New Remote Access Trojan Emerges via Telegram and Discord
Aug 14, 2023THNCyber Threat / Malware A new remote access trojan (RAT) called QwixxRAT is being advertised for sale by its threat actor through Telegram…
Category: TheHackerNews
Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability
Aug 14, 2023THNWebsite Security / Vulnerability E-commerce sites using Adobe’s Magento 2 software are the target of an ongoing campaign that has been active since…
Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks
Aug 14, 2023THNCyber Espionage Germany’s Federal Office for the Protection of the Constitution (BfV) has warned of cyber attacks targeting Iranian persons and organizations in…
Rips in Your Identity Fabric
Why SaaS Security Is a Challenge In today’s digital landscape, organizations are increasingly relying on Software-as-a-Service (SaaS) applications to drive their operations. However, this widespread…
New Financial Malware ‘JanelaRAT’ Targets Latin American Users
Aug 14, 2023THNMalware / Cyber Threat Users in Latin America (LATAM) are the target of a financial malware called JanelaRAT that’s capable of capturing sensitive…
India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users’ Privacy First
The Indian President Droupadi Murmu on Friday granted assent to the Digital Personal Data Protection Bill (DPDPB) after it was unanimously passed by both houses…
Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk
Aug 12, 2023THNServer Security / Cyber Threat Multiple security vulnerabilities impacting CyberPower’s PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe’s iBoot Power Distribution…
Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping
Aug 12, 2023THNVulnerability / Privacy Multiple security vulnerabilities have been disclosed in AudioCodes desk phones and Zoom’s Zero Touch Provisioning (ZTP) that could be potentially…
Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested
Aug 12, 2023THNCyber Crime / Hosting European and U.S. law enforcement agencies have announced the dismantling of a bulletproof hosting service provider called Lolek Hosted,…
New Python URL Parsing Flaw Enables Command Injection Attacks
Aug 12, 2023THNProgramming / Vulnerability A high-severity security flaw has been disclosed in the Python URL parsing function that could be exploited to bypass domain…
Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus
A hitherto undocumented threat actor operating for nearly a decade and codenamed MoustachedBouncer has been attributed to cyber espionage attacks aimed at foreign embassies in…
Google Adds Quantum-Resistant Encryption in Chrome 116
Aug 11, 2023THNEncryption / Browser Security Google has announced plans to add support for quantum-resistant encryption algorithms in its Chrome browser, starting with version 116.…