Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware
Jul 17, 2023THNMalware / Cyber Threat Microsoft Word documents exploiting known remote code execution flaws are being used as phishing lures to drop malware called…
Category: TheHackerNews
CERT-UA Uncovers Gamaredon’s Rapid Data Exfiltration Tactics Following Initial Compromise
Jul 17, 2023THNCyber Attack / Data Safety The Russia-linked threat actor known as Gamaredon has been observed conducting data exfiltration activities within an hour of…
New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks
Jul 15, 2023THNArtificial Intelligence / Cyber Crime With generative artificial intelligence (AI) becoming all the rage these days, it’s perhaps not surprising that the technology…
Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens
Jul 15, 2023THNCyber Attack / Enterprise Security Microsoft on Friday said a validation error in its source code allowed for Azure Active Directory (Azure AD)…
Critical Security Flaws Uncovered in Honeywell Experion DCS and QuickBlox Services
Jul 14, 2023THNVulnerability/ Cyber Threat Multiple security vulnerabilities have been discovered in various services, including Honeywell Experion distributed control system (DCS) and QuickBlox, that, if…
TeamTNT’s Cloud Credential Stealing Campaign Now Targets Azure and Google Cloud
Jul 14, 2023THNCyber Threat / Cloud Security A malicious actor has been linked to a cloud credential stealing campaign in June 2023 that’s focused on…
AIOS WordPress Plugin Faces Backlash for Storing User Passwords in Plain Text
Jul 14, 2023THNPassword Security / WordPress All-In-One Security (AIOS), a WordPress plugin installed on over one million sites, has issued a security update after a…
Join this Webinar on SaaS Security Posture Management
Jul 14, 2023The Hacker NewsSaaS Security / Cybersecurity As security practices continue to evolve, one primary concern persists in the minds of security professionals—the risk…
Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation
Jul 14, 2023THNEmail Security / Vulnerability Zimbra has warned of a critical zero-day security flaw in its email software that has come under active exploitation…
New SOHO Router Botnet AVrecon Spreads to 70,000 Devices Across 20 Countries
Jul 14, 2023THNNetwork Security / Malware A new malware strain has been found covertly targeting small office/home office (SOHO) routers for more than two years,…
TeamTNT’s Silentbob Botnet Infecting 196 Hosts in Cloud Attack Campaign
Jul 13, 2023THNCloud Security / Cryptocurrency As many as 196 hosts have been infected as part of an aggressive cloud campaign mounted by the TeamTNT…
PicassoLoader Malware Used in Ongoing Attacks on Ukraine and Poland
Jul 13, 2023THNCyber Attack Government entities, military organizations, and civilian users in Ukraine and Poland have been targeted as part of a series of campaigns…