Why Now? The Rise of Attack Surface Management
Jun 12, 2023The Hacker NewsAttack Surface Management The term “attack surface management” (ASM) went from unknown to ubiquitous in the cybersecurity space over the past…
Category: TheHackerNews
1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme
Jun 12, 2023Ravie LakshmananCryptocurrency / A previously undetected cryptocurrency scam has leveraged a constellation of over 1,000 fraudulent websites to ensnare users into a bogus…
Password Reset Hack Exposed in Honda’s E-Commerce Platform, Dealers Data at Risk
Jun 12, 2023Ravie LakshmananData Safety / Hacking Security vulnerabilities discovered in Honda’s e-commerce platform could have been exploited to gain unrestricted access to sensitive dealer…
Critical RCE Flaw Discovered in Fortinet FortiGate Firewalls
Jun 12, 2023Ravie LakshmananVulnerability / Network Security Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused…
Apple’s Safari Private Browsing Now Automatically Removes Tracking Parameters in URLs
Jun 12, 2023Ravie LakshmananPrivacy / Tech News Apple is introducing major updates to Safari Private Browsing, offering users better protections against third-party trackers as they…
New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies
Jun 10, 2023Ravie LakshmananCyber Attack / Malware Vietnamese public companies have been targeted as part of an ongoing campaign that deploys a novel backdoor called…
New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered
Jun 10, 2023Ravie Lakshmanan Progress Software, the company behind the MOVEit Transfer application, has released patches to address brand new SQL injection vulnerabilities affecting the…
Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants
Jun 09, 2023Ravie LakshmananCyber Threat / Financial Security Banking and financial services organizations are the targets of a new multi-stage adversary-in-the-middle (AitM) phishing and business…
A Cybercrime Group with Espionage Ambitions
Jun 09, 2023Ravie LakshmananCybercrime / APT The threat actor known as Asylum Ambuscade has been observed straddling cybercrime and cyber espionage operations since at least…
5 Reasons Why Access Management is the Key to Securing the Modern Workplace
The way we work has undergone a dramatic transformation in recent years. We now operate within digital ecosystems, where remote work and the reliance on…
A New Custom Backdoor Targets North Africa with Espionage Attacks
Jun 09, 2023Ravie LakshmananCyber Espionage / APT A new custom backdoor dubbed Stealth Soldier has been deployed as part of a set of highly-targeted espionage…
How to Improve Your API Security Posture
Jun 08, 2023The Hacker NewsAPI Security / DevSecOps APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data.…