iOS, macOS, Safari, and More Vulnerable
Sep 22, 2023THNZero Day / Vulnerability Apple has released yet another round of security patches to address three actively exploited zero-day flaws impacting iOS, iPadOS,…
Category: TheHackerNews
Mysterious ‘Sandman’ Threat Actor Targets Telecom Providers Across Three Continents
Sep 21, 2023THNTelecom Security / Cyber Attack A previously undocumented threat actor dubbed Sandman has been attributed to a set of cyber attacks targeting telecommunic…
Researchers Raise Red Flag on P2PInfect Malware with 600x Activity Surge
Sep 21, 2023THNBotnet / Cyber Threat The peer-to-peer (P2) worm known as P2PInfect has witnessed a surge in activity since late August 2023, witnessing a…
The Rise of the Malicious App
Sep 21, 2023The Hacker NewsSaaS Security / App Security Security teams are familiar with threats emanating from third-party applications that employees add to improve their…
Cyber Group ‘Gold Melody’ Selling Compromised Access to Ransomware Attackers
Sep 21, 2023THNCyber Threat / Ransomware A financially motivated threat actor has been outed as an initial access broker (IAB) that sells access to compromised…
China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers
Sep 21, 2023THNCyber Espionage / Spyware China’s Ministry of State Security (MSS) has accused the U.S. of breaking into Huawei’s servers, stealing critical data, and…
Ukrainian Hacker Suspected to be Behind “Free Download Manager” Malware Attack
Sep 21, 2023THNSupply Chain / Malware The maintainers of Free Download Manager (FDM) have acknowledged a security incident dating back to 2020 that led to…
Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with VenomRAT
Sep 21, 2023THNVulnerability / Exploit A malicious actor released a fake proof-of-concept (PoC) exploit for a recently disclosed WinRAR vulnerability on GitHub with an aim…
Finnish Authorities Dismantle Notorious PIILOPUOTI Dark Web Drug Marketplace
Sep 20, 2023THNCyber Crime / Dark Web Finnish law enforcement authorities have announced the takedown of PIILOPUOTI, a dark web marketplace that specialized in illegal…
Critical Security Flaws Exposed in Nagios XI Network Monitoring Software
Sep 20, 2023THNNetwork Security / Vulnerability Multiple security flaws have been disclosed in the Nagios XI network monitoring software that could result in privilege escalation…
Sophisticated Phishing Campaign Targeting Chinese Users with ValleyRAT and Gh0st RAT
Sep 20, 2023THNMalware Attack / Cyber Threat Chinese-language speakers have been increasingly targeted as part of multiple email phishing campaigns that aim to distribute various…
Fresh Wave of Malicious npm Packages Threaten Kubernetes Configs and SSH Keys
Sep 20, 2023THNKubernetes / Supply Chain Attack Cybersecurity researchers have discovered a fresh batch of malicious packages in the npm package registry that are designed…