Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
Apr 13, 2023Ravie LakshmananCyber Attack / Cyber Threat The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and…
Category: TheHackerNews
OpenAI’s Bug Bounty Program Offers Up to $20,000 Prizes
Apr 13, 2023Ravie LakshmananSoftware Security / Bug Hunting OpenAI, the company behind the massively popular ChatGPT AI chatbot, has launched a bug bounty program in…
Can’t See or Secure Them Until It’s Too Late
Here’s a hard question to answer: ‘How many service accounts do you have in your environment?’. A harder one is: ‘Do you know what these…
Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit
Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia,…
Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit
Apr 12, 2023Ravie LakshmananPatch Tuesday / Software Updates It’s the second Tuesday of the month, and Microsoft has released another set of security updates to…
Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack
Apr 12, 2023Ravie LakshmananSoftware Security / Cyber Attack Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows…
Newly Discovered “By-Design” Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers
Apr 11, 2023Ravie LakshmananCloud Security / Data Security A “by-design flaw” uncovered in Microsoft Azure could be exploited by attackers to gain access to storage…
Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security
Apr 11, 2023Ravie LakshmananMobile Security / Malware Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to…
[eBook] A Step-by-Step Guide to Cyber Risk Assessment
Apr 11, 2023The Hacker NewsCybersecurity / Guide In today’s perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including…
Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages
Apr 11, 2023Ravie LakshmananSoftware Security / Cryptocurrency Cybersecurity researchers have detailed the inner workings of the cryptocurrency stealer malware that was distributed via 13 malicious…
Hackers Flood NPM with Bogus Packages Causing a DoS Attack
Apr 10, 2023Ravie LakshmananSoftware Security / JavaScript Threat actors are flooding the npm open source package repository with bogus packages that briefly even resulted in…
Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military
Apr 10, 2023Ravie LakshmananHacking Tool / Cyber Threat An Estonian national has been charged in the U.S. for purchasing U.S.-made electronics on behalf of the…