New Security Flaws Could Allow Code Execution Attacks
Mar 08, 2023Ravie Lakshmanan A pair of severe security vulnerabilities have been disclosed in the Jenkins open source automation server that could lead to code…
Category: TheHackerNews
Unified Security and Endpoint Management
As threats grow and attack surfaces get more complex, companies continue to struggle with the multitude of tools they utilize to handle endpoint security and…
Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity
Mar 08, 2023Ravie LakshmananZero-Day / BYOVD Attack The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial…
Sharp Panda Using New Soul Framework Version to Target Southeast Asian Governments
Mar 08, 2023Ravie LakshmananAdvanced Persistent Threat High-profile government entities in Southeast Asia are the target of a cyber espionage campaign undertaken by a Chinese threat…
CISA’s KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems
Mar 08, 2023Ravie LakshmananVulnerability / Cybersecurity The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three security flaws to its Known Exploited Vulnerabilities (KEV)…
Why Healthcare Can’t Afford to Ignore Digital Identity
Mar 07, 2023The Hacker NewsDigital Identity / Healthcare Investing in digital identity can improve security, increase clinical productivity, and boost healthcare’s bottom line. — by…
New Threat Using Facebook Ads to Target Critical Infrastructure Firms
Mar 07, 2023Ravie LakshmananData Safety / Cyber Threat Cybersecurity researchers have discovered a new information stealer dubbed SYS01stealer targeting critical government infrastructure employees, manufacturing companies,…
Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps
Mar 07, 2023Ravie LakshmananSpyware / Cyber Espionage A suspected Pakistan-aligned advanced persistent threat (APT) group known as Transparent Tribe has been linked to an ongoing…
Engineer’s Failure to Update Plex Software Led to Massive Data Breach
Mar 07, 2023Ravie LakshmananPassword Security / Software Update The massive breach at LastPass was the result of one of its engineers failing to update Plex…
Shein’s Android App Caught Transmitting Clipboard Data to Remote Servers
Mar 07, 2023Ravie LakshmananPrivacy / Data Breach An older version of Shein’s Android application suffered from a bug that periodically captured and transmitted clipboard contents…
How Threat Actors Manipulate Reality
Deep fakes are expected to become a more prominent attack vector. Here’s how to identify them. What are Deep Fakes? A deep fake is the…
New HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on Victims
Mar 06, 2023Ravie LakshmananNetwork Security / Malware A never-before-seen complex malware is targeting business-grade routers to covertly spy on victims in Latin America, Europe, and…