Category: TheHackerNews

NjRAT Trojan
18
Jan
2023

Earth Bogle Campaign Unleashes NjRAT Trojan on Middle East and North Africa

Jan 18, 2023Ravie LakshmananCyber Threat / Malware An ongoing campaign dubbed Earth Bogle is leveraging geopolitical-themed lures to deliver the…

Remote Code Execution Attacks
18
Jan
2023

Git Users Urged to Update Software to Prevent Remote Code Execution Attacks

Jan 18, 2023Ravie LakshmananDevOpsSec / Software Security The maintainers of the Git source code version control system have released updates…

Netcomm and TP-Link Routers
18
Jan
2023

Critical Security Vulnerabilities Discovered in Netcomm and TP-Link Routers

Jan 18, 2023Ravie LakshmananNetwork Security Security vulnerabilities have been disclosed in Netcomm and TP-Link routers, some of which could be…

BackdoorDiplomacy Cyber Attacks
18
Jan
2023

Iranian Government Entities Under Attack by New Wave of BackdoorDiplomacy Attacks

Jan 18, 2023Ravie LakshmananCyber Espionage / Cyber Risk The threat actor known as BackdoorDiplomacy has been linked to a new…

virtual CISO
18
Jan
2023

How MSSPs and vCISOs can extend their services into compliance readiness without increasing cost

Jan 18, 2023The Hacker NewsVirtual CISO / Automated vCISO Compliance services are emerging as one of the hottest areas of…

Industrial Control Systems
18
Jan
2023

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

Jan 18, 2023Ravie LakshmananICS/SCADA Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published four Industrial Control Systems (ICS)…

Zoho ManageEngine PoC Exploit
17
Jan
2023

Zoho ManageEngine PoC Exploit to be Released Soon

Jan 17, 2023Ravie LakshmananCyber Threat / Vulnerability Users of Zoho ManageEngine are being urged to patch their instances against a…

Microsoft Azure Services
17
Jan
2023

Microsoft Azure Services Flaws Could’ve Exposed Cloud Resources to Unauthorized Access

Jan 17, 2023Ravie LakshmananCloud Security / Bug Report Four different Microsoft Azure services have been found vulnerable to server-side request…

GitHub Codespaces
17
Jan
2023

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

Jan 17, 2023Ravie LakshmananThreat Response / Malware New research has found that it is possible for threat actors to abuse…

SOC Platforms
17
Jan
2023

4 Places to Supercharge Your SOC with Automation

It’s no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks…

PyPI Package
17
Jan
2023

Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems

Jan 17, 2023Ravie LakshmananSoftware Security / Supply Chain A threat actor by the name Lolip0p has uploaded three rogue packages…

Identity Management
16
Jan
2023

A Secure User Authentication Method – Planning is More Important than Ever

Jan 16, 2023The Hacker NewsIdentity Management / MFA When considering authentication providers, many organizations consider the ease of configuration, ubiquity…