Critical RCE Flaw Discovered in Fortinet FortiGate Firewalls
Jun 12, 2023Ravie LakshmananVulnerability / Network Security Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused…
Category: TheHackerNews
Apple’s Safari Private Browsing Now Automatically Removes Tracking Parameters in URLs
Jun 12, 2023Ravie LakshmananPrivacy / Tech News Apple is introducing major updates to Safari Private Browsing, offering users better protections against third-party trackers as they…
New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies
Jun 10, 2023Ravie LakshmananCyber Attack / Malware Vietnamese public companies have been targeted as part of an ongoing campaign that deploys a novel backdoor called…
New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered
Jun 10, 2023Ravie Lakshmanan Progress Software, the company behind the MOVEit Transfer application, has released patches to address brand new SQL injection vulnerabilities affecting the…
Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants
Jun 09, 2023Ravie LakshmananCyber Threat / Financial Security Banking and financial services organizations are the targets of a new multi-stage adversary-in-the-middle (AitM) phishing and business…
A Cybercrime Group with Espionage Ambitions
Jun 09, 2023Ravie LakshmananCybercrime / APT The threat actor known as Asylum Ambuscade has been observed straddling cybercrime and cyber espionage operations since at least…
5 Reasons Why Access Management is the Key to Securing the Modern Workplace
The way we work has undergone a dramatic transformation in recent years. We now operate within digital ecosystems, where remote work and the reliance on…
A New Custom Backdoor Targets North Africa with Espionage Attacks
Jun 09, 2023Ravie LakshmananCyber Espionage / APT A new custom backdoor dubbed Stealth Soldier has been deployed as part of a set of highly-targeted espionage…
How to Improve Your API Security Posture
Jun 08, 2023The Hacker NewsAPI Security / DevSecOps APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data.…
Experts Unveil PoC Exploit for Recent Windows Vulnerability Under Active Exploitation
Jun 08, 2023Ravie LakshmananEndpoint Security / Zero-Day Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by…
Kimsuky Targets Think Tanks and News Media with Social Engineering Attacks
Jun 08, 2023Ravie LakshmananCyber Threat / Hacking The North Korean nation-state threat actor known as Kimsuky has been linked to a social engineering campaign targeting…
Cisco and VMware Address Critical Vulnerabilities
Jun 08, 2023Ravie LakshmananNetwork Security / Vulnerability VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could…