87% of SaaS Adopters Exposed to Browser-borne Attacks
Apr 26, 2023The Hacker NewsBrowser Security / SaaS Security The browser serves as the primary interface between the on-premises environment, the cloud, and the web…
Category: TheHackerNews
Insecure Default Configuration Exposes Servers to RCE Attacks
Apr 26, 2023Ravie LakshmananServer Security / Vulnerability The maintainers of the Apache Superset open source data visualization software have released fixes to plug an insecure…
VMware Releases Critical Patches for Workstation and Fusion Software
Apr 26, 2023Ravie LakshmananVirtual Machine / Cybersecurity VMware has released updates to resolve multiple security flaws impacting its Workstation and Fusion software, the most critical…
New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks
Apr 25, 2023Ravie LakshmananNetwork Security / DDoS Details have emerged about a high-severity security vulnerability impacting Service Location Protocol (SLP) that could be weaponized to…
Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor
Apr 25, 2023Ravie LakshmananCyber Threat / PowerShell An Iranian nation-state threat actor has been linked to a new wave of phishing attacks targeting Israel that’s…
Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis
Apr 25, 2023Ravie LakshmananArtificial Intelligence / Threat Detection Google’s cloud division is following in the footsteps of Microsoft with the launch of Security AI Workbench…
The Move Toward Exposure Management
Apr 25, 2023The Hacker NewsVulnerability Management Managing vulnerabilities in the constantly evolving technological landscape is a difficult task. Although vulnerabilities emerge regularly, not all vulnerabilities…
Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware
A financially-motivated North Korean threat actor is suspected to be behind a new Apple macOS malware strain called RustBucket. “[RustBucket] communicates with command and control…
Google Authenticator App Gets Cloud Backup Feature for TOTP Codes
Apr 25, 2023Ravie LakshmananPassword Security / Authentication Search giant Google on Monday unveiled a major update to its 12-year-old Authenticator app for Android and iOS…
Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack
Apr 24, 2023Ravie LakshmananEndpoint Security / BYOVD Threat actors are employing a previously undocumented “defense evasion tool” dubbed AuKill that’s designed to disable endpoint detection…
Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering
Apr 24, 2023Ravie LakshmananCyber Espionage The Russian-speaking threat actor behind a backdoor known as Tomiris is primarily focused on gathering intelligence in Central Asia, fresh…
Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites
Apr 24, 2023Ravie LakshmananServer Security / WordPress Threat actors have been observed leveraging a legitimate but outdated WordPress plugin to surreptitiously backdoor websites as part…