Sneaky Privilege Escalation Method Bypasses Windows Security
Aug 17, 2023THNEndpoint Security / Vulnerability A previously undetected attack method called NoFilter has been found to abuse the Windows Filtering Platform (WFP) to achieve…
Category: TheHackerNews
China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons
Aug 17, 2023THNCyber Attack / Malware An ongoing cyber attack campaign originating from China is targeting the Southeast Asian gambling sector to deploy Cobalt Strike…
New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode
Aug 17, 2023THNMobile Security / Vulnerability Cybersecurity researchers have documented a novel post-exploit persistence technique on iOS 16 that could be abused to fly under…
New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities
Aug 17, 2023THNCryptojacking / Proxyjacking A new, financially motivated operation dubbed LABRAT has been observed weaponizing a now-patched critical flaw in GitLab as part of…
Why You Need Continuous Network Monitoring?
Changes in the way we work have had significant implications for cybersecurity, not least in network monitoring. Workers no longer sit safely side-by-side on a…
Russian Hackers Use Zulip Chat App for Covert C&C in Diplomatic Phishing Attacks
Aug 17, 2023THNCyber Espionage / Malware An ongoing campaign targeting ministries of foreign affairs of NATO-aligned countries points to the involvement of Russian threat actors.…
CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks
Aug 17, 2023THNVulnerability / Enterprise Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw in Citrix ShareFile storage zones…
Google Introduces First Quantum Resilient FIDO2 Security Key
Aug 16, 2023THNPassword Security / Encryption Google on Tuesday announced the first quantum resilient FIDO2 security key implementation as part of its OpenSK security keys…
How Google Workspace-based Organizations can leverage Chrome to improve Security
Aug 16, 2023The Hacker NewsBrowser Security/ Online Security More and more organizations are choosing Google Workspace as their default employee toolset of choice. But despite…
Experts Uncover Weaknesses in PowerShell Gallery Enabling Supply Chain Attacks
Aug 16, 2023THNWindows Security / Supply Chain Active flaws in the PowerShell Gallery could be weaponized by threat actors to pull off supply chain attacks…
What’s the State of Credential theft in 2023?
Aug 16, 2023The Hacker News At a little overt halfway through 2023, credential theft is still a major thorn in the side of IT teams.…
Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
Aug 16, 2023THNSoftware Security / Cyber Threat Multiple critical security flaws have been reported in Ivanti Avalanche, an enterprise mobile device management solution that’s used…