SCARLETEEL Cryptojacking Campaign Exploiting AWS Fargate in Ongoing Campaign
Jul 11, 2023THNCryptocurrency / Cloud Security Cloud environments continue to be at the receiving end of an ongoing advanced attack campaign dubbed SCARLETEEL, with the…
Category: TheHackerNews
Spreading Through Fake Windows Updates
Jul 11, 2023THNRansomware / Windows Security A developing piece of ransomware called Big Head is being distributed as part of a malvertising campaign that takes…
Apple Issues Urgent Patch for Zero-Day Flaw Targeting iOS, iPadOS, macOS, and Safari
Jul 11, 2023THNZero-Day / Endpoint Security Apple has released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address a zero-day…
Hackers Steal $20 Million by Exploiting Flaw in Revolut’s Payment Systems
Malicious actors exploited an unknown flaw in Revolut’s payment systems to steal more than $20 million of the company’s funds in early 2022. The development…
RomCom RAT Targeting NATO and Ukraine Support Groups
Jul 10, 2023THNCyber Threat / Malware The threat actors behind the RomCom RAT have been suspected of phishing attacks targeting the upcoming NATO Summit in…
Global Retailers Must Keep an Eye on Their SaaS Stack
Jul 10, 2023The Hacker NewsSaaS Security Brick-and-mortar retailers and e-commerce sellers may be locked in a fierce battle for market share, but one area both…
New Mozilla Feature Blocks Risky Add-Ons on Specific Websites to Safeguard User Security
Jul 10, 2023THNBrowser Security Mozilla has announced that some add-ons may be blocked from running on certain sites as part of a new feature called…
New TOITOIN Banking Trojan Targeting Latin American Businesses
Jul 10, 2023THNEnterprise Security / Malware Businesses operating in the Latin American (LATAM) region are the target of a new Windows-based banking trojan called TOITOIN…
Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China
Jul 08, 2023Swati KhandelwalMobile Security / Spyware Two file management apps on the Google Play Store have been discovered to be spyware, putting the privacy…
New ‘Letscall’ Malware Employs Voice Traffic Routing
Jul 07, 2023Swati KhandelwalMobile Security / Malware Researchers have issued a warning about an emerging and advanced form of voice phishing (vishing) known as “Letscall.”…
Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software
Jul 07, 2023Swati KhandelwalVulnerability / Cyber Threat Progress Software has announced the discovery and patching of a critical SQL injection vulnerability in MOVEit Transfer, popular…
Mastodon Social Network Patches Critical Flaws Allowing Server Takeover
Jul 07, 2023Swati KhandelwalVulnerability / Social Media Mastodon, a popular decentralized social network, has released a security update to fix critical vulnerabilities that could expose…