The Rise of the Malicious App
Sep 21, 2023The Hacker NewsSaaS Security / App Security Security teams are familiar with threats emanating from third-party applications that employees add to improve their…
Category: TheHackerNews
Cyber Group ‘Gold Melody’ Selling Compromised Access to Ransomware Attackers
Sep 21, 2023THNCyber Threat / Ransomware A financially motivated threat actor has been outed as an initial access broker (IAB) that sells access to compromised…
China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers
Sep 21, 2023THNCyber Espionage / Spyware China’s Ministry of State Security (MSS) has accused the U.S. of breaking into Huawei’s servers, stealing critical data, and…
Ukrainian Hacker Suspected to be Behind “Free Download Manager” Malware Attack
Sep 21, 2023THNSupply Chain / Malware The maintainers of Free Download Manager (FDM) have acknowledged a security incident dating back to 2020 that led to…
Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with VenomRAT
Sep 21, 2023THNVulnerability / Exploit A malicious actor released a fake proof-of-concept (PoC) exploit for a recently disclosed WinRAR vulnerability on GitHub with an aim…
Finnish Authorities Dismantle Notorious PIILOPUOTI Dark Web Drug Marketplace
Sep 20, 2023THNCyber Crime / Dark Web Finnish law enforcement authorities have announced the takedown of PIILOPUOTI, a dark web marketplace that specialized in illegal…
Critical Security Flaws Exposed in Nagios XI Network Monitoring Software
Sep 20, 2023THNNetwork Security / Vulnerability Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation…
Sophisticated Phishing Campaign Targeting Chinese Users with ValleyRAT and Gh0st RAT
Sep 20, 2023THNMalware Attack / Cyber Threat Chinese-language speakers have been increasingly targeted as part of multiple email phishing campaigns that aim to distribute various…
Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys
Sep 20, 2023THNKubernetes / Supply Chain Attack Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed…
Do You Really Trust Your Web Application Supply Chain?
Sep 20, 2023The Hacker NewsWeb Application Security Well, you shouldn’t. It may already be hiding vulnerabilities. It’s the modular nature of modern web applications that…
Signal Messenger Introduces PQXDH Quantum-Resistant Encryption
Sep 20, 2023THNEncryption / Privacy Encrypted messaging app Signal has announced an update to the Signal Protocol to add support for quantum resistance by upgrading…
GitLab Releases Urgent Security Patches for Critical Vulnerability
Sep 20, 2023THNVulnerability / Software Security GitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another…