Secrets, Secrets Are No Fun. Secrets, Secrets (Stored in Plain Text Files) Hurt Someone
Secrets are meant to be hidden or, at the very least, only known to a specific and limited set of individuals (or systems). Otherwise, they…
Category: TheHackerNews
Manifest Confusion Attack Opens Door to Malware
Jul 05, 2023Ravie LakshmananSupply Chain / Software Security The npm registry for the Node.js JavaScript runtime environment is susceptible to what’s called a manifest confusion…
Instagram’s Twitter Alternative ‘Threads’ Launch Halted in Europe Over Privacy Concerns
Jul 05, 2023Ravie LakshmananPrivacy / Social Media Instagram Threads, the upcoming Twitter competitor from Meta, will not be launched in the European Union due to…
Swedish Data Protection Authority Warns Companies Against Google Analytics Use
Jul 04, 2023Ravie LakshmananPrivacy / Online Security The Swedish data protection watchdog has warned companies against using Google Analytics due to risks posed by U.S.…
DDoSia Attack Tool Evolves with Encryption, Targeting Multiple Sectors
The threat actors behind the DDoSia attack tool have come up with a new version that incorporates a new mechanism to retrieve the list of…
Mexico-Based Hacker Targets Global Banks with Android Malware
Jul 04, 2023Ravie LakshmananCyber Crime / Mobile Security An e-crime actor of Mexican provenance has been linked to an Android mobile malware campaign targeting financial…
330,000 FortiGate Firewalls Still Unpatched to CVE-2023-27997 RCE Flaw
Jul 04, 2023Ravie LakshmananNetwork Security / Exploit No less than 330000 FortiGate firewalls are still unpatched and vulnerable to CVE-2023-27997, a critical security flaw affecting…
Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX
Jul 03, 2023Ravie LakshmananMalware Attack / Cyberespionage A Chinese nation-state group has been observed targeting Foreign Affairs ministries and embassies in Europe using HTML smuggling…
CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices
Jul 03, 2023Ravie LakshmananMobile Security / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has placed a set of eight flaws to the…
Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
Jul 03, 2023The Hacker NewsWebsite Security Tool Every website owner or webmaster grapples with the issue of spam on their website forms. The volume of…
Evasive Meduza Stealer Targets 19 Password Managers and 76 Crypto Wallets
Jul 03, 2023Ravie LakshmananMalware / Hacking In yet another sign of a lucrative crimeware-as-a-service (CaaS) ecosystem, cybersecurity researchers have discovered a new Windows-based information stealer…
BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising
Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. “Malicious actors…