You Don’t Know Where Your Secrets Are
Do you know where your secrets are? If not, I can tell you: you are not alone. Hundreds of CISOs, CSOs, and security leaders, whether…
Category: TheHackerNews
New Report Reveals NikoWiper Malware That Targeted Ukraine Energy Sector
Jan 31, 2023Ravie LakshmananCyber War / Malware The Russia-affiliated Sandworm used yet another wiper malware strain dubbed NikoWiper as part of an attack that took…
Hackers Stole Code-Signing Certificates for GitHub Desktop and Atom
Jan 31, 2023Ravie LakshmananSecurity Incident / Encryption GitHub on Monday disclosed that unknown threat actors managed to exfiltrate encrypted code signing certificates pertaining to some…
QNAP Fixes Critical Vulnerability in NAS Devices with Latest Security Updates
Jan 31, 2023Ravie LakshmananData Security / Vulnerability Taiwanese company QNAP has released updates to remediate a critical security flaw affecting its network-attached storage (NAS) devices…
A New Golang-Based Information Stealer Malware Emerges
Jan 30, 2023Ravie LakshmananThreat Detection / Malware A new Golang-based information stealer malware dubbed Titan Stealer is being advertised by threat actors through their Telegram…
Over 134 Million Attempts to Hack IoT Devices
Jan 30, 2023Ravie Lakshmanan Researchers are warning about a spike in exploitation attempts weaponizing a critical remote code execution flaw in Realtek Jungle SDK since…
Gootkit Malware Continues to Evolve with New Components and Obfuscations
Jan 29, 2023Ravie LakshmananCyber Threat / Malware The threat actors associated with the Gootkit malware have made “notable changes” to their toolset, adding new components…
Eliminating SaaS Shadow IT is Now Available via a Self-Service Product, Free of Charge
Jan 28, 2023The Hacker News The use of software as a service (SaaS) is experiencing rapid growth and shows no signs of slowing down. Its…
Microsoft Urges Customers to Secure On-Premises Exchange Servers
Jan 28, 2023Ravie LakshmananEmail Security / Cyber Threat Microsoft is urging customers to keep their Exchange servers updated as well as take steps to bolster…
Ukraine Hit with New Golang-based ‘SwiftSlicer’ Wiper Malware in Latest Cyber Attack
Jan 28, 2023Ravie LakshmananCyber Threat / Cyber War Ukraine has come under a fresh cyber onslaught from Russia that involved the deployment of a previously…
ISC Releases Security Patches for New BIND DNS Software Vulnerabilities
Jan 28, 2023Ravie LakshmananServer Security / DNS The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name…
British Cyber Agency Warns of Russian and Iranian Hackers Targeting Key Industries
Jan 27, 2023Ravie LakshmananNation-State-Sponsored Attacks The U.K. National Cyber Security Centre (NCSC) on Thursday warned of spear-phishing attacks mounted by Russian and Iranian state-sponsored actors…