JumpCloud Blames ‘Sophisticated Nation-State’ Actor for Security Breach
Jul 18, 2023THNData Security / Cyber Attack A little over a week after JumpCloud reset API keys of customers impacted by a security incident, the…
Category: TheHackerNews
Hackers Exploit WebAPK to Deceive Android Users into Installing Malicious Apps
Jul 17, 2023THNMobile Security / Malware Threat actors are taking advantage of Android’s WebAPK technology to trick unsuspecting users into installing malicious web apps on…
Malicious USB Drives Targetinging Global Targets with SOGU and SNOWYDRIVE Malware
Jul 17, 2023THNEndpoint Security / Cyber Attack Cyber attacks using infected USB infection drives as an initial access vector have witnessed a three-fold increase in…
These 6 Questions Will Help You Choose the Best Attack Surface Management Platform
Jul 17, 2023The Hacker NewsAttack Surface Management The hype around different security categories can make it difficult to discern features and capabilities from bias when…
Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware
Jul 17, 2023THNMalware / Cyber Threat Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware called…
CERT-UA Uncovers Gamaredon’s Rapid Data Exfiltration Tactics Following Initial Compromise
Jul 17, 2023THNCyber Attack / Data Safety The Russia-linked threat actor known as Gamaredon has been observed conducting data exfiltration activities within an hour of…
New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks
Jul 15, 2023THNArtificial Intelligence / Cyber Crime With generative artificial intelligence (AI) becoming all the rage these days, it’s perhaps not surprising that the technology…
Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens
Jul 15, 2023THNCyber Attack / Enterprise Security Microsoft on Friday said a validation error in its source code allowed for Azure Active Directory (Azure AD)…
Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services
Jul 14, 2023THNVulnerability/ Cyber Threat Multiple security vulnerabilities have been discovered in various services, including Honeywell Experion distributed control system (DCS) and QuickBlox, that, if…
TeamTNT’s Cloud Credential Stealing Campaign Now Targets Azure and Google Cloud
Jul 14, 2023THNCyber Threat / Cloud Security A malicious actor has been linked to a cloud credential stealing campaign in June 2023 that’s focused on…
AIOS WordPress Plugin Faces Backlash for Storing User Passwords in Plain Text
Jul 14, 2023THNPassword Security / WordPress All-In-One Security (AIOS), a WordPress plugin installed on over one million sites, has issued a security update after a…
Join this Webinar on SaaS Security Posture Management
Jul 14, 2023The Hacker NewsSaaS Security / Cybersecurity As security practices continue to evolve, one primary concern persists in the minds of security professionals—the risk…