Category: TheHackerNews

Goodbye to Phishing
13
Sep
2024

Must-Haves to Eliminate Credential Theft

Even as cyber threats become increasingly sophisticated, the number one attack vector for unauthorized access remains phished credentials (Verizon DBIR,…

TrickMo Android Trojan
13
Sep
2024

TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud

Sep 13, 2024Ravie LakshmananFinancial Fraud / Mobile Security Cybersecurity researchers have uncovered a new variant of an Android banking trojan…

New Linux Malware
13
Sep
2024

New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency

Sep 13, 2024Ravie LakshmananEnterprise Security / Vulnerability Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct…

GitLab
12
Sep
2024

GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution

Sep 12, 2024Ravie LakshmananDevSecOps / Vulnerability GitLab on Wednesday released security updates to address 17 security vulnerabilities, including a critical…

Android Malware
12
Sep
2024

New Android Malware ‘Ajina.Banker’ Steals Financial Data and Bypasses 2FA via Telegram

Sep 12, 2024Ravie LakshmananMobile Security / Financial Fraud Bank customers in the Central Asia region have been targeted by a…

New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide
12
Sep
2024

New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide

Sep 12, 2024Ravie LakshmananMalware / IoT Security Nearly 1.3 million Android-based TV boxes running outdated versions of the operating system…

Crypto Mining and Proxyjacking
12
Sep
2024

Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking

Sep 12, 2024Ravie LakshmananCryptocurrency / Network Security Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency…

Google's AI Data Practices in Europe
12
Sep
2024

Ireland’s Watchdog Launches Inquiry into Google’s AI Data Practices in Europe

Sep 12, 2024Ravie LakshmananRegulatory Compliance / Data Protection The Irish Data Protection Commission (DPC) has announced that it has commenced…

Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack
12
Sep
2024

Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack

Iraqi government networks have emerged as the target of an “elaborate” cyber attack campaign orchestrated by an Iran state-sponsored threat…

Threat Report
12
Sep
2024

Top 3 Threat Report Insights for Q2 2024

Sep 12, 2024The Hacker NewsThreat Intelligence / Cybercrime Cato CTRL (Cyber Threats Research Lab) has released its Q2 2024 Cato…

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers
12
Sep
2024

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers

Sep 12, 2024Ravie LakshmananWeb Security / Content Management WordPress.org has announced a new account security measure that will require accounts…

Quad7 Botnet
11
Sep
2024

Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances

Sep 11, 2024Ravie LakshmananNetwork Security / Hacking The operators of the mysterious Quad7 botnet are actively evolving by compromising several…