Category: TheHackerNews

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets
02
Sep
2025

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

Sep 02, 2025Ravie LakshmananCryptocurrency / Malware Cybersecurity researchers have discovered a malicious npm package that comes with stealthy features to…

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans
01
Sep
2025

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans

Sep 01, 2025Ravie LakshmananMobile Security / Malvertising Cybersecurity researchers are calling attention to a new shift in the Android malware…

Rethinking Security for Scattered Spider
01
Sep
2025

Rethinking Security for Scattered Spider

As enterprises continue to shift their operations to the browser, security teams face a growing set of cyber challenges. In…

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics
01
Sep
2025

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korea-linked hacking group called ScarCruft (aka APT37) to…

Velociraptor Forensic Tool
30
Aug
2025

Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

Cybersecurity researchers have called attention to a cyber attack in which unknown threat actors deployed an open-source endpoint monitoring and…

WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices
30
Aug
2025

WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices

Aug 30, 2025Ravie LakshmananZero-Day / Vulnerability WhatsApp has addressed a security vulnerability in its messaging apps for Apple iOS and…

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution
29
Aug
2025

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution

Aug 29, 2025Ravie LakshmananVulnerability / Web Security Three new security vulnerabilities have been disclosed in the Sitecore Experience Platform that…

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign
29
Aug
2025

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign

An abandoned update server associated with input method editor (IME) software Sogou Zhuyin was leveraged by threat actors as part…

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication
29
Aug
2025

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

Aug 29, 2025Ravie LakshmananThreat Intelligence / Malware Amazon on Friday said it flagged and disrupted what it described as an…

Can Your Security Stack See ChatGPT? Why Network Visibility Matters
29
Aug
2025

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Aug 29, 2025The Hacker NewsEnterprise Security / Artificial Intelligence Generative AI platforms like ChatGPT, Gemini, Copilot, and Claude are increasingly…

FreePBX Servers Targeted by Zero-Day
29
Aug
2025

FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

Aug 29, 2025Ravie LakshmananZero-Day / Vulnerability The Sangoma FreePBX Security Team has issued an advisory warning about an actively exploited…

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page
29
Aug
2025

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

Aug 29, 2025Ravie LakshmananVulnerability / Enterprise Security Click Studios, the developer of enterprise-focused password management solution Passwordstate, said it has…