Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to Malware
Jul 13, 2023THNLinux / Vulnerability In a sign that cybersecurity researchers continue to be under the radar of malicious actors, a proof-of-concept (PoC) has been…
Category: TheHackerNews
Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote Attacks
Jul 13, 2023THNOT/ICS, SCADA Cybersecurity The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has alerted of two security flaws impacting Rockwell Automation ControlLogix EtherNet/IP (ENIP)…
U.S. Government Agencies’ Emails Compromised in China-Backed Cyber Attack
Jul 13, 2023THNCyber Espionage / Email Security An unnamed Federal Civilian Executive Branch (FCEB) agency in the U.S. detected anomalous email activity in mid-June 2023,…
New Vulnerabilities Disclosed in SonicWall and Fortinet Network Security Products
Jul 13, 2023THNNetwork Security / Vulnerability SonicWall on Wednesday urged customers of Global Management System (GMS) firewall management and Analytics network reporting engine software to…
Ransomware Extortion Skyrockets in 2023, Reaching $449.1 Million and Counting
Jul 12, 2023THNRansomware / Cyber Threat Ransomware has emerged as the only cryptocurrency-based crime to grow in 2023, with cybercriminals extorting nearly $175.8 million more…
Microsoft Thwarts Chinese Cyber Attack Targeting Western European Governments
Jul 12, 2023THNThreat Intel / Cyber Espionage Microsoft on Tuesday revealed that it repelled a cyber attack staged by a Chinese nation-state actor targeting two…
The Risks and Preventions of AI in Business: Safeguarding Against Potential Pitfalls
Jul 12, 2023The Hacker NewsDNS Filtering / Network Security Artificial intelligence (AI) holds immense potential for optimizing internal processes within businesses. However, it also comes…
Chinese Hackers Deploy Microsoft-Signed Rootkit to Target Gaming Sector
Jul 12, 2023THNCyber Threat / Gaming Cybersecurity researchers have unearthed a novel rootkit signed by Microsoft that’s engineered to communicate with an actor-controlled attack infrastructure.…
Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining
Jul 12, 2023The Hacker NewsCloud Security / Cryptocurrency A new fileless attack dubbed PyLoose has been observed striking cloud workloads with the goal of delivering…
Microsoft Releases Patches for 130 Vulnerabilities, Including 6 Under Active Attack
Jul 12, 2023The Hacker NewsVulnerability / Software Security Microsoft on Tuesday released updates to address a total of 130 new security flaws spanning its software,…
Hackers Exploit Windows Policy Loophole to Forge Kernel-Mode Driver Signatures
A Microsoft Windows policy loophole has been observed being exploited primarily by native Chinese-speaking threat actors to forge signatures on kernel-mode drivers. “Actors are leveraging…
How to Apply MITRE ATT&CK to Your Organization
Discover all the ways MITRE ATT&CK can help you defend your organization. Build your security strategy and policies by making the most of this important…