Category: TheHackerNews

Critical Infra Hacking
22
Apr
2023

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

Apr 22, 2023Ravie LakshmananSupply Chain / Cyber Threat Lazarus, the prolific North Korean hacking group behind the cascading supply chain…

Kubernetes RBAC
21
Apr
2023

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

Apr 21, 2023Ravie LakshmananKubernetes / Cryptocurrency A large-scale attack campaign discovered in the wild has been exploiting Kubernetes (K8s) Role-Based…

Kubernetes and Cloud Security
21
Apr
2023

14 Kubernetes and Cloud Security Challenges and How to Solve Them

Recently, Andrew Martin, founder and CEO of ControlPlane, released a report entitled Cloud Native and Kubernetes Security Predictions 2023. These…

Google Cloud Platform
21
Apr
2023

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

Apr 21, 2023Ravie LakshmananCloud Security / Vulnerability Cybersecurity researchers have disclosed details of a now-patched zero-day flaw in Google Cloud…

Cascading Supply Chain Attack
21
Apr
2023

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

The supply chain attack targeting 3CX was the result of a prior supply chain compromise associated with a different company,…

Cisco and VMware
21
Apr
2023

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

Apr 21, 2023Ravie LakshmananSoftware Update / Network Security Cisco and VMware have released security updates to address critical security flaws…

Alibaba Cloud PostgreSQL Databases
20
Apr
2023

Two Critical Flaws Found in Alibaba Cloud’s PostgreSQL Databases

Apr 20, 2023Ravie LakshmananCloud Security / Vulnerability A chain of two critical flaws has been disclosed in Alibaba Cloud’s ApsaraDB…

ChatGPT's Data Protection Blind Spots and How Security Teams Can Solve Them
20
Apr
2023

ChatGPT’s Data Protection Blind Spots and How Security Teams Can Solve Them

Apr 20, 2023The Hacker NewsArtificial Intelligence / Data Safety In the short time since their inception, ChatGPT and other generative…

Safeguarding OT Networks
20
Apr
2023

NDR’s Pivotal Role in Safeguarding OT Networks

Apr 20, 2023The Hacker NewsOT and ICS Security Why is Visibility into OT Environments Crucial? The significance of Operational Technology…

Linux Malware
20
Apr
2023

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

Apr 20, 2023Ravie LakshmananLinux / Cyber Attack The notorious North Korea-aligned state-sponsored actor known as the Lazarus Group has been…

Fortra
20
Apr
2023

Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

Apr 20, 2023Ravie LakshmananRansomware / Cyber Attack Fortra, the company behind Cobalt Strike, shed light on a zero-day remote code…

African Telecom Services Providers
20
Apr
2023

Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

Apr 20, 2023Ravie LakshmananCyber Attack / Malware Telecommunication services providers in Africa are the target of a new campaign orchestrated…