKs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ni4eYYLmyw:-0Id23LSbKs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ni4eYYLmyw:-0Id23LSbKs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ni4eYYLmyw:-0Id23LSbKs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ni4eYYLmyw:-0Id23LSbKs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ni4eYYLmyw:-0Id23LSbKs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8587944985734242915
title: Spanish Police Arrest SIM Swappers Who Stole Money from Victims Bank Accounts
uri: Spanish-Police-Arrest-SIM-Swappers-Who-Stole-Money-from-Victims-Bank-A
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8587944985734242915
content:
Spain's National Police Agency, the Policía Nacional, said last week it dismantled an unnamed cybercriminal organization and arrested eight individuals in connection with a series of SIM swapping attacks that were carried out with the goal of financial fraud.
The suspects of the crime ring masqueraded as trustworthy representatives of banks and other organizations and used traditional phishing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPZOH5wozmc:EzYHXoQOBZo:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPZOH5wozmc:EzYHXoQOBZo:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPZOH5wozmc:EzYHXoQOBZo:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XPZOH5wozmc:EzYHXoQOBZo:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPZOH5wozmc:EzYHXoQOBZo:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XPZOH5wozmc:EzYHXoQOBZo:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=XPZOH5wozmc:EzYHXoQOBZo:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=XPZOH5wozmc:EzYHXoQOBZo:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4231416378194160733
title: New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!
uri: New-Chrome-0-Day-Bug-Under-Active-Attack-Update-Your-Browser-ASAP
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4231416378194160733
content:
Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022.
The shortcoming, tracked CVE-2022-0609, is described as a use-after-free vulnerability in the Animation component that, if successfully exploited, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C9rJMRTs4MI:-EqKCeb1hm4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C9rJMRTs4MI:-EqKCeb1hm4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C9rJMRTs4MI:-EqKCeb1hm4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=C9rJMRTs4MI:-EqKCeb1hm4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C9rJMRTs4MI:-EqKCeb1hm4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=C9rJMRTs4MI:-EqKCeb1hm4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=C9rJMRTs4MI:-EqKCeb1hm4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=C9rJMRTs4MI:-EqKCeb1hm4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3374225968191778791
title: New MyloBot Malware Variant Sends Sextortion Emails Demanding $2,732 in Bitcoin
uri: New-MyloBot-Malware-Variant-Sends-Sextortion-Emails-Demanding-2-732-i
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3374225968191778791
content:
A new version of the MyloBot malware has been observed to deploy malicious payloads that are being used to send sextortion emails demanding victims to pay $2,732 in digital currency.
MyloBot, first detected in 2018, is known to feature an array of sophisticated anti-debugging capabilities and propagation techniques to rope infected machines into a botnet, not to mention remove traces of other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9GFR-BCUNk:aqw-58F6xsQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9GFR-BCUNk:aqw-58F6xsQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9GFR-BCUNk:aqw-58F6xsQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M9GFR-BCUNk:aqw-58F6xsQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9GFR-BCUNk:aqw-58F6xsQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M9GFR-BCUNk:aqw-58F6xsQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=M9GFR-BCUNk:aqw-58F6xsQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=M9GFR-BCUNk:aqw-58F6xsQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7571500981351567197
title: Researchers Link ShadowPad Malware Attacks to Chinese Ministry and PLA
uri: Researchers-Link-ShadowPad-Malware-Attacks-to-Chinese-Ministry-and-PLA
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7571500981351567197
content:
Cybersecurity researchers have detailed the inner workings of ShadowPad, a sophisticated and modular backdoor that has been adopted by a growing number of Chinese threat groups in recent years, while also linking it to the country's civilian and military intelligence agencies.
"ShadowPad is decrypted in memory using a custom decryption algorithm," researchers from Secureworks said in a report <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=48YRlxt0n18:Llxz6MbeOKQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=48YRlxt0n18:Llxz6MbeOKQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=48YRlxt0n18:Llxz6MbeOKQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=48YRlxt0n18:Llxz6MbeOKQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=48YRlxt0n18:Llxz6MbeOKQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=48YRlxt0n18:Llxz6MbeOKQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=48YRlxt0n18:Llxz6MbeOKQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=48YRlxt0n18:Llxz6MbeOKQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8390325086176927706
title: SafeDNS: Cloud-based Internet Security and Web Filtering Solution for MSPs
uri: SafeDNS-Cloud-based-Internet-Security-and-Web-Filtering-Solution-for
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8390325086176927706
content:
Remote workplace trend is getting the upper hand in 2022. A recent survey by IWG (the International Workplace Group) determined that 70% of the world's professionals work remotely at least one day a week, with 53% based outside their workplace at least half of the week.
Taking this into consideration, organizations have started looking for reliable partners that can deliver services and support <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DynXf81wE5Q:0sb1iOE5MZA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DynXf81wE5Q:0sb1iOE5MZA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DynXf81wE5Q:0sb1iOE5MZA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DynXf81wE5Q:0sb1iOE5MZA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DynXf81wE5Q:0sb1iOE5MZA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DynXf81wE5Q:0sb1iOE5MZA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DynXf81wE5Q:0sb1iOE5MZA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DynXf81wE5Q:0sb1iOE5MZA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-423483647280510238
title: Experts Warn of Hacking Group Targeting Aviation and Defense Sectors
uri: Experts-Warn-of-Hacking-Group-Targeting-Aviation-and-Defense-Sectors
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/423483647280510238
content:
Entities in the aviation, aerospace, transportation, manufacturing, and defense industries have been targeted by a persistent threat group since at least 2017 as part of a string of spear-phishing campaigns mounted to deliver a variety of remote access trojans (RATs) on compromised systems.
The use of commodity malware such as AsyncRAT and NetWire, among others, has led enterprise security firm <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sBCoA5EiFE8:jTM551Sptiw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sBCoA5EiFE8:jTM551Sptiw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sBCoA5EiFE8:jTM551Sptiw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sBCoA5EiFE8:jTM551Sptiw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sBCoA5EiFE8:jTM551Sptiw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sBCoA5EiFE8:jTM551Sptiw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=sBCoA5EiFE8:jTM551Sptiw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=sBCoA5EiFE8:jTM551Sptiw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8733317714485182769
title: Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case
uri: Facebook-Agrees-to-Pay-90-Million-to-Settle-Decade-Old-Privacy-Violat
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8733317714485182769
content:
Meta Platforms has agreed to pay $90 million to settle a lawsuit over the company's use of cookies to allegedly track Facebook users' internet activity even after they had logged off from the platform.
In addition, the social media company will be required to delete all of the data it illegally collected from those users. The development was first reported by Variety.
&lt;!--adsense--&gt;
The <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5PcchJ1Du68:KNyQW90Ie-w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5PcchJ1Du68:KNyQW90Ie-w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5PcchJ1Du68:KNyQW90Ie-w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5PcchJ1Du68:KNyQW90Ie-w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5PcchJ1Du68:KNyQW90Ie-w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5PcchJ1Du68:KNyQW90Ie-w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=5PcchJ1Du68:KNyQW90Ie-w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=5PcchJ1Du68:KNyQW90Ie-w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8814328470675762348
title: High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
uri: High-Severity-RCE-Security-Bug-Reported-in-Apache-Cassandra-Database-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8814328470675762348
content:
Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain remote code execution on affected installations.
"This Apache security vulnerability is easy to exploit and has the potential to wreak havoc on systems, but luckily only manifests in non-default configurations of Cassandra," Omer Kaspi, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BxdAjyPEWa8:unR8s2Oj098:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BxdAjyPEWa8:unR8s2Oj098:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BxdAjyPEWa8:unR8s2Oj098:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BxdAjyPEWa8:unR8s2Oj098:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BxdAjyPEWa8:unR8s2Oj098:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BxdAjyPEWa8:unR8s2Oj098:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=BxdAjyPEWa8:unR8s2Oj098:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=BxdAjyPEWa8:unR8s2Oj098:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2032528951005685789
title: EU Data Protection Watchdog Calls for Ban on Pegasus-like Commercial Spyware
uri: EU-Data-Protection-Watchdog-Calls-for-Ban-on-Pegasus-like-Commercial-S
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2032528951005685789
content:
The European Union's data protection authority on Tuesday called for a ban on the development and the use of Pegasus-like commercial spyware in the region, calling out the technology's "unprecedented level of intrusiveness" that could endanger users' right to privacy.
"Pegasus constitutes a paradigm shift in terms of access to private communications and devices, which is able to affect the very <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DqmpT1q_AWE:jlKObbTf-n0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DqmpT1q_AWE:jlKObbTf-n0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DqmpT1q_AWE:jlKObbTf-n0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DqmpT1q_AWE:jlKObbTf-n0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DqmpT1q_AWE:jlKObbTf-n0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DqmpT1q_AWE:jlKObbTf-n0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DqmpT1q_AWE:jlKObbTf-n0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DqmpT1q_AWE:jlKObbTf-n0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-197692579395770542
title: Trickbot Malware Targeted Customers of 60 High-Profile Companies Since 2020
uri: Trickbot-Malware-Targeted-Customers-of-60-High-Profile-Companies-Since
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/197692579395770542
content:
The notorious TrickBot malware is targeting customers of 60 financial and technology companies, including cryptocurrency firms, primarily located in the U.S., even as its operators have updated the botnet with new anti-analysis features.
"TrickBot is a sophisticated and versatile malware with more than 20 modules that can be downloaded and executed on demand," Check Point researchers Aliaksandr <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Laot2FcSmIs:VR7Mfv22Vuw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Laot2FcSmIs:VR7Mfv22Vuw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Laot2FcSmIs:VR7Mfv22Vuw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Laot2FcSmIs:VR7Mfv22Vuw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Laot2FcSmIs:VR7Mfv22Vuw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Laot2FcSmIs:VR7Mfv22Vuw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Laot2FcSmIs:VR7Mfv22Vuw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Laot2FcSmIs:VR7Mfv22Vuw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-336110701693927796
title: VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products
uri: VMware-Issues-Security-Patches-for-High-Severity-Flaws-Affecting-Multi
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/336110701693927796
content:
VMware on Tuesday patched several high-severity vulnerabilities impacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could be exploited to execute arbitrary code and cause a denial-of-service (DoS) condition.
As of writing, there's no evidence that any of the weaknesses are exploited in the wild. The list of six flaws is as follows –
&lt;!--adsense--&gt;

<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTP0SNWGjMk:xKoKCs2UYoA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTP0SNWGjMk:xKoKCs2UYoA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTP0SNWGjMk:xKoKCs2UYoA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTP0SNWGjMk:xKoKCs2UYoA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTP0SNWGjMk:xKoKCs2UYoA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTP0SNWGjMk:xKoKCs2UYoA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eTP0SNWGjMk:xKoKCs2UYoA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eTP0SNWGjMk:xKoKCs2UYoA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7174874586095960443
title: [Webinar] When More Is Not Better: Solving Alert Overload
uri: Webinar-When-More-Is-Not-Better-Solving-Alert-Overload
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7174874586095960443
content:
The increasing volume and sophistication of cyberattacks have naturally led many companies to invest in additional cybersecurity technologies. We know that expanded threat detection capabilities are necessary for protection, but they have also led to several unintended consequences. The “more is not always better” adage fits this situation perfectly.
An upcoming webinar by cybersecurity company <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LJeM-jkGYd8:lk1aDYpHOF0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LJeM-jkGYd8:lk1aDYpHOF0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LJeM-jkGYd8:lk1aDYpHOF0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LJeM-jkGYd8:lk1aDYpHOF0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LJeM-jkGYd8:lk1aDYpHOF0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LJeM-jkGYd8:lk1aDYpHOF0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=LJeM-jkGYd8:lk1aDYpHOF0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=LJeM-jkGYd8:lk1aDYpHOF0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8992642495050275983
title: This New Tool Can Retrieve Pixelated Text from Redacted Documents
uri: This-New-Tool-Can-Retrieve-Pixelated-Text-from-Redacted-Documents
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8992642495050275983
content:
The practice of blurring out text using a method called pixelation may not be as secure as previously thought.
While the most foolproof way of concealing sensitive textual information is to use opaque black bars, other redaction methods like pixelation can achieve the opposite effect, enabling the reversal of pixelized text back into its original form.
Dan Petro, a lead researcher at offensive <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jJXJL0ZRBXc:aGai2x9DVFM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jJXJL0ZRBXc:aGai2x9DVFM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jJXJL0ZRBXc:aGai2x9DVFM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jJXJL0ZRBXc:aGai2x9DVFM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jJXJL0ZRBXc:aGai2x9DVFM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jJXJL0ZRBXc:aGai2x9DVFM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=jJXJL0ZRBXc:aGai2x9DVFM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=jJXJL0ZRBXc:aGai2x9DVFM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4878283655722450831
title: Researchers Warn of a New Golang-based Botnet Under Continuous Development
uri: Researchers-Warn-of-a-New-Golang-based-Botnet-Under-Continuous-Develop
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4878283655722450831
content:
Cybersecurity researchers have unpacked a new Golang-based botnet called Kraken that's under active development and features an array of backdoor capabilities to siphon sensitive information from compromised Windows hosts.
"Kraken already features the ability to download and execute secondary payloads, run shell commands, and take screenshots of the victim's system," threat intelligence firm <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQaaAvJF2Nc:DrYd8dIK-Q4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQaaAvJF2Nc:DrYd8dIK-Q4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQaaAvJF2Nc:DrYd8dIK-Q4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CQaaAvJF2Nc:DrYd8dIK-Q4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQaaAvJF2Nc:DrYd8dIK-Q4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CQaaAvJF2Nc:DrYd8dIK-Q4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=CQaaAvJF2Nc:DrYd8dIK-Q4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=CQaaAvJF2Nc:DrYd8dIK-Q4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-150888998866938455
title: Moses Staff Hackers Targeting Israeli Organizations for Cyber Espionage
uri: Moses-Staff-Hackers-Targeting-Israeli-Organizations-for-Cyber-Espionag
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/150888998866938455
content:
The politically motivated Moses Staff hacker group has been observed using a custom multi-component toolset with the goal of carrying out espionage against its targets as part of a new campaign that exclusively singles out Israeli organizations.
First publicly documented in late 2021, Moses Staff is believed to be sponsored by the Iranian government, with attacks reported against entities in <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wEy9CqYfEQ:eKvw7i-BESs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wEy9CqYfEQ:eKvw7i-BESs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wEy9CqYfEQ:eKvw7i-BESs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wEy9CqYfEQ:eKvw7i-BESs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wEy9CqYfEQ:eKvw7i-BESs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wEy9CqYfEQ:eKvw7i-BESs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6wEy9CqYfEQ:eKvw7i-BESs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6wEy9CqYfEQ:eKvw7i-BESs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-311632778815346584
title: U.S. Says Russian Hackers Stealing Sensitive Data from Defense Contractors
uri: U-S-Says-Russian-Hackers-Stealing-Sensitive-Data-from-Defense-Contrac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/311632778815346584
content:
State-sponsored actors backed by the Russian government regularly targeted the networks of several U.S. cleared defense contractors (CDCs) to acquire proprietary documents and other confidential information pertaining to the country's defense and intelligence programs and capabilities.
The sustained espionage campaign is said to have commenced at least two years ago from January 2020, according <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0y18PFurFQE:YtGJXD9j_6o:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0y18PFurFQE:YtGJXD9j_6o:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0y18PFurFQE:YtGJXD9j_6o:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0y18PFurFQE:YtGJXD9j_6o:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0y18PFurFQE:YtGJXD9j_6o:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0y18PFurFQE:YtGJXD9j_6o:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0y18PFurFQE:YtGJXD9j_6o:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0y18PFurFQE:YtGJXD9j_6o:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3662173925256173836
title: Google Bringing Privacy Sandbox to Android to Limit Sharing of User Data
uri: Google-Bringing-Privacy-Sandbox-to-Android-to-Limit-Sharing-of-User-Da
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3662173925256173836
content:
Google on Wednesday announced plans to bring its Privacy Sandbox initiatives to Android in a bid to expand its privacy-focused, but also less disruptive, advertising technology beyond the desktop web.
To that end, the internet giant said it will work towards building solutions that prevent cross-app tracking à la Apple's App Tracking Transparency (ATT) framework, effectively limiting sharing of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=96PhsZE4WM0:4Kt71YXwhHc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=96PhsZE4WM0:4Kt71YXwhHc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=96PhsZE4WM0:4Kt71YXwhHc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=96PhsZE4WM0:4Kt71YXwhHc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=96PhsZE4WM0:4Kt71YXwhHc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=96PhsZE4WM0:4Kt71YXwhHc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=96PhsZE4WM0:4Kt71YXwhHc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=96PhsZE4WM0:4Kt71YXwhHc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8380530626025620355
title: Getting Your SOC 2 Compliance as a SaaS Company
uri: Getting-Your-SOC-2-Compliance-as-a-SaaS-Company
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8380530626025620355
content:
If you haven't heard of the term, you will soon enough. SOC 2, meaning System and Organization Controls 2, is an auditing procedure developed by the American Institute of CPAs (AICPA). Having SOC 2 compliance means you have implemented organizational controls and practices that provide assurance for the safeguarding and security of client data. In other words, you have to show (e.g., document <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDHSJZo7i_4:U6QBifqbFA8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDHSJZo7i_4:U6QBifqbFA8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDHSJZo7i_4:U6QBifqbFA8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DDHSJZo7i_4:U6QBifqbFA8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDHSJZo7i_4:U6QBifqbFA8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DDHSJZo7i_4:U6QBifqbFA8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DDHSJZo7i_4:U6QBifqbFA8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DDHSJZo7i_4:U6QBifqbFA8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1744236788957971019
title: Attackers Can Crash Cisco Email Security Appliances by Sending Malicious Emails
uri: Attackers-Can-Crash-Cisco-Email-Security-Appliances-by-Sending-Malicio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1744236788957971019
content:
Cisco has released security updates to contain three vulnerabilities affecting its products, including one high-severity flaw in its Email Security Appliance (ESA) that could result in a denial-of-service (DoS) condition on an affected device.
The weakness, assigned the identifier CVE-2022-20653 (CVSS score: 7.5), stems from a case of insufficient error handling in DNS name resolution that could<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yicf9FXmRL4:pb9ewsdzr2M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yicf9FXmRL4:pb9ewsdzr2M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yicf9FXmRL4:pb9ewsdzr2M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yicf9FXmRL4:pb9ewsdzr2M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yicf9FXmRL4:pb9ewsdzr2M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yicf9FXmRL4:pb9ewsdzr2M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Yicf9FXmRL4:pb9ewsdzr2M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Yicf9FXmRL4:pb9ewsdzr2M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9006291490287214603
title: Another Critical RCE Discovered in Adobe Commerce and Magento Platforms
uri: Another-Critical-RCE-Discovered-in-Adobe-Commerce-and-Magento-Platform
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9006291490287214603
content:
Adobe on Thursday updated its advisory for an actively exploited zero-day affecting Adobe Commerce and Magento Open Source to patch a newly discovered flaw that could be weaponized to achieve arbitrary code execution.
&lt;!--adsense--&gt;
Tracked as CVE-2022-24087, the issue – like CVE-2022-24086 – is rated 9.8 on the CVSS vulnerability scoring system and relates to an "Improper Input Validation" bug <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VfYL9Fd35w0:FN6Tr_hnAjE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VfYL9Fd35w0:FN6Tr_hnAjE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VfYL9Fd35w0:FN6Tr_hnAjE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VfYL9Fd35w0:FN6Tr_hnAjE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VfYL9Fd35w0:FN6Tr_hnAjE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VfYL9Fd35w0:FN6Tr_hnAjE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VfYL9Fd35w0:FN6Tr_hnAjE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VfYL9Fd35w0:FN6Tr_hnAjE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8255749026166470478
title: 4 Cloud Data Security Best Practices All Businesses Should Follow Today
uri: 4-Cloud-Data-Security-Best-Practices-All-Businesses-Should-Follow-Toda
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8255749026166470478
content:
These days, businesses all around the world have come to depend on cloud platforms for a variety of mission-critical workflows. They keep their CRM data in the cloud. They process their payrolls in the cloud. They even manage their HR processes through the cloud. And all of that means they're trusting the bulk of their privileged business data to those cloud providers, too.
And while most major <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qJ2ziKAKvoo:gCPg61te6Cc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qJ2ziKAKvoo:gCPg61te6Cc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qJ2ziKAKvoo:gCPg61te6Cc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qJ2ziKAKvoo:gCPg61te6Cc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qJ2ziKAKvoo:gCPg61te6Cc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qJ2ziKAKvoo:gCPg61te6Cc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=qJ2ziKAKvoo:gCPg61te6Cc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=qJ2ziKAKvoo:gCPg61te6Cc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3405913219264163334
title: New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
uri: New-Linux-Privilege-Escalation-Flaw-Uncovered-in-Snap-Package-Manager
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3405913219264163334
content:
Multiple security vulnerabilities have been disclosed in Canonical's Snap software packaging and deployment system, the most critical of which can be exploited to escalate privilege to gain root privileges.
Snaps are self-contained application packages that are designed to work on operating systems that use the Linux kernel and can be installed using a tool called snapd.
&lt;!--adsense--&gt;
Tracked <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0B0VYTqld_o:MNFeP00bnmg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0B0VYTqld_o:MNFeP00bnmg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0B0VYTqld_o:MNFeP00bnmg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0B0VYTqld_o:MNFeP00bnmg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0B0VYTqld_o:MNFeP00bnmg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0B0VYTqld_o:MNFeP00bnmg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0B0VYTqld_o:MNFeP00bnmg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0B0VYTqld_o:MNFeP00bnmg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9102050655556734218
title: Iranian Hackers Targeting VMware Horizon Log4j Flaws to Deploy Ransomware
uri: Iranian-Hackers-Targeting-VMware-Horizon-Log4j-Flaws-to-Deploy-Ransomw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9102050655556734218
content:
A "potentially destructive actor" aligned with the government of Iran is actively exploiting the well-known Log4j vulnerability to infect unpatched VMware Horizon servers with ransomware.
Cybersecurity firm SentinelOne dubbed the group "TunnelVision" owing to their heavy reliance on tunneling tools, with overlaps in tactics observed to that of a broader group tracked under the moniker Phosphorus<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7rBEMe21K20:lpSeew18F7A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7rBEMe21K20:lpSeew18F7A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7rBEMe21K20:lpSeew18F7A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7rBEMe21K20:lpSeew18F7A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7rBEMe21K20:lpSeew18F7A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7rBEMe21K20:lpSeew18F7A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=7rBEMe21K20:lpSeew18F7A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=7rBEMe21K20:lpSeew18F7A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3732205474761454504
title: Microsoft Warns of 'Ice Phishing' Threat on Web3 and Decentralized Networks
uri: Microsoft-Warns-of-Ice-Phishing-Threat-on-Web3-and-Decentralized-Net
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3732205474761454504
content:
Microsoft has warned of emerging threats in the Web3 landscape, including "ice phishing" campaigns, as a surge in adoption of blockchain and DeFi technologies emphasizes the need to build security into the decentralized web while it's still in its early stages.
The company's Microsoft 365 Defender Research Team called out various new avenues through which malicious actors may attempt to trick <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ExaYlDB3ou0:UQoV_YCeET8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ExaYlDB3ou0:UQoV_YCeET8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ExaYlDB3ou0:UQoV_YCeET8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ExaYlDB3ou0:UQoV_YCeET8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ExaYlDB3ou0:UQoV_YCeET8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ExaYlDB3ou0:UQoV_YCeET8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ExaYlDB3ou0:UQoV_YCeET8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ExaYlDB3ou0:UQoV_YCeET8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7313038521699778231
title: PseudoManuscrypt Malware Spreading the Same Way as CryptBot Targets Koreans
uri: PseudoManuscrypt-Malware-Spreading-the-Same-Way-as-CryptBot-Targets-Ko
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7313038521699778231
content:
Numerous Windows machines located in South Korea have been targeted by a botnet tracked as PseudoManuscrypt since at least May 2021 by employing the same delivery tactics of another malware called CryptBot.
"PseudoManuscrypt is disguised as an installer that is similar to a form of CryptBot, and is being distributed," South Korean cybersecurity company AhnLab Security Emergency Response Center (<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFXgQsJnK6c:d6K7LPIcR8M:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFXgQsJnK6c:d6K7LPIcR8M:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFXgQsJnK6c:d6K7LPIcR8M:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lFXgQsJnK6c:d6K7LPIcR8M:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFXgQsJnK6c:d6K7LPIcR8M:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lFXgQsJnK6c:d6K7LPIcR8M:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=lFXgQsJnK6c:d6K7LPIcR8M:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=lFXgQsJnK6c:d6K7LPIcR8M:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8373310185293425122
title: Critical Flaw Uncovered in WordPress Backup Plugin Used by Over 3 Million Sites
uri: Critical-Flaw-Uncovered-in-WordPress-Backup-Plugin-Used-by-Over-3-Mill
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8373310185293425122
content:
Patches have been issued to contain a "severe" security vulnerability in UpdraftPlus, a WordPress plugin with over three million installations, that can be weaponized to download the site's private data using an account on the vulnerable sites.
"All versions of UpdraftPlus from March 2019 onwards have contained a vulnerability caused by a missing permissions-level check, allowing untrusted users<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xT3WuQJMeag:0mQkWiJLSVg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xT3WuQJMeag:0mQkWiJLSVg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xT3WuQJMeag:0mQkWiJLSVg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xT3WuQJMeag:0mQkWiJLSVg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xT3WuQJMeag:0mQkWiJLSVg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xT3WuQJMeag:0mQkWiJLSVg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=xT3WuQJMeag:0mQkWiJLSVg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=xT3WuQJMeag:0mQkWiJLSVg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3599194838751640291
title: U.S. Cybersecurity Agency Publishes List of Free Security Tools and Services
uri: U-S-Cybersecurity-Agency-Publishes-List-of-Free-Security-Tools-and-Se
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3599194838751640291
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday published a repository of free tools and services to enable organizations to mitigate, detect, and respond effectively to malicious attacks and further improve their security posture.
The "Free Cybersecurity Services and Tools" resource hub comprises a mix of services provided by CISA, open-source utilities, and other <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gl3e_wz0Ues:4RD6gbfAPwM:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gl3e_wz0Ues:4RD6gbfAPwM:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gl3e_wz0Ues:4RD6gbfAPwM:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gl3e_wz0Ues:4RD6gbfAPwM:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gl3e_wz0Ues:4RD6gbfAPwM:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gl3e_wz0Ues:4RD6gbfAPwM:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Gl3e_wz0Ues:4RD6gbfAPwM:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Gl3e_wz0Ues:4RD6gbfAPwM:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8150220531379790892
title: Justice Department Appoints First Director of National Cryptocurrency Enforcement Team
uri: Justice-Department-Appoints-First-Director-of-National-Cryptocurrency
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8150220531379790892
content:
The U.S. Department of Justice (DoJ) earlier this week appointed Eun Young Choi to serve as the first Director of the National Cryptocurrency Enforcement Team (NCET) it established last year.
The NCET was created to tackle the criminal misuse of cryptocurrencies and digital assets," with a focus on illegal activities in virtual currency exchanges, mixing and tumbling services, and money <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KxSsPXv6K_U:TL9WraNeyAg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KxSsPXv6K_U:TL9WraNeyAg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KxSsPXv6K_U:TL9WraNeyAg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KxSsPXv6K_U:TL9WraNeyAg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KxSsPXv6K_U:TL9WraNeyAg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KxSsPXv6K_U:TL9WraNeyAg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=KxSsPXv6K_U:TL9WraNeyAg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=KxSsPXv6K_U:TL9WraNeyAg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2369240472647758716
title: Master Key for Hive Ransomware Retrieved Using a Flaw in its Encryption Algorithm
uri: Master-Key-for-Hive-Ransomware-Retrieved-Using-a-Flaw-in-its-Encryptio
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2369240472647758716
content:
Researchers have detailed what they call the "first successful attempt" at decrypting data infected with Hive ransomware without relying on the private key used to lock access to the content.
"We were able to recover the master key for generating the file encryption key without the attacker's private key, by using a cryptographic vulnerability identified through analysis," a group of academics <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ovBZDAZpdCo:cikMczp-zPk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ovBZDAZpdCo:cikMczp-zPk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ovBZDAZpdCo:cikMczp-zPk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ovBZDAZpdCo:cikMczp-zPk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ovBZDAZpdCo:cikMczp-zPk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ovBZDAZpdCo:cikMczp-zPk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ovBZDAZpdCo:cikMczp-zPk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ovBZDAZpdCo:cikMczp-zPk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6538575961921310767
title: Hackers Exploiting Infected Android Devices to Register Disposable Accounts
uri: Hackers-Exploiting-Infected-Android-Devices-to-Register-Disposable-Acc
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6538575961921310767
content:
An analysis of SMS phone-verified account (PVA) services has led to the discovery of a rogue platform built atop a botnet involving thousands of infected Android phones, once again underscoring the flaws with relying on SMS for account validation.
SMS PVA services, since gain prevalence in 2018, provide users with alternative mobile numbers that can be used to register for other online services <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKQDBxA8Fmg:-MwPib25j30:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKQDBxA8Fmg:-MwPib25j30:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKQDBxA8Fmg:-MwPib25j30:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QKQDBxA8Fmg:-MwPib25j30:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKQDBxA8Fmg:-MwPib25j30:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QKQDBxA8Fmg:-MwPib25j30:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=QKQDBxA8Fmg:-MwPib25j30:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=QKQDBxA8Fmg:-MwPib25j30:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-170137167097334932
title: A Free Solution to Protect Your Business from 6 Biggest Cyber Threats in 2022
uri: A-Free-Solution-to-Protect-Your-Business-from-6-Biggest-Cyber-Threats
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/170137167097334932
content:
For the last few years, the cybersecurity threat landscape has gotten progressively more complex and dangerous. The online world is now rife with data thieves, extortionists, and even state actors looking to exploit vulnerabilities in businesses' digital defenses. 
And unfortunately — the bad guys have the upper hand at the moment. Part of the reason for that is the fallout from the rapid <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdIJe23XkyA:YJMqfkj_-jE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdIJe23XkyA:YJMqfkj_-jE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdIJe23XkyA:YJMqfkj_-jE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fdIJe23XkyA:YJMqfkj_-jE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdIJe23XkyA:YJMqfkj_-jE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fdIJe23XkyA:YJMqfkj_-jE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fdIJe23XkyA:YJMqfkj_-jE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fdIJe23XkyA:YJMqfkj_-jE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6939588380032299519
title: New Android Banking Trojan Spreading via Google Play Store Targets Europeans
uri: New-Android-Banking-Trojan-Spreading-via-Google-Play-Store-Targets-Eur
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6939588380032299519
content:
A new Android banking trojan with over 50,000 installations has been observed distributed via the official Google Play Store with the goal of targeting 56 European banks and carrying out harvesting sensitive information from compromised devices.
Dubbed Xenomorph by Dutch security firm ThreatFabric, the in-development malware is said to share overlaps with another banking trojan tracked under the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y6Usqcs8Agw:zvXEbCPHR1I:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y6Usqcs8Agw:zvXEbCPHR1I:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y6Usqcs8Agw:zvXEbCPHR1I:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y6Usqcs8Agw:zvXEbCPHR1I:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y6Usqcs8Agw:zvXEbCPHR1I:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y6Usqcs8Agw:zvXEbCPHR1I:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Y6Usqcs8Agw:zvXEbCPHR1I:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Y6Usqcs8Agw:zvXEbCPHR1I:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6254268907894095780
title: Iranian State Broadcaster IRIB Hit by Destructive Wiper Malware
uri: Iranian-State-Broadcaster-IRIB-Hit-by-Destructive-Wiper-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6254268907894095780
content:
An investigation into the cyberattack targeting Iranian national media corporation, Islamic Republic of Iran Broadcasting (IRIB), in late January 2022 resulted in the deployment of a wiper malware and other custom implants, as the country's national infrastructure continues to face a wave of attacks aimed at inflicting serious damage.
"This indicates that the attackers' aim was also to disrupt <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DQ4fEBup3os:I3BxrFqpQao:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DQ4fEBup3os:I3BxrFqpQao:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DQ4fEBup3os:I3BxrFqpQao:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DQ4fEBup3os:I3BxrFqpQao:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DQ4fEBup3os:I3BxrFqpQao:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DQ4fEBup3os:I3BxrFqpQao:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DQ4fEBup3os:I3BxrFqpQao:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DQ4fEBup3os:I3BxrFqpQao:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1586845001404638764
title: Chinese Hackers Target Taiwan's Financial Trading Sector with Supply Chain Attack
uri: Chinese-Hackers-Target-Taiwan-s-Financial-Trading-Sector-with-Supply-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1586845001404638764
content:
An advanced persistent threat (APT) group operating with objectives aligned with the Chinese government has been linked to an organized supply chain attack on Taiwan's financial sector.
The attacks are said to have first commenced at the end of November 2021, with the intrusions attributed to a threat actor tracked as APT10, also known as Stone Panda, the MenuPass group, and Bronze Riverside, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=00spS1YYxAs:Opzj_E9gk0w:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=00spS1YYxAs:Opzj_E9gk0w:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=00spS1YYxAs:Opzj_E9gk0w:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=00spS1YYxAs:Opzj_E9gk0w:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=00spS1YYxAs:Opzj_E9gk0w:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=00spS1YYxAs:Opzj_E9gk0w:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=00spS1YYxAs:Opzj_E9gk0w:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=00spS1YYxAs:Opzj_E9gk0w:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6198918637210621407
title: Hackers Backdoor Unpatched Microsoft SQL Database Servers with Cobalt Strike
uri: Hackers-Backdoor-Unpatched-Microsoft-SQL-Database-Servers-with-Cobalt
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6198918637210621407
content:
Vulnerable internet-facing Microsoft SQL (MS SQL) Servers are being targeted by threat actors as part of a new campaign to deploy the Cobalt Strike adversary simulation tool on compromised hosts.
"Attacks that target MS SQL servers include attacks to the environment where its vulnerability has not been patched, brute forcing, and dictionary attack against poorly managed servers," South Korean <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpBrHZCgHUA:rdEJAQj5yvQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpBrHZCgHUA:rdEJAQj5yvQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpBrHZCgHUA:rdEJAQj5yvQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wpBrHZCgHUA:rdEJAQj5yvQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpBrHZCgHUA:rdEJAQj5yvQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wpBrHZCgHUA:rdEJAQj5yvQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpBrHZCgHUA:rdEJAQj5yvQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wpBrHZCgHUA:rdEJAQj5yvQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7717695955944810445
title: Hackers Stole $1.7 Million Worth of NFTs from Users of OpenSea Marketplace
uri: Hackers-Stole-1-7-Million-Worth-of-NFTs-from-Users-of-OpenSea-Marketp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7717695955944810445
content:
Malicious actors took advantage of a smart contract upgrade process in the OpenSea NFT marketplace to carry out a phishing attack against 17 of its users that resulted in the theft of virtual assets worth about $1.7 million.
NFTs, short for non-fungible tokens, are digital tokens that act like certificates of authenticity for, and in some cases represent ownership of, assets that range from <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohuDLv7vi4s:NN0wI4pnZEg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohuDLv7vi4s:NN0wI4pnZEg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohuDLv7vi4s:NN0wI4pnZEg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ohuDLv7vi4s:NN0wI4pnZEg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohuDLv7vi4s:NN0wI4pnZEg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ohuDLv7vi4s:NN0wI4pnZEg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=ohuDLv7vi4s:NN0wI4pnZEg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=ohuDLv7vi4s:NN0wI4pnZEg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8795533940931468842
title: 25 Malicious JavaScript Libraries Distributed via Official NPM Package Repository
uri: 25-Malicious-JavaScript-Libraries-Distributed-via-Official-NPM-Package
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8795533940931468842
content:
Another batch of 25 malicious JavaScript libraries have made their way to the official NPM package registry with the goal of stealing Discord tokens and environment variables from compromised systems, more than two months after 17 similar packages were taken down.
The libraries in question leveraged typosquatting techniques and masqueraded as other legitimate packages such as colors.js, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oNUajIAU-rI:vmuVEMKTHnw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oNUajIAU-rI:vmuVEMKTHnw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oNUajIAU-rI:vmuVEMKTHnw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oNUajIAU-rI:vmuVEMKTHnw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oNUajIAU-rI:vmuVEMKTHnw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oNUajIAU-rI:vmuVEMKTHnw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oNUajIAU-rI:vmuVEMKTHnw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oNUajIAU-rI:vmuVEMKTHnw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-459058864626717822
title: 9-Year-Old Unpatched Email Hacking Bug Uncovered in Horde Webmail Software
uri: 9-Year-Old-Unpatched-Email-Hacking-Bug-Uncovered-in-Horde-Webmail-Soft
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/459058864626717822
content:
Users of Horde Webmail are being urged to disable a feature to contain a nine-year-old unpatched security vulnerability in the software that could be abused to gain complete access to email accounts simply by previewing an attachment.
"This gives the attacker access to all sensitive and perhaps secret information a victim has stored in their email account and could allow them to gain further <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bq9WI0a2Hm4:ggbeU3KQtsU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bq9WI0a2Hm4:ggbeU3KQtsU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bq9WI0a2Hm4:ggbeU3KQtsU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bq9WI0a2Hm4:ggbeU3KQtsU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bq9WI0a2Hm4:ggbeU3KQtsU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bq9WI0a2Hm4:ggbeU3KQtsU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=bq9WI0a2Hm4:ggbeU3KQtsU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=bq9WI0a2Hm4:ggbeU3KQtsU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4507553951606102456
title: Chinese Experts Uncover Details of Equation Group's Bvp47 Covert Hacking Tool
uri: Chinese-Experts-Uncover-Details-of-Equation-Group-s-Bvp47-Covert-Hacki
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4507553951606102456
content:
Researchers from China's Pangu Lab have disclosed details of a "top-tier" backdoor put to use by the Equation Group, an advanced persistent threat (APT) with alleged ties to the cyber-warfare intelligence-gathering unit of the U.S. National Security Agency (NSA).
Dubbed "Bvp47" owing to numerous references to the string "Bvp" and the numerical value "0x47" used in the encryption algorithm, the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iV7Gkg3MauY:eADICHEUKkE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iV7Gkg3MauY:eADICHEUKkE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iV7Gkg3MauY:eADICHEUKkE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iV7Gkg3MauY:eADICHEUKkE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iV7Gkg3MauY:eADICHEUKkE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iV7Gkg3MauY:eADICHEUKkE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=iV7Gkg3MauY:eADICHEUKkE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=iV7Gkg3MauY:eADICHEUKkE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8059720480414672718
title: Dridex Malware Deploying Entropy Ransomware on Hacked Computers
uri: Dridex-Malware-Deploying-Entropy-Ransomware-on-Hacked-Computers
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8059720480414672718
content:
Similarities have been unearthed between the Dridex general-purpose malware and a little-known ransomware strain called Entropy, suggesting that the operators are continuing to rebrand their extortion operations under a different name.
"The similarities are in the software packer used to conceal the ransomware code, in the malware subroutines designed to find and obfuscate commands (API calls), <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r698jKVpmdc:CFm-KcxD-uw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r698jKVpmdc:CFm-KcxD-uw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r698jKVpmdc:CFm-KcxD-uw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r698jKVpmdc:CFm-KcxD-uw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r698jKVpmdc:CFm-KcxD-uw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r698jKVpmdc:CFm-KcxD-uw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=r698jKVpmdc:CFm-KcxD-uw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=r698jKVpmdc:CFm-KcxD-uw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6532220568732741079
title: New Wiper Malware Targeting Ukraine Amid Russia's Military Operation
uri: New-Wiper-Malware-Targeting-Ukraine-Amid-Russia-s-Military-Operation
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6532220568732741079
content:
Cybersecurity firms ESET and Broadcom's Symantec said they discovered a new data wiper malware used in fresh attacks against hundreds of machines in Ukraine, as Russian forces formally launched a full-scale military operation against the country.
The Slovak company dubbed the wiper "HermeticWiper" (aka KillDisk.NCV), with one of the malware samples compiled on December 28, 2021, implying that <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_sfBZyqbJU8:-0krlCmNqJs:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_sfBZyqbJU8:-0krlCmNqJs:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_sfBZyqbJU8:-0krlCmNqJs:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_sfBZyqbJU8:-0krlCmNqJs:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_sfBZyqbJU8:-0krlCmNqJs:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_sfBZyqbJU8:-0krlCmNqJs:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_sfBZyqbJU8:-0krlCmNqJs:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_sfBZyqbJU8:-0krlCmNqJs:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5983748668276278385
title: Warning — Deadbolt Ransomware Targeting ASUSTOR NAS Devices
uri: Warning-Deadbolt-Ransomware-Targeting-ASUSTOR-NAS-Devices
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5983748668276278385
content:
ASUSTOR network-attached storage (NAS) devices have become the latest victim of Deadbolt ransomware, less than a month after similar attacks singled out QNAP NAS appliances.
&lt;!--adsense--&gt;
In response to the infections, the company has released firmware updates (ADM 4.0.4.RQO2) to "fix related security issues." The company is also urging users to take the following actions to keep data secure –
<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MyMd3uROw94:EKkTYKodR-0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MyMd3uROw94:EKkTYKodR-0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MyMd3uROw94:EKkTYKodR-0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MyMd3uROw94:EKkTYKodR-0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MyMd3uROw94:EKkTYKodR-0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MyMd3uROw94:EKkTYKodR-0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=MyMd3uROw94:EKkTYKodR-0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=MyMd3uROw94:EKkTYKodR-0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4492233583394489822
title: CISA Alerts on Actively Exploited Flaws in Zabbix Network Monitoring Platform
uri: CISA-Alerts-on-Actively-Exploited-Flaws-in-Zabbix-Network-Monitoring-P
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4492233583394489822
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of active exploitation of two security flaws impacting Zabbix open-source enterprise monitoring platform, adding them to its Known Exploited Vulnerabilities Catalog.
On top of that, CISA is also recommending that Federal Civilian Executive Branch (FCEB) agencies patch all systems against the vulnerabilities by March 8, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6vRhwKFHTS0:RSwYx3KW7yI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6vRhwKFHTS0:RSwYx3KW7yI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6vRhwKFHTS0:RSwYx3KW7yI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6vRhwKFHTS0:RSwYx3KW7yI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6vRhwKFHTS0:RSwYx3KW7yI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6vRhwKFHTS0:RSwYx3KW7yI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=6vRhwKFHTS0:RSwYx3KW7yI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=6vRhwKFHTS0:RSwYx3KW7yI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6033419744295283983
title: US, UK Agencies Warn of New Russian Botnet Built from Hacked Firewall Devices
uri: US-UK-Agencies-Warn-of-New-Russian-Botnet-Built-from-Hacked-Firewall
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6033419744295283983
content:
Intelligence agencies in the U.K. and the U.S. disclosed details of a new botnet malware called Cyclops Blink that's been attributed to the Russian-backed Sandworm hacking group and deployed in attacks dating back to 2019.
"Cyclops Blink appears to be a replacement framework for the VPNFilter malware exposed in 2018, which exploited network devices, primarily small office/home office (SOHO) <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94V6HFyn6y0:bknv7HpJe3k:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94V6HFyn6y0:bknv7HpJe3k:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94V6HFyn6y0:bknv7HpJe3k:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=94V6HFyn6y0:bknv7HpJe3k:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94V6HFyn6y0:bknv7HpJe3k:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=94V6HFyn6y0:bknv7HpJe3k:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=94V6HFyn6y0:bknv7HpJe3k:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=94V6HFyn6y0:bknv7HpJe3k:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6841266211960873464
title: TrickBot Gang Likely Shifting Operations to Switch to New Malware
uri: TrickBot-Gang-Likely-Shifting-Operations-to-Switch-to-New-Malware
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6841266211960873464
content:
TrickBot, the infamous Windows crimeware-as-a-service (CaaS) solution that's used by a variety of threat actors to deliver next-stage payloads like ransomware, appears to be undergoing a transition of sorts, with no new activity recorded since the start of the year.
The lull in the malware campaigns is "partially due to a big shift from Trickbot's operators, including working with the operators <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NCAbt8wCQA:_0iOL3LP5AE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NCAbt8wCQA:_0iOL3LP5AE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NCAbt8wCQA:_0iOL3LP5AE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9NCAbt8wCQA:_0iOL3LP5AE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NCAbt8wCQA:_0iOL3LP5AE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9NCAbt8wCQA:_0iOL3LP5AE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9NCAbt8wCQA:_0iOL3LP5AE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9NCAbt8wCQA:_0iOL3LP5AE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5964724137968576172
title: From Pet Systems to Cattle Farm — What Happened to the Data Center?
uri: From-Pet-Systems-to-Cattle-Farm-What-Happened-to-the-Data-Center
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5964724137968576172
content:
There's something about craftsmanship. It's personal, its artistry, and it can be incredibly effective in achieving its goals. On the other hand, mass-market production can be effective in other ways, through speed, efficiency, and cost savings.
The story of data centers is one of going from craftsmanship – where every individual machine is a pet project, maintained with great care – to mass <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VT7tBWMU040:EALlmZUNg8c:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VT7tBWMU040:EALlmZUNg8c:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VT7tBWMU040:EALlmZUNg8c:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VT7tBWMU040:EALlmZUNg8c:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VT7tBWMU040:EALlmZUNg8c:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VT7tBWMU040:EALlmZUNg8c:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=VT7tBWMU040:EALlmZUNg8c:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=VT7tBWMU040:EALlmZUNg8c:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7039311186172992443
title: New Flaws Discovered in Cisco's Network Operating System for Switches
uri: New-Flaws-Discovered-in-Cisco-s-Network-Operating-System-for-Switches
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7039311186172992443
content:
Cisco has released software updates to address four security vulnerabilities in its software that could be weaponized by malicious actors to take control of affected systems.
The most critical of the flaws is CVE-2022-20650 (CVSS score: 8.8), which relates to a command injection flaw in the NX-API feature of Cisco NX-OS Software that stems from a lack of sufficient input validation of <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Z6Ni59SZ9s:Esv6DClPlA4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Z6Ni59SZ9s:Esv6DClPlA4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Z6Ni59SZ9s:Esv6DClPlA4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Z6Ni59SZ9s:Esv6DClPlA4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Z6Ni59SZ9s:Esv6DClPlA4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Z6Ni59SZ9s:Esv6DClPlA4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=9Z6Ni59SZ9s:Esv6DClPlA4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=9Z6Ni59SZ9s:Esv6DClPlA4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-909187425250524139
title: Notorious TrickBot Malware Gang Shuts Down its Botnet Infrastructure
uri: Notorious-TrickBot-Malware-Gang-Shuts-Down-its-Botnet-Infrastructure
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/909187425250524139
content:
The modular Windows crimeware platform known as TrickBot formally shuttered its infrastructure on Thursday after reports emerged of its imminent retirement amid a lull in its activity for almost two months, marking an end to one of the most persistent malware campaigns in recent years.
"TrickBot is gone... It is official now as of Thursday, February 24, 2022. See you soon... or not," AdvIntel's <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oY3FrCb0G1o:VXroxt1FnRI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oY3FrCb0G1o:VXroxt1FnRI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oY3FrCb0G1o:VXroxt1FnRI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oY3FrCb0G1o:VXroxt1FnRI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oY3FrCb0G1o:VXroxt1FnRI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oY3FrCb0G1o:VXroxt1FnRI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=oY3FrCb0G1o:VXroxt1FnRI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=oY3FrCb0G1o:VXroxt1FnRI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-504824077303482723
title: Putin Warns Russian Critical Infrastructure to Brace for Potential Cyber Attacks
uri: Putin-Warns-Russian-Critical-Infrastructure-to-Brace-for-Potential-Cyb
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/504824077303482723
content:
The Russian government on Thursday warned of cyber attacks aimed at domestic critical infrastructure operators, as the country's full-blown invasion of Ukraine enters the second day.
In addition to cautioning of the "threat of an increase in the intensity of computer attacks," Russia's National Computer Incident Response and Coordination Center said that the "attacks can be aimed at disrupting <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PDRdaBZ7FOs:KcKF5mEJRe8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PDRdaBZ7FOs:KcKF5mEJRe8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PDRdaBZ7FOs:KcKF5mEJRe8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PDRdaBZ7FOs:KcKF5mEJRe8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PDRdaBZ7FOs:KcKF5mEJRe8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PDRdaBZ7FOs:KcKF5mEJRe8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PDRdaBZ7FOs:KcKF5mEJRe8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PDRdaBZ7FOs:KcKF5mEJRe8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8599627799377494758
title: Iran's MuddyWater Hacker Group Using New Malware in Worldwide Cyber Attacks
uri: Iran-s-MuddyWater-Hacker-Group-Using-New-Malware-in-Worldwide-Cyber-At
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8599627799377494758
content:
Cybersecurity agencies from the U.K. and the U.S. have laid bare a new malware used by the Iranian government-sponsored advanced persistent threat (APT) group in attacks targeting government and commercial networks worldwide.
"MuddyWater actors are positioned both to provide stolen data and accesses to the Iranian government and to share these with other malicious cyber actors," the agencies <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EL2PVfcVcnc:h4geOmxBXYQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EL2PVfcVcnc:h4geOmxBXYQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EL2PVfcVcnc:h4geOmxBXYQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EL2PVfcVcnc:h4geOmxBXYQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EL2PVfcVcnc:h4geOmxBXYQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EL2PVfcVcnc:h4geOmxBXYQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=EL2PVfcVcnc:h4geOmxBXYQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=EL2PVfcVcnc:h4geOmxBXYQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-360960823948463548
title: New "SockDetour" Fileless, Socketless Backdoor Targets U.S. Defense Contractors
uri: New-SockDetour-Fileless-Socketless-Backdoor-Targets-U-S-Defense-Co
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/360960823948463548
content:
Cybersecurity researchers have taken the wraps off a previously undocumented and stealthy custom malware called SockDetour that targeted U.S.-based defense contractors with the goal of being used as a secondary implant on compromised Windows hosts.
"SockDetour is a backdoor that is designed to remain stealthily on compromised Windows servers so that it can serve as a backup backdoor in case the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fQFpbOtxhvI:tZ5YZzZfJaY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fQFpbOtxhvI:tZ5YZzZfJaY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fQFpbOtxhvI:tZ5YZzZfJaY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fQFpbOtxhvI:tZ5YZzZfJaY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fQFpbOtxhvI:tZ5YZzZfJaY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fQFpbOtxhvI:tZ5YZzZfJaY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fQFpbOtxhvI:tZ5YZzZfJaY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fQFpbOtxhvI:tZ5YZzZfJaY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-987869256792391186
title: Russia-Ukraine War: Phishing, Malware and Hacker Groups Taking Sides
uri: Russia-Ukraine-War-Phishing-Malware-and-Hacker-Groups-Taking-Sides
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/987869256792391186
content:
Ukraine's Computer Emergency Response Team (CERT-UA) has warned of Belarusian state-sponsored hackers targeting its military personnel and related individuals as part of a phishing campaign mounted amidst Russia's military invasion of the country.
"Mass phishing emails have recently been observed targeting private 'i.ua' and 'meta.ua' accounts of Ukrainian military personnel and related <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=11EsqvtjYlA:cmybHpthQKI:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=11EsqvtjYlA:cmybHpthQKI:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=11EsqvtjYlA:cmybHpthQKI:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=11EsqvtjYlA:cmybHpthQKI:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=11EsqvtjYlA:cmybHpthQKI:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=11EsqvtjYlA:cmybHpthQKI:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=11EsqvtjYlA:cmybHpthQKI:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=11EsqvtjYlA:cmybHpthQKI:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6104843362539819007
title: Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store
uri: Social-Media-Hijacking-Malware-Spreading-Through-Gaming-Apps-on-Micros
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6104843362539819007
content:
A new malware capable of controlling social media accounts is being distributed through Microsoft's official app store in the form of trojanized gaming apps, infecting more than 5,000 Windows machines in Sweden, Bulgaria, Russia, Bermuda, and Spain.
Israeli cybersecurity company Check Point dubbed the malware "Electron Bot," in reference to a command-and-control (C2) domain used in recent <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K7mAVgOnQr4:cU65-ckCZJc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K7mAVgOnQr4:cU65-ckCZJc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K7mAVgOnQr4:cU65-ckCZJc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K7mAVgOnQr4:cU65-ckCZJc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K7mAVgOnQr4:cU65-ckCZJc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K7mAVgOnQr4:cU65-ckCZJc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=K7mAVgOnQr4:cU65-ckCZJc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=K7mAVgOnQr4:cU65-ckCZJc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-742924777353917053
title: Iranian Hackers Using New Spying Malware That Abuses Telegram Messenger API
uri: Iranian-Hackers-Using-New-Spying-Malware-That-Abuses-Telegram-Messenge
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/742924777353917053
content:
An Iranian geopolitical nexus threat actor has been uncovered deploying two new targeted malware that come with "simple" backdoor functionalities as part of an intrusion against an unnamed Middle East government entity in November 2021.
Cybersecurity company Mandiant attributed the attack to an uncategorized cluster it's tracking under the moniker UNC3313, which it assesses with "moderate <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HZvmEnPweh4:BKUfqufNsfg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HZvmEnPweh4:BKUfqufNsfg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HZvmEnPweh4:BKUfqufNsfg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HZvmEnPweh4:BKUfqufNsfg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HZvmEnPweh4:BKUfqufNsfg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HZvmEnPweh4:BKUfqufNsfg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=HZvmEnPweh4:BKUfqufNsfg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=HZvmEnPweh4:BKUfqufNsfg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4360436413504058271
title: CISA Warns of High-Severity Flaws in Schneider and GE Digital's SCADA Software
uri: CISA-Warns-of-High-Severity-Flaws-in-Schneider-and-GE-Digital-s-SCADA
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4360436413504058271
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) last week published an industrial control system (ICS) advisory related to multiple vulnerabilities impacting Schneider Electric's Easergy medium voltage protection relays.
"Successful exploitation of these vulnerabilities may disclose device credentials, cause a denial-of-service condition, device reboot, or allow an attacker to <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=63b96gGBA10:eREnXPy6gpY:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=63b96gGBA10:eREnXPy6gpY:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=63b96gGBA10:eREnXPy6gpY:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=63b96gGBA10:eREnXPy6gpY:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=63b96gGBA10:eREnXPy6gpY:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=63b96gGBA10:eREnXPy6gpY:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=63b96gGBA10:eREnXPy6gpY:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=63b96gGBA10:eREnXPy6gpY:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6499281503799873721
title: Reborn of Emotet: New Features of the Botnet and How to Detect it
uri: Reborn-of-Emotet-New-Features-of-the-Botnet-and-How-to-Detect-it
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6499281503799873721
content:
One of the most dangerous and infamous threats is back again. In January 2021, global officials took down the botnet. Law enforcement sent a destructive update to the Emotet's executables. And it looked like the end of the trojan's story. 
But the malware never ceased to surprise. 
November 2021, it was reported that TrickBot no longer works alone and delivers Emotet. And ANY.RUN with colleagues<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxOZc8iGoQs:-5-5iietEFU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxOZc8iGoQs:-5-5iietEFU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxOZc8iGoQs:-5-5iietEFU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NxOZc8iGoQs:-5-5iietEFU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxOZc8iGoQs:-5-5iietEFU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NxOZc8iGoQs:-5-5iietEFU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NxOZc8iGoQs:-5-5iietEFU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NxOZc8iGoQs:-5-5iietEFU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8082001567033692872
title: Experts Create Apple AirTag Clone That Can Bypass Anti-Tracking Measures
uri: Experts-Create-Apple-AirTag-Clone-That-Can-Bypass-Anti-Tracking-Measur
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8082001567033692872
content:
Cybersecurity researchers have managed to build a clone of Apple Airtag that circumvents the anti-stalking protection technology built into its Find My Bluetooth-based tracking protocol.
The result is a stealth AirTag that can successfully track an iPhone user for over five days without triggering a tracking notification, Positive Security's co-founder Fabian Bräunlein said in a deep-dive <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-qLe8uYs54:HxvUVaTWcEc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-qLe8uYs54:HxvUVaTWcEc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-qLe8uYs54:HxvUVaTWcEc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-qLe8uYs54:HxvUVaTWcEc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-qLe8uYs54:HxvUVaTWcEc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-qLe8uYs54:HxvUVaTWcEc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=f-qLe8uYs54:HxvUVaTWcEc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=f-qLe8uYs54:HxvUVaTWcEc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5356628390837268774
title: 100 Million Samsung Galaxy Phones Affected with Flawed Hardware Encryption Feature
uri: 100-Million-Samsung-Galaxy-Phones-Affected-with-Flawed-Hardware-Encryp
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5356628390837268774
content:
A group of academics from Tel Aviv University have disclosed details of now-patched "severe" design flaws affecting about 100 million Android-based Samsung smartphones that could have resulted in the extraction of secret cryptographic keys.
The shortcomings are the result of an analysis of the cryptographic design and implementation of Android's hardware-backed Keystore in Samsung's Galaxy S8, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nNjDaMuTU:jICh84e4s90:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nNjDaMuTU:jICh84e4s90:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nNjDaMuTU:jICh84e4s90:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-nNjDaMuTU:jICh84e4s90:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nNjDaMuTU:jICh84e4s90:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-nNjDaMuTU:jICh84e4s90:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=1-nNjDaMuTU:jICh84e4s90:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=1-nNjDaMuTU:jICh84e4s90:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3944073020283574683
title: CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog
uri: CISA-adds-recently-disclosed-Zimbra-bug-to-its-Exploited-Vulnerabiliti
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3944073020283574683
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities Catalog to include a recently disclosed zero-day flaw in the Zimbra email platform citing evidence of active exploitation in the wild.
Tracked as CVE-2022-24682 (CVSS score: 6.1), the issue concerns a cross-site scripting (XSS) vulnerability in the Calendar feature in Zimbra <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WU6CLQ9v4K8:wY3BJVJXiA4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WU6CLQ9v4K8:wY3BJVJXiA4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WU6CLQ9v4K8:wY3BJVJXiA4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WU6CLQ9v4K8:wY3BJVJXiA4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WU6CLQ9v4K8:wY3BJVJXiA4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WU6CLQ9v4K8:wY3BJVJXiA4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=WU6CLQ9v4K8:wY3BJVJXiA4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=WU6CLQ9v4K8:wY3BJVJXiA4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6824864561561792337
title: Microsoft Finds FoxBlade Malware Hit Ukraine Hours Before Russian Invasion
uri: Microsoft-Finds-FoxBlade-Malware-Hit-Ukraine-Hours-Before-Russian-Inva
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6824864561561792337
content:
Microsoft on Monday disclosed that it detected a new round of offensive and destructive cyberattacks directed against Ukraine's digital infrastructure hours before Russia launched its first missile strikes last week.
The intrusions involved the use of a never-before-seen malware package dubbed FoxBlade, according to the tech giant's Threat Intelligence Center (MSTIC), noting that it added new <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vp0-JXDkZus:Xmbpkb0czcg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vp0-JXDkZus:Xmbpkb0czcg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vp0-JXDkZus:Xmbpkb0czcg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Vp0-JXDkZus:Xmbpkb0czcg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vp0-JXDkZus:Xmbpkb0czcg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Vp0-JXDkZus:Xmbpkb0czcg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Vp0-JXDkZus:Xmbpkb0czcg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Vp0-JXDkZus:Xmbpkb0czcg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-115023066935242221
title: China-linked Daxin Malware Targeted Multiple Governments in Espionage Attacks
uri: China-linked-Daxin-Malware-Targeted-Multiple-Governments-in-Espionage
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/115023066935242221
content:
A previously undocumented espionage tool has been deployed against selected governments and other critical infrastructure targets as part of a long-running espionage campaign orchestrated by China-linked threat actors since at least 2013.
Broadcom's Symantec Threat Hunter team characterized the backdoor, named Daxin, as a technologically advanced malware, allowing the attackers to carry out a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TCBE4AFU-6A:e2muwi7pbC8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TCBE4AFU-6A:e2muwi7pbC8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TCBE4AFU-6A:e2muwi7pbC8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TCBE4AFU-6A:e2muwi7pbC8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TCBE4AFU-6A:e2muwi7pbC8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TCBE4AFU-6A:e2muwi7pbC8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=TCBE4AFU-6A:e2muwi7pbC8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=TCBE4AFU-6A:e2muwi7pbC8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2251114479389148564
title: Conti Ransomware Gang's Internal Chats Leaked Online After Siding With Russia
uri: Conti-Ransomware-Gang-s-Internal-Chats-Leaked-Online-After-Siding-With
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2251114479389148564
content:
Days after the Conti ransomware group broadcasted a pro-Russian message pledging its allegiance to Vladimir Putin's ongoing invasion of Ukraine, a disgruntled member of the cartel has leaked the syndicate's internal chats.
The file dump, published by malware research group VX-Underground, is said to contain 13 months of chat logs between affiliates and administrators of the Russia-affiliated <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w7rP6MSGYnk:nRz8M4bKZak:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w7rP6MSGYnk:nRz8M4bKZak:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w7rP6MSGYnk:nRz8M4bKZak:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w7rP6MSGYnk:nRz8M4bKZak:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w7rP6MSGYnk:nRz8M4bKZak:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w7rP6MSGYnk:nRz8M4bKZak:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=w7rP6MSGYnk:nRz8M4bKZak:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=w7rP6MSGYnk:nRz8M4bKZak:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8422244935308666095
title: Trickbot Malware Gang Upgrades its AnchorDNS Backdoor to AnchorMail
uri: Trickbot-Malware-Gang-Upgrades-its-AnchorDNS-Backdoor-to-AnchorMail
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8422244935308666095
content:
Even as the TrickBot infrastructure closed shop, the operators of the malware are continuing to refine and retool their arsenal to carry out attacks that culminated in the deployment of Conti ransomware.
IBM Security X-Force, which discovered the revamped version of the criminal gang's AnchorDNS backdoor, dubbed the new, upgraded variant AnchorMail.
AnchorMail "uses an email-based [<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=scDAYKR-u-4:YmfagGkviB8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=scDAYKR-u-4:YmfagGkviB8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=scDAYKR-u-4:YmfagGkviB8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=scDAYKR-u-4:YmfagGkviB8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=scDAYKR-u-4:YmfagGkviB8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=scDAYKR-u-4:YmfagGkviB8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=scDAYKR-u-4:YmfagGkviB8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=scDAYKR-u-4:YmfagGkviB8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4245237358385354560
title: Second New 'IsaacWiper' Data Wiper Targets Ukraine After Russian Invasion
uri: Second-New-IsaacWiper-Data-Wiper-Targets-Ukraine-After-Russian-Invas
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4245237358385354560
content:
A new data wiper malware has been observed deployed against an unnamed Ukrainian government network, a day after destructive cyber attacks struck multiple entities in the country preceding the start of Russia's military invasion.
Slovak cybersecurity firm ESET dubbed the new malware "IsaacWiper," which it said was detected on February 24 in an organization that was not affected by HermeticWiper <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zhVoNSxef8M:Khur6sWofPU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zhVoNSxef8M:Khur6sWofPU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zhVoNSxef8M:Khur6sWofPU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zhVoNSxef8M:Khur6sWofPU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zhVoNSxef8M:Khur6sWofPU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zhVoNSxef8M:Khur6sWofPU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=zhVoNSxef8M:Khur6sWofPU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=zhVoNSxef8M:Khur6sWofPU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2384774794470126697
title: Critical Security Bugs Uncovered in VoIPmonitor Monitoring Software
uri: Critical-Security-Bugs-Uncovered-in-VoIPmonitor-Monitoring-Software
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2384774794470126697
content:
Critical security vulnerabilities have been uncovered in VoIPmonitor software that, if successfully exploited, could allow unauthenticated attackers to escalate privileges to the administrator level and execute arbitrary commands.
Following responsible disclosure by researchers from Kerbit, an Ethiopia-based penetration-testing and vulnerability research firm, on December 15, 2021, the issues <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ive98gtJlA:yrg7mq92Ipc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ive98gtJlA:yrg7mq92Ipc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ive98gtJlA:yrg7mq92Ipc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ive98gtJlA:yrg7mq92Ipc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ive98gtJlA:yrg7mq92Ipc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ive98gtJlA:yrg7mq92Ipc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=_Ive98gtJlA:yrg7mq92Ipc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=_Ive98gtJlA:yrg7mq92Ipc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7307324759947667954
title: TeaBot Android Banking Malware Spreads Again Through Google Play Store Apps
uri: TeaBot-Android-Banking-Malware-Spreads-Again-Through-Google-Play-Store
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7307324759947667954
content:
An Android banking trojan designed to steal credentials and SMS messages has been observed sneaking past Google Play Store protections to target users of more than 400 banking and financial apps from Russia, China, and the U.S.
"TeaBot RAT capabilities are achieved via the device screen's live streaming (requested on-demand) plus the abuse of Accessibility Services for remote interaction and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fM9_OItCO6Y:UtWzeDOUE3U:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fM9_OItCO6Y:UtWzeDOUE3U:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fM9_OItCO6Y:UtWzeDOUE3U:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fM9_OItCO6Y:UtWzeDOUE3U:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fM9_OItCO6Y:UtWzeDOUE3U:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fM9_OItCO6Y:UtWzeDOUE3U:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=fM9_OItCO6Y:UtWzeDOUE3U:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=fM9_OItCO6Y:UtWzeDOUE3U:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2276208100218992308
title: Critical Bugs Reported in Popular Open Source PJSIP SIP and Media Stack
uri: Critical-Bugs-Reported-in-Popular-Open-Source-PJSIP-SIP-and-Media-Stac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2276208100218992308
content:
As many as five security vulnerabilities have been disclosed in the PJSIP open-source multimedia communication library that could be abused by an attacker to trigger arbitrary code execution and denial-of-service (DoS) in applications that use the protocol stack.
The weaknesses were identified and reported by JFrog's Security Research team, following which the project maintainers released <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWWzsKNv0XM:KSUsSXbANpk:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWWzsKNv0XM:KSUsSXbANpk:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWWzsKNv0XM:KSUsSXbANpk:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UWWzsKNv0XM:KSUsSXbANpk:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWWzsKNv0XM:KSUsSXbANpk:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UWWzsKNv0XM:KSUsSXbANpk:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=UWWzsKNv0XM:KSUsSXbANpk:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=UWWzsKNv0XM:KSUsSXbANpk:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3051912626696540300
title: Hackers Begin Weaponizing TCP Middlebox Reflection for Amplified DDoS Attacks
uri: Hackers-Begin-Weaponizing-TCP-Middlebox-Reflection-for-Amplified-DDoS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3051912626696540300
content:
Distributed denial-of-service (DDoS) attacks leveraging a new amplification technique called TCP Middlebox Reflection have been detected for the first time in the wild, six months after the novel attack mechanism was presented in theory.
"The attack […] abuses vulnerable firewalls and content filtering systems to reflect and amplify TCP traffic to a victim machine, creating a powerful DDoS <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DK0tv2QmvsM:SmURLRVJxeg:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DK0tv2QmvsM:SmURLRVJxeg:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DK0tv2QmvsM:SmURLRVJxeg:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DK0tv2QmvsM:SmURLRVJxeg:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DK0tv2QmvsM:SmURLRVJxeg:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DK0tv2QmvsM:SmURLRVJxeg:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DK0tv2QmvsM:SmURLRVJxeg:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DK0tv2QmvsM:SmURLRVJxeg:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9015305461879705618
title: LIVE Webinar: Key Lessons Learned from Major Cyberattacks in 2021 and What to Expect in 2022
uri: LIVE-Webinar-Key-Lessons-Learned-from-Major-Cyberattacks-in-2021-and
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9015305461879705618
content:
With the COVID-19 pandemic continuing to impact, and perhaps permanently changing, how we work, cybercriminals again leveraged the distraction in new waves of cyberattacks. 
Over the course of 2021 we saw an increase in multiple attack approaches; some old, some new. Phishing and ransomware continued to grow from previous years, as expected, while new attacks on supply chains and <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cJ1j_WZjG6c:PSpVGW6cqrU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cJ1j_WZjG6c:PSpVGW6cqrU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cJ1j_WZjG6c:PSpVGW6cqrU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cJ1j_WZjG6c:PSpVGW6cqrU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cJ1j_WZjG6c:PSpVGW6cqrU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cJ1j_WZjG6c:PSpVGW6cqrU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=cJ1j_WZjG6c:PSpVGW6cqrU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=cJ1j_WZjG6c:PSpVGW6cqrU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5519454562749574885
title: Hackers Try to Target European Officials to Get Info on Ukrainian Refugees, Supplies
uri: Hackers-Try-to-Target-European-Officials-to-Get-Info-on-Ukrainian-Refu
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5519454562749574885
content:
Details of a new nation-state sponsored phishing campaign have been uncovered setting its sights on European governmental entities in what's seen as an attempt to obtain intelligence on refugee and supply movement in the region.
Enterprise security company Proofpoint, which detected the malicious emails for the first time on February 24, 2022, dubbed the social engineering attacks "Asylum <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dq7hjLPr2ew:RXSosUhQ8Ks:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dq7hjLPr2ew:RXSosUhQ8Ks:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dq7hjLPr2ew:RXSosUhQ8Ks:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Dq7hjLPr2ew:RXSosUhQ8Ks:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dq7hjLPr2ew:RXSosUhQ8Ks:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Dq7hjLPr2ew:RXSosUhQ8Ks:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=Dq7hjLPr2ew:RXSosUhQ8Ks:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=Dq7hjLPr2ew:RXSosUhQ8Ks:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2173979160779892466
title: Report: Nearly 75% of Infusion Pumps Affected by Severe Vulnerabilities
uri: Report-Nearly-75-of-Infusion-Pumps-Affected-by-Severe-Vulnerabilitie
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2173979160779892466
content:
An analysis of data crowdsourced from more than 200,000 network-connected infusion pumps used in hospitals and healthcare entities has revealed that 75% of those medical devices contain security weaknesses that could put them at risk of potential exploitation.
"These shortcomings included exposure to one or more of some 40 known cybersecurity vulnerabilities and/or alerts that they had one or <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpjiVnFL1y0:3XJEVd88Zn8:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpjiVnFL1y0:3XJEVd88Zn8:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpjiVnFL1y0:3XJEVd88Zn8:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wpjiVnFL1y0:3XJEVd88Zn8:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpjiVnFL1y0:3XJEVd88Zn8:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wpjiVnFL1y0:3XJEVd88Zn8:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=wpjiVnFL1y0:3XJEVd88Zn8:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=wpjiVnFL1y0:3XJEVd88Zn8:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-8438038334459901312
title: U.S. Senate Passes Cybersecurity Bill to Strengthen Critical Infrastructure Security
uri: U-S-Senate-Passes-Cybersecurity-Bill-to-Strengthen-Critical-Infrastru
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/8438038334459901312
content:
The U.S. Senate unanimously passed the "Strengthening American Cybersecurity Act" on Tuesday in an attempt to bolster the cybersecurity of critical infrastructure owners in the country.
The new bipartisan legislation, among other things, stipulates entities that experience a cyber incident to report the attacks within 72 hours to the U.S. Cybersecurity and Infrastructure Security Agency (CISA), <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17637XI-Rms:vMswh2wA9tE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17637XI-Rms:vMswh2wA9tE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17637XI-Rms:vMswh2wA9tE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17637XI-Rms:vMswh2wA9tE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17637XI-Rms:vMswh2wA9tE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17637XI-Rms:vMswh2wA9tE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=17637XI-Rms:vMswh2wA9tE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=17637XI-Rms:vMswh2wA9tE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4612096393238605847
title: Hackers Who Broke Into NVIDIA's Network Leak DLSS Source Code Online
uri: Hackers-Who-Broke-Into-NVIDIA-s-Network-Leak-DLSS-Source-Code-Online
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4612096393238605847
content:
American chipmaking company NVIDIA on Tuesday confirmed that its network was breached as a result of a cyber attack, enabling the perpetrators to gain access to sensitive data, including source code purportedly associated with its Deep Learning Super Sampling (DLSS) technology.
"We have no evidence of ransomware being deployed on the NVIDIA environment or that this is related to the <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8-bDsx_gats:LJCGY1uR-SQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8-bDsx_gats:LJCGY1uR-SQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8-bDsx_gats:LJCGY1uR-SQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8-bDsx_gats:LJCGY1uR-SQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8-bDsx_gats:LJCGY1uR-SQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8-bDsx_gats:LJCGY1uR-SQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8-bDsx_gats:LJCGY1uR-SQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8-bDsx_gats:LJCGY1uR-SQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-708113833792915295
title: Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption
uri: Researchers-Demonstrate-New-Side-Channel-Attack-on-Homomorphic-Encrypt
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/708113833792915295
content:
A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the "first side-channel attack" on homomorphic encryption that could be exploited to leak data as the encryption process is underway.
"Basically, by monitoring power consumption in a device that is encoding data for homomorphic encryption, we are able to read the data as it<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aSfHx-d8Z-E:XvJMikc6wJ0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aSfHx-d8Z-E:XvJMikc6wJ0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aSfHx-d8Z-E:XvJMikc6wJ0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aSfHx-d8Z-E:XvJMikc6wJ0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aSfHx-d8Z-E:XvJMikc6wJ0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aSfHx-d8Z-E:XvJMikc6wJ0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=aSfHx-d8Z-E:XvJMikc6wJ0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=aSfHx-d8Z-E:XvJMikc6wJ0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-1062220042360457104
title: Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products
uri: Critical-Patches-Issued-for-Cisco-Expressway-Series-TelePresence-VCS
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/1062220042360457104
content:
Cisco this week shipped patches to address a new round of critical security vulnerabilities affecting Expressway Series and Cisco TelePresence Video Communication Server (VCS) that could be exploited by an attacker to gain elevated privileges and execute arbitrary code.
The two flaws – tracked as CVE-2022-20754 and CVE-2022-20755 (CVSS scores: 9.0) – relate to an arbitrary file write and a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YT2nv0ZZ9ok:M4ibSbd6l0A:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YT2nv0ZZ9ok:M4ibSbd6l0A:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YT2nv0ZZ9ok:M4ibSbd6l0A:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YT2nv0ZZ9ok:M4ibSbd6l0A:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YT2nv0ZZ9ok:M4ibSbd6l0A:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YT2nv0ZZ9ok:M4ibSbd6l0A:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=YT2nv0ZZ9ok:M4ibSbd6l0A:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=YT2nv0ZZ9ok:M4ibSbd6l0A:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3025927661214154719
title: How to Automate Offboarding to Keep Your Company Safe
uri: How-to-Automate-Offboarding-to-Keep-Your-Company-Safe
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3025927661214154719
content:
In the midst of 'The Great Resignation,' the damage from employees (or contractors) leaving an organization might be one of the greatest risks facing IT teams today. The reality is that in the busy enterprise computing environment, user onboarding and offboarding is a fact of daily life. 
When employee counts range into the five-figure territory — and entire networks of contractors have to be <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ltV36auL7Y:eq3ZiPGJUtc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ltV36auL7Y:eq3ZiPGJUtc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ltV36auL7Y:eq3ZiPGJUtc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8ltV36auL7Y:eq3ZiPGJUtc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ltV36auL7Y:eq3ZiPGJUtc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8ltV36auL7Y:eq3ZiPGJUtc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=8ltV36auL7Y:eq3ZiPGJUtc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=8ltV36auL7Y:eq3ZiPGJUtc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-9006106779129703617
title: New Security Vulnerability Affects Thousands of GitLab Instances
uri: New-Security-Vulnerability-Affects-Thousands-of-GitLab-Instances
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/9006106779129703617
content:
Researchers have disclosed details of a now-patched security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenticated attacker to recover user-related information.
Tracked as CVE-2021-4191 (CVSS score: 5.3), the medium-severity flaw affects all versions of GitLab Community Edition and Enterprise Edition starting from 13.0 and all versions <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFHznFf04h4:lw7pbT6dzrU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFHznFf04h4:lw7pbT6dzrU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFHznFf04h4:lw7pbT6dzrU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kFHznFf04h4:lw7pbT6dzrU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFHznFf04h4:lw7pbT6dzrU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kFHznFf04h4:lw7pbT6dzrU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=kFHznFf04h4:lw7pbT6dzrU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=kFHznFf04h4:lw7pbT6dzrU:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4116475903333393553
title: Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks
uri: Russia-Releases-List-of-IPs-Domains-Attacking-Its-Infrastructure-with
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4116475903333393553
content:
As the ongoing Russia-Ukraine conflict continues to escalate, the Russian government on Thursday released a massive list containing 17,576 IP addresses and 166 domains that it said are behind a series of distributed denial-of-service (DDoS) attacks aimed at its domestic infrastructure.
Some of the noticeable domains in the listing released by Russia's National Coordination Center for Computer <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NEDjrDCuLSs:tad22IAhPwQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NEDjrDCuLSs:tad22IAhPwQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NEDjrDCuLSs:tad22IAhPwQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NEDjrDCuLSs:tad22IAhPwQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NEDjrDCuLSs:tad22IAhPwQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NEDjrDCuLSs:tad22IAhPwQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=NEDjrDCuLSs:tad22IAhPwQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=NEDjrDCuLSs:tad22IAhPwQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-47422175234418686
title: Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism
uri: Both-Sides-in-Russia-Ukraine-War-Heavily-Using-Telegram-for-Disinforma
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/47422175234418686
content:
Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app for their activities, as the Russia-Ukraine conflict enters its eighth day.
A new analysis by Israeli cybersecurity company Check Point Research has found that "user volume grew a hundred folds daily on Telegram related groups, peaking at 200,000 per group."
Prominent among the groups are anti-Russian cyber <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3YbPAEEWN0:AjhENvWNUqA:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3YbPAEEWN0:AjhENvWNUqA:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3YbPAEEWN0:AjhENvWNUqA:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V3YbPAEEWN0:AjhENvWNUqA:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3YbPAEEWN0:AjhENvWNUqA:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V3YbPAEEWN0:AjhENvWNUqA:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=V3YbPAEEWN0:AjhENvWNUqA:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=V3YbPAEEWN0:AjhENvWNUqA:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-2925848278907820334
title: New Linux Kernel Cgroups Vulnerability Could Let Attackers Escape Container
uri: New-Linux-Kernel-Cgroups-Vulnerability-Could-Let-Attackers-Escape-Cont
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/2925848278907820334
content:
Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container host.
The shortcoming resides in a Linux kernel feature called control groups, also referred to as cgroups version 1 (v1), which allows processes to be organized into hierarchical groups, <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kvv5EjBDgY:EzrEZBaalnw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kvv5EjBDgY:EzrEZBaalnw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kvv5EjBDgY:EzrEZBaalnw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0kvv5EjBDgY:EzrEZBaalnw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kvv5EjBDgY:EzrEZBaalnw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0kvv5EjBDgY:EzrEZBaalnw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=0kvv5EjBDgY:EzrEZBaalnw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=0kvv5EjBDgY:EzrEZBaalnw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-6417256509767125538
title: Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks
uri: Imperva-Thwarts-2-5-Million-RPS-Ransom-DDoS-Extortion-Attacks
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/6417256509767125538
content:
Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS).
"While ransom DDoS attacks are not new, they appear to be evolving and becoming more interesting with time and with each new phase," Nelli Klepfish, security analyst at Imperva, said. "For <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eW10WxdietQ:fVZGIDH-0PE:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eW10WxdietQ:fVZGIDH-0PE:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eW10WxdietQ:fVZGIDH-0PE:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eW10WxdietQ:fVZGIDH-0PE:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eW10WxdietQ:fVZGIDH-0PE:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eW10WxdietQ:fVZGIDH-0PE:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=eW10WxdietQ:fVZGIDH-0PE:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=eW10WxdietQ:fVZGIDH-0PE:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3208812073160282580
title: CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog
uri: CISA-Adds-Another-95-Flaws-to-its-Actively-Exploited-Vulnerabilities-C
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3208812073160282580
content:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478.
"These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise," the agency said in an advisory <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mQhEZflSqBs:wEwZYIkV4_E:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mQhEZflSqBs:wEwZYIkV4_E:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mQhEZflSqBs:wEwZYIkV4_E:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mQhEZflSqBs:wEwZYIkV4_E:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mQhEZflSqBs:wEwZYIkV4_E:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mQhEZflSqBs:wEwZYIkV4_E:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=mQhEZflSqBs:wEwZYIkV4_E:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=mQhEZflSqBs:wEwZYIkV4_E:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4478893909078301748
title: 2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!
uri: 2-New-Mozilla-Firefox-0-Day-Bugs-Under-Active-Attack-Patch-Your-Br
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4478893909078301748
content:
Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild.
Tracked as CVE-2022-26485 and CVE-2022-26486, the zero-day flaws have been described as use-after-free issues impacting the Extensible Stylesheet Language Transformations (XSLT) parameter processing and the<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DsMARc3Z04c:qvWE5zaSWi4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DsMARc3Z04c:qvWE5zaSWi4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DsMARc3Z04c:qvWE5zaSWi4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DsMARc3Z04c:qvWE5zaSWi4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DsMARc3Z04c:qvWE5zaSWi4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DsMARc3Z04c:qvWE5zaSWi4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=DsMARc3Z04c:qvWE5zaSWi4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=DsMARc3Z04c:qvWE5zaSWi4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4515240154658299756
title: SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store
uri: SharkBot-Banking-Malware-Spreading-via-Fake-Android-Antivirus-App-on-G
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4515240154658299756
content:
The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app.
SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), belongs to a category of financial trojans capable of siphoning credentials to initiate money transfers from compromised devices by circumventing <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vUqn2Hj0B8g:7r0Xr7HqaG0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vUqn2Hj0B8g:7r0Xr7HqaG0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vUqn2Hj0B8g:7r0Xr7HqaG0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vUqn2Hj0B8g:7r0Xr7HqaG0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vUqn2Hj0B8g:7r0Xr7HqaG0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vUqn2Hj0B8g:7r0Xr7HqaG0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=vUqn2Hj0B8g:7r0Xr7HqaG0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=vUqn2Hj0B8g:7r0Xr7HqaG0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-5584781042669103395
title: Understanding How Hackers Recon
uri: Understanding-How-Hackers-Recon
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/5584781042669103395
content:
Cyber-attacks keep increasing and evolving but, regardless of the degree of complexity used by hackers to gain access, get a foothold, cloak their malware, execute their payload or exfiltrate data, their attack will begin with reconnaissance. They will do their utmost to uncover exposed assets and probe their target's attack surface for gaps that can be used as entry points.
So, the first line <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3UH-4cez_E:E7rNUjDXjy0:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3UH-4cez_E:E7rNUjDXjy0:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3UH-4cez_E:E7rNUjDXjy0:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z3UH-4cez_E:E7rNUjDXjy0:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3UH-4cez_E:E7rNUjDXjy0:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z3UH-4cez_E:E7rNUjDXjy0:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=z3UH-4cez_E:E7rNUjDXjy0:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=z3UH-4cez_E:E7rNUjDXjy0:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-7130218495959909383
title: Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts
uri: Ukrainian-CERT-Warns-Citizens-of-Phishing-Attacks-Using-Compromised-Ac
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/7130218495959909383
content:
Ukraine's Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of compromising their inboxes and stealing sensitive information.
The agency cautioned that the emails arrive with the subject line "Увага" (meaning "Attention") and claim to be from a <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2bLziZjexGU:I5egJR37UDw:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2bLziZjexGU:I5egJR37UDw:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2bLziZjexGU:I5egJR37UDw:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2bLziZjexGU:I5egJR37UDw:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2bLziZjexGU:I5egJR37UDw:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2bLziZjexGU:I5egJR37UDw:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=2bLziZjexGU:I5egJR37UDw:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=2bLziZjexGU:I5egJR37UDw:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-708665610403208862
title: Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking
uri: Critical-Bugs-in-TerraMaster-TOS-Could-Open-NAS-Devices-to-Remote-Hack
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/708665610403208862
content:
Researchers have disclosed details of critical security vulnerabilities in TerraMaster network-attached storage (TNAS) devices that could be chained to attain unauthenticated remote code execution with the highest privileges.
The issues reside in TOS, an abbreviation for TerraMaster Operating System, and "can grant unauthenticated attackers access to the victim's box simply by knowing the IP <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FoWXfo6GiYw:8M8QXRt2abc:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FoWXfo6GiYw:8M8QXRt2abc:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FoWXfo6GiYw:8M8QXRt2abc:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FoWXfo6GiYw:8M8QXRt2abc:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FoWXfo6GiYw:8M8QXRt2abc:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FoWXfo6GiYw:8M8QXRt2abc:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=FoWXfo6GiYw:8M8QXRt2abc:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=FoWXfo6GiYw:8M8QXRt2abc:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4217746487643206897
title: The Continuing Threat of Unpatched Security Vulnerabilities
uri: The-Continuing-Threat-of-Unpatched-Security-Vulnerabilities
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4217746487643206897
content:
Unpatched software is a computer code containing known security weaknesses. Unpatched vulnerabilities refer to weaknesses that allow attackers to leverage a known security bug that has not been patched by running malicious code. Software vendors write additions to the codes, known as "patches," when they come to know about these application vulnerabilities to secure these weaknesses.
Adversaries<div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PtsRiiZnDYk:y1BMZBFzXw4:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PtsRiiZnDYk:y1BMZBFzXw4:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PtsRiiZnDYk:y1BMZBFzXw4:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PtsRiiZnDYk:y1BMZBFzXw4:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PtsRiiZnDYk:y1BMZBFzXw4:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PtsRiiZnDYk:y1BMZBFzXw4:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=PtsRiiZnDYk:y1BMZBFzXw4:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=PtsRiiZnDYk:y1BMZBFzXw4:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-4076973031406651665
title: Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability
uri: Researchers-Warn-of-Linux-Kernel-Dirty-Pipe-Arbitrary-File-Overw
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/4076973031406651665
content:
Linux distributions are in the process of issuing patches to address a newly disclosed security vulnerability in the kernel that could allow an attacker to overwrite arbitrary data into any read-only files and allow for a complete takeover of affected systems.
Dubbed "Dirty Pipe" (CVE-2022-0847, CVSS score: 7.8) by IONOS software developer Max Kellermann, the flaw "leads to privilege escalation <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dojo1RlfQQY:_KCImwY11cQ:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dojo1RlfQQY:_KCImwY11cQ:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dojo1RlfQQY:_KCImwY11cQ:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dojo1RlfQQY:_KCImwY11cQ:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dojo1RlfQQY:_KCImwY11cQ:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dojo1RlfQQY:_KCImwY11cQ:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=dojo1RlfQQY:_KCImwY11cQ:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=dojo1RlfQQY:_KCImwY11cQ:F7zBnMyn0Lo" border="0"></img></a>
</div>


feed_id: tag:blogger.com,1999:blog-4802841478634147276.post-3761289370097301881
title: Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' Accounts
uri: Microsoft-Azure-AutoWarp-Bug-Could-Have-Let-Attackers-Access-Custome
url: http://www.blogger.com/feeds/4802841478634147276/posts/default/3761289370097301881
content:
Details have been disclosed about a now-addressed critical vulnerability in Microsoft's Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control.
"This attack could mean full control over resources and data belonging to the targeted account, depending on the permissions assigned by the customer," Orca Security researcher Yanir <div class="feedflare">
<a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x-X49tInkN0:cIQCnElnoCU:yIl2AUoC8zA"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=yIl2AUoC8zA" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x-X49tInkN0:cIQCnElnoCU:qj6IDK7rITs"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?d=qj6IDK7rITs" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x-X49tInkN0:cIQCnElnoCU:gIN9vFwOqvQ"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x-X49tInkN0:cIQCnElnoCU:gIN9vFwOqvQ" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x-X49tInkN0:cIQCnElnoCU:V_sGLiPBpWU"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x-X49tInkN0:cIQCnElnoCU:V_sGLiPBpWU" border="0"></img></a> <a href="http://feeds.feedburner.com/~ff/theHackerNews_com?a=x-X49tInkN0:cIQCnElnoCU:F7zBnMyn0Lo"><img src="http://feeds.feedburner.com/~ff/theHackerNews_com?i=x-X49tInkN0:cIQCnElnoCU:F7zBnMyn0Lo" border="0"></img></a>
</div>


