Category: TheHackerNews

SaaS Security
06
Feb
2023

Who’s Responsible to Secure this Data?

When SaaS applications started growing in popularity, it was unclear who was responsible for securing the data. Today, most security…

FormBook Malware Spreads via Malvertising Using MalVirt Loader to Evade Detection
06
Feb
2023

FormBook Malware Spreads via Malvertising Using MalVirt Loader to Evade Detection

Feb 06, 2023Ravie LakshmananMalvertising / Data Safety An ongoing malvertising campaign is being used to distribute virtualized .NET loaders that…

Android Banking Trojan
04
Feb
2023

New Android Banking Trojan Targeting Brazilian Financial Institutions

A new Android banking trojan has set its eyes on Brazilian financial institutions to commit fraud by leveraging the PIX…

Zero-Day in Fortra's GoAnywhere MFT
04
Feb
2023

Hackers Actively Exploiting Zero-Day in Fortra’s GoAnywhere MFT

Feb 04, 2023Ravie LakshmananZero-Day / Vulnerability A zero-day vulnerability affecting Fortra’s GoAnywhere MFT managed file transfer application is being actively…

Vmware ESXi Ransomware Attack
04
Feb
2023

New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi Servers

Feb 04, 2023Ravie LakshmananEnterprise Security / Ransomware VMware ESXi hypervisors are the target of a new wave of attacks designed…

Microsoft OneNote Documents Delivering Malware
03
Feb
2023

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

Feb 03, 2023Ravie LakshmananAttack Vector / Endpoint Security In a continuing sign that threat actors are adapting well to a…

EV Charging Station
03
Feb
2023

Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered

Feb 03, 2023Ravie LakshmananAutomotive Security / Vulnerability Two new security weaknesses discovered in several electric vehicle (EV) charging systems could…

Managed Service Provider
03
Feb
2023

How MSPs Can Turn a Challenge Into a Once-in-a-Decade Opportunity

Cybersecurity is quickly becoming one of the most significant growth drivers for Managed Service Providers (MSPs). That’s the main insight…

Exfiltrate Data
03
Feb
2023

Iranian OilRig Hackers Using New Backdoor to Exfiltrate Data from Govt. Organizations

Feb 03, 2023Ravie LakshmananCyber Espionage / Cyber Threat The Iranian nation-state hacking group known as OilRig has continued to target…

Authentication Vulnerability
03
Feb
2023

Atlassian’s Jira Software Found Vulnerable to Critical Authentication Vulnerability

Feb 03, 2023Ravie LakshmananCloud Security / Vulnerability Atlassian has released fixes to resolve a critical security flaw in Jira Service…

Cisco IOx and F5 BIG-IP Products
03
Feb
2023

New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products

Feb 03, 2023Ravie LakshmananNetwork Security / Vulnerability F5 has warned of a high-severity flaw impacting BIG-IP appliances that could lead…

Oracle and SugarCRM Vulnerabilities
03
Feb
2023

Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

Feb 03, 2023Ravie LakshmananVulnerability Management The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 2 added two security flaws…