Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution
Jun 28, 2023Ravie LakshmananEndpoint Security / RCE Multiple SQL injection vulnerabilities have been disclosed in Gentoo Soko that could lead to remote code execution (RCE)…
Category: TheHackerNews
New Mockingjay Process Injection Technique Could Let Malware Evade Detection
Jun 27, 2023Ravie LakshmananMalware / Cyber Threat A new process injection technique dubbed Mockingjay could be exploited by threat actors to bypass security solutions to…
New Ongoing Campaign Targets npm Ecosystem with Unique Execution Chain
Jun 27, 2023Ravie LakshmananSupply Chain / Software Security Cybersecurity researchers have discovered a new ongoing campaign aimed at the npm ecosystem that leverages a unique…
EncroChat Bust Leads to 6,558 Criminals’ Arrests and €900 Million Seizure
Jun 27, 2023Ravie Lakshmanan Europol on Tuesday announced that the takedown of EncroChat in July 2020 led to 6,558 arrests worldwide and the seizure of…
How Attack Surface Management Prioritizes Vulnerability Remediation
As the business environment becomes increasingly connected, organizations’ attack surfaces continue to expand, making it challenging to map and secure both known and unknown assets.…
Anatsa Banking Trojan Targeting Users in US, UK, Germany, Austria, and Switzerland
Jun 27, 2023Ravie LakshmananMobile Security / Malware A new Android malware campaign has been observed pushing the Anatsa banking trojan to target banking customers in…
New Fortinet’s FortiNAC Vulnerability Exposes Networks to Code Execution Attacks
Jun 27, 2023Ravie LakshmananVulnerability / Exploit Fortinet has rolled out updates to address a critical security vulnerability impacting its FortiNAC network access control solution that…
Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers
Jun 26, 2023Ravie LakshmananCryptography / Cybersecurity In what’s an ingenious side-channel attack, a group of academics has found that it’s possible to recover secret keys…
Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack
Jun 26, 2023Ravie LakshmananCryptocurrency / Endpoint Security An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to…
How Generative AI Can Dupe SaaS Authentication Protocols — And Effective Ways To Prevent Other Key AI Risks in SaaS
Security and IT teams are routinely forced to adopt software before fully understanding the security risks. And AI tools are no exception. Employees and business…
Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers
Jun 26, 2023Ravie LakshmananCyber Threat / Password Security Microsoft has disclosed that it’s detected a spike in credential-stealing attacks conducted by the Russian state-affiliated hacker…
Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks
Jun 26, 2023Ravie LakshmananCyber Espionage / LotL The newly discovered Chinese nation-state actor known as Volt Typhoon has been observed to be active in the…