Category: TheHackerNews

Cryptocurrency Heist
23
Aug
2023

North Korean Affiliates Suspected in $40M Cryptocurrency Heist, FBI Warns

Aug 23, 2023THNCryptocurrency / Cyber Attack The U.S. Federal Bureau of Investigation (FBI) on Tuesday warned that threat actors affiliated…

Syrian Threat Actor EVLF Unmasked as Creator of CypherRAT and CraxsRAT Android Malware
23
Aug
2023

Syrian Threat Actor EVLF Unmasked as Creator of CypherRAT and CraxsRAT Android Malware

Aug 23, 2023THNMobile Security / Cyber Crime A Syrian threat actor named EVLF has been outed as the creator of…

Scarab Ransomware Attacks
23
Aug
2023

Spacecolon Toolset Fuels Global Surge in Scarab Ransomware Attacks

Aug 23, 2023THNRansomware / Malware A malicious toolset dubbed Spacecolon is being deployed as part of an ongoing campaign to…

Roblox Game Developers
23
Aug
2023

Over a Dozen Malicious npm Packages Target Roblox Game Developers

Aug 23, 2023THNSoftware Security / Malware More than a dozen malicious packages have been discovered on the npm package repository…

CISOs Tout SaaS Cybersecurity Confidence, But 79% Admit to SaaS Incidents, New Report Finds
22
Aug
2023

CISOs Tout SaaS Cybersecurity Confidence, But 79% Admit to SaaS Incidents, New Report Finds

A new State of SaaS Security Posture Management Report from SaaS cybersecurity provider AppOmni indicates that Cybersecurity, IT, and business…

Malicious Software Updates
22
Aug
2023

Hong Kong Organizations Targeted via Malicious Software Updates

Aug 22, 2023THNSoftware Supply Chain / Malware A previously undocumented threat cluster has been linked to a software supply chain…

XLoader macOS Malware
22
Aug
2023

New Variant of XLoader macOS Malware Disguised as ‘OfficeNote’ Productivity App

Aug 22, 2023THNMalware / Endpoint Security A new variant of an Apple macOS malware called XLoader has surfaced in the…

Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software
22
Aug
2023

Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software

Aug 22, 2023THNZero-Day / Software Security Software services provider Ivanti is warning of a new critical zero-day flaw impacting Ivanti…

CISA Exploited Vulnerability Catalog
22
Aug
2023

Critical Adobe ColdFusion Flaw Added to CISA’s Exploited Vulnerability Catalog

Aug 22, 2023THNVulnerability / Cyber Threat The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw…

WinRAR Vulnerability
21
Aug
2023

New WinRAR Vulnerability Could Allow Hackers to Take Control of Your PC

Aug 21, 2023THNVulnerability / Cyber Threat A high-severity security flaw has been disclosed in the WinRAR utility that could be…

Investigate an OAuth Grant
21
Aug
2023

How to Investigate an OAuth Grant for Suspicious Activity or Overly Permissive Scopes

From a user’s perspective, OAuth works like magic. In just a few keystrokes, you can whisk through the account creation…

Proxy Servers
21
Aug
2023

This Malware Turned Thousands of Hacked Windows and macOS PCs into Proxy Servers

Aug 21, 2023THNMalware / Privacy Threat actors are leveraging access to malware-infected Windows and macOS machines to deliver a proxy…