Category: TheHackerNews

Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers' Systems
02
Sep
2024

Malicious npm Packages Mimicking ‘noblox.js’ Compromise Roblox Developers’ Systems

Sep 02, 2024Ravie LakshmananSoftware Security / Malware Roblox developers are the target of a persistent campaign that seeks to compromise…

North Korean Hackers
31
Aug
2024

North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit

Aug 31, 2024Ravie LakshmananRootkit / Threat Intelligence A recently patched security flaw in Google Chrome and other Chromium web browsers…

Atlassian Confluence Vulnerability
30
Aug
2024

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Aug 30, 2024Ravie LakshmananCryptojacking / Vulnerability Threat actors are actively exploiting a now-patched, critical security flaw impacting the Atlassian Confluence…

New Malware Masquerades as Palo Alto VPN Targeting Middle East Users
30
Aug
2024

New Malware Masquerades as Palo Alto VPN Targeting Middle East Users

Aug 30, 2024Ravie LakshmananMalware / Network Security Cybersecurity researchers have disclosed a new campaign that potentially targets users in the…

Cyberattackers Exploit Google Sheets for Malware Control in Likely Espionage Campaign
30
Aug
2024

Cyberattackers Exploit Google Sheets for Malware Control in Likely Espionage Campaign

Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism. The activity, detected…

AD CS Vulnerabilities
30
Aug
2024

Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals

The most dangerous vulnerability you’ve never heard of. In the world of cybersecurity, vulnerabilities are discovered so often, and at…

Iranian Hackers Set Up New Network to Target U.S. Political Campaigns
30
Aug
2024

Iranian Hackers Set Up New Network to Target U.S. Political Campaigns

Aug 30, 2024Ravie LakshmananCyber Threat / Cyber Espionage Cybersecurity researchers have unearthed new network infrastructure set up by Iranian threat…

Cobalt Strike Payloads
30
Aug
2024

New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike Payloads

Aug 30, 2024Ravie LakshmananCyber Espionage / Threat Intelligence Chinese-speaking users are the target of a “highly organized and sophisticated attack”…

Critical Infrastructure Strategy
30
Aug
2024

A Call to Action for Securing ICS/OT Environments

Aug 30, 2024The Hacker NewsICS Security / OT Security A comprehensive guide authored by Dean Parsons emphasizes the growing need…

Malicious npm Packages
30
Aug
2024

North Korean Hackers Target Developers with Malicious npm Packages

Aug 30, 2024Ravie LakshmananCryptocurrency / Malware Threat actors with ties to North Korea have been observed publishing a set of…

Russian Hackers
29
Aug
2024

Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack

Aug 29, 2024Ravie LakshmananBrowser Security / Vulnerability Cybersecurity researchers have flagged multiple in-the-wild exploit campaigns that leveraged now-patched flaws in…

Multi-Year Cyberattack
29
Aug
2024

Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32

Aug 29, 2024Ravie LakshmananCyber Espionage / Malware A non-profit supporting Vietnamese human rights has been the target of a multi-year…