Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable
Jul 31, 2023THNWebsite Security / WordPress Multiple security vulnerabilities have been disclosed in the Ninja Forms plugin for WordPress that could be exploited by threat…
Category: TheHackerNews
New Android Malware CherryBlos Utilizing OCR to Steal Sensitive Data
Jul 29, 2023THNAndroid / Malware A new Android malware strain called CherryBlos has been observed making use of optical character recognition (OCR) techniques to gather…
Apple Sets New Rules for Developers to Prevent Fingerprinting and Data Misuse
Jul 29, 2023THNData Security / Privacy Apple has announced plans to require developers to submit reasons to use certain APIs in their apps starting later…
RFP Template for Browser Security
Jul 29, 2023The Hacker NewsBrowser Security / Data Security Increasing cyber threats and attacks have made protecting organizational data a paramount concern for businesses of…
Hackers Deploy “SUBMARINE” Backdoor in Barracuda Email Security Gateway Attacks
Jul 29, 2023THNEmail Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday disclosed details of a “novel persistent backdoor” called SUBMARINE…
Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack
Jul 29, 2023THNVulnerability / Enterprise Security Ivanti has disclosed yet another security flaw impacting Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core, that it…
Hackers Abusing Windows Search Feature to Install Remote Access Trojans
Jul 28, 2023THNMalware / Cyber Threat A legitimate Windows search feature is being exploited by malicious actors to download arbitrary payloads from remote servers and…
IcedID Malware Adapts and Expands Threat with Updated BackConnect Module
Jul 28, 2023THNMalware / Cyber Threat The threat actors linked to the malware loader known as IcedID have made updates to the BackConnect (BC) module…
STARK#MULE Targets Koreans with U.S. Military-themed Document Lures
Jul 28, 2023THNCyber Attack / Malware An ongoing cyber attack campaign has set its sights on Korean-speaking individuals by employing U.S. Military-themed document lures to…
A Data Exfiltration Attack Scenario: The Porsche Experience
As part of Checkmarx’s mission to help organizations develop and deploy secure software, the Security Research team started looking at the security posture of major…
BlueBravo Deploys GraphicalProton Backdoor Against European Diplomatic Entities
Jul 28, 2023THNCyber Espionage / Malware The Russian nation-state actor known as BlueBravo has been observed targeting diplomatic entities throughout Eastern Europe with the goal…
Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches
Jul 28, 2023THNSoftware Security / Data Safety Cybersecurity agencies in Australia and the U.S. have published a joint cybersecurity advisory warning against security flaws in…