Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack
Oct 05, 2023NewsroomCyber Espionage / Cyber Threat A governmental entity in Guyana has been targeted as part of a cyber espionage campaign dubbed Operation Jacana.…
Category: TheHackerNews
Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities
Nowadays, more malware developers are using unconventional programming languages to bypass advanced detection systems. The Node.js malware Lu0Bot is a testament to this trend. By…
CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities
Oct 05, 2023NewsroomVulnerability / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws to its Known Exploited Vulnerabilities…
Atlassian Confluence Hit by New Actively Exploited Zero-Day – Patch Now
Oct 05, 2023NewsroomZero Day / Vulnerability Atlassian has released fixes to contain an actively exploited critical zero-day flaw impacting publicly accessible Confluence Data Center and…
Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw
Oct 05, 2023NewsroomZero Day / Vulnerability Apple on Wednesday rolled out security patches to address a new zero-day flaw in iOS and iPadOS that it…
Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware
Oct 04, 2023THNMobile Security / Spyware New findings have identified connections between an Android spyware called DragonEgg and another sophisticated modular iOS surveillanceware tool named…
Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack
Oct 04, 2023THNSupply Chain / Malware A new deceptive package hidden within the npm package registry has been uncovered deploying an open-source rootkit called r77,…
Wing Disrupts the Market by Introducing Affordable SaaS Security
Oct 04, 2023The Hacker NewsSaaS Security / Enterprise Security Today, mid-sized companies and their CISOs are struggling to handle the growing threat of SaaS security…
Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance
Oct 04, 2023THNCloud Security / Cyber Threat Microsoft has detailed a new campaign in which attackers unsuccessfully attempted to move laterally to a cloud environment…
New Linux Flaw Enables Privilege Escalation on Major Distributions
Oct 04, 2023THNEndpoint Security / Vulnerability A new Linux security vulnerability dubbed Looney Tunables has been discovered in the GNU C library’s ld.so dynamic loader…
PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
Oct 03, 2023THNArtificial Intelligence / Cyber Threat Cybersecurity researchers have disclosed multiple critical security flaws in the TorchServe tool for serving and scaling PyTorch models…
Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation
Oct 03, 2023THNZero Day / Vulnerability Chipmaker Qualcomm has released security updates to address 17 vulnerabilities in various components, while warning that three other zero-days…