Category: TheHackerNews

Gitlab Vulnerabilities
12
Jan
2024

Urgent: GitLab Releases Patch for Critical Vulnerabilities

Jan 12, 2024NewsroomDevSecOps / Software security GitLab has released security updates to address two critical vulnerabilities, including one that could…

Medusa Ransomware
12
Jan
2024

From Data Leaks to Multi-Extortion

The threat actors associated with the Medusa ransomware have ramped up their activities following the debut of a dedicated data…

Ivanti Zero-Days
12
Jan
2024

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

Jan 12, 2024NewsroomVulnerability / Threat Intelligence As many as five different malware families were deployed by suspected nation-state actors as…

Principle to Cybersecurity
12
Jan
2024

Why Attack Simulation is Key to Avoiding a KO

Picture a cybersecurity landscape where defenses are impenetrable, and threats are nothing more than mere disturbances deflected by a strong…

Apache Hadoop and Flink
12
Jan
2024

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

Jan 12, 2024NewsroomCryptocurrency / Malware Cybersecurity researchers have identified a new attack that exploits misconfigurations in Apache Hadoop and Flink…

Microsoft SharePoint Vulnerability
12
Jan
2024

CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

Jan 12, 2024NewsroomCyber Attack / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security vulnerability…

FBot Hacking Toolkit
11
Jan
2024

New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

Jan 11, 2024NewsroomCloud Security / Cyber Attacks A new Python-based hacking tool called FBot has been uncovered targeting web servers,…

GitHub for Malicious Purposes
11
Jan
2024

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

Jan 11, 2024NewsroomCybersecurity / Software Security The ubiquity of GitHub in information technology (IT) environments has made it a lucrative…

Apache OfBiz Vulnerability
11
Jan
2024

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

Jan 11, 2024NewsroomVulnerability / Cyber Attack Cybersecurity researchers have developed a proof-of-concept (PoC) code that exploits a recently disclosed critical…

Atomic Stealer
11
Jan
2024

Atomic Stealer Gets an Upgrade

Jan 11, 2024NewsroomMalvertising / Cyber Attacks Cybersecurity researchers have identified an updated version of a macOS information stealer called Atomic…

Ransomware Armageddon
11
Jan
2024

There is a Ransomware Armageddon Coming for Us All

Generative AI will enable anyone to launch sophisticated phishing attacks that only Next-generation MFA devices can stop The least surprising…

Unity Connection Software
11
Jan
2024

Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

Jan 11, 2024NewsroomVulnerability / Patch Management Cisco has released software updates to address a critical security flaw impacting Unity Connection…