Critical FortiOS and FortiProxy Vulnerability Likely Exploited
Jun 13, 2023Ravie LakshmananNetwork Security / Vulnerability Fortinet on Monday disclosed that a newly patched critical flaw impacting FortiOS and FortiProxy may have been “exploited…
Category: TheHackerNews
Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer
Jun 12, 2023Ravie LakshmananVulnerability / Software Security researchers have warned about an “easily exploitable” flaw in the Microsoft Visual Studio installer that could be abused…
Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable
Jun 12, 2023Ravie LakshmananEndpoint Security / Malware A fully undetectable (FUD) malware obfuscation engine named BatCloak is being used to deploy various malware strains since…
Why Now? The Rise of Attack Surface Management
Jun 12, 2023The Hacker NewsAttack Surface Management The term “attack surface management” (ASM) went from unknown to ubiquitous in the cybersecurity space over the past…
1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme
Jun 12, 2023Ravie LakshmananCryptocurrency / A previously undetected cryptocurrency scam has leveraged a constellation of over 1,000 fraudulent websites to ensnare users into a bogus…
Password Reset Hack Exposed in Honda’s E-Commerce Platform, Dealers Data at Risk
Jun 12, 2023Ravie LakshmananData Safety / Hacking Security vulnerabilities discovered in Honda’s e-commerce platform could have been exploited to gain unrestricted access to sensitive dealer…
Critical RCE Flaw Discovered in Fortinet FortiGate Firewalls
Jun 12, 2023Ravie LakshmananVulnerability / Network Security Fortinet has released patches to address a critical security flaw in its FortiGate firewalls that could be abused…
Apple’s Safari Private Browsing Now Automatically Removes Tracking Parameters in URLs
Jun 12, 2023Ravie LakshmananPrivacy / Tech News Apple is introducing major updates to Safari Private Browsing, offering users better protections against third-party trackers as they…
New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies
Jun 10, 2023Ravie LakshmananCyber Attack / Malware Vietnamese public companies have been targeted as part of an ongoing campaign that deploys a novel backdoor called…
New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered
Jun 10, 2023Ravie Lakshmanan Progress Software, the company behind the MOVEit Transfer application, has released patches to address brand new SQL injection vulnerabilities affecting the…
Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants
Jun 09, 2023Ravie LakshmananCyber Threat / Financial Security Banking and financial services organizations are the targets of a new multi-stage adversary-in-the-middle (AitM) phishing and business…
A Cybercrime Group with Espionage Ambitions
Jun 09, 2023Ravie LakshmananCybercrime / APT The threat actor known as Asylum Ambuscade has been observed straddling cybercrime and cyber espionage operations since at least…