New Python-Based “Legion” Hacking Tool Emerges on Telegram
An emerging Python-based credential harvester and a hacking tool named Legion is being marketed via Telegram as a way for threat actors to break into…
Category: TheHackerNews
Why Shadow APIs are More Dangerous than You Think
Shadow APIs are a growing risk for organizations of all sizes as they can mask malicious behavior and induce substantial data loss. For those that…
Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions
Apr 13, 2023Ravie LakshmananMalware / Cyber Attack The Transparent Tribe threat actor has been linked to a set of weaponized Microsoft Office documents in attacks…
Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign
Apr 13, 2023Ravie LakshmananCyber Attack / Cyber Threat The North Korean threat actor known as the Lazarus Group has been observed shifting its focus and…
OpenAI’s Bug Bounty Program Offers Up to $20,000 Prizes
Apr 13, 2023Ravie LakshmananSoftware Security / Bug Hunting OpenAI, the company behind the massively popular ChatGPT AI chatbot, has launched a bug bounty program in…
Can’t See or Secure Them Until It’s Too Late
Here’s a hard question to answer: ‘How many service accounts do you have in your environment?’. A harder one is: ‘Do you know what these…
Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit
Threat actors using hacking tools from an Israeli surveillanceware vendor named QuaDream targeted at least five members of civil society in North America, Central Asia,…
Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit
Apr 12, 2023Ravie LakshmananPatch Tuesday / Software Updates It’s the second Tuesday of the month, and Microsoft has released another set of security updates to…
Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack
Apr 12, 2023Ravie LakshmananSoftware Security / Cyber Attack Enterprise communications service provider 3CX confirmed that the supply chain attack targeting its desktop application for Windows…
Newly Discovered “By-Design” Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers
Apr 11, 2023Ravie LakshmananCloud Security / Data Security A “by-design flaw” uncovered in Microsoft Azure could be exploited by attackers to gain access to storage…
Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security
Apr 11, 2023Ravie LakshmananMobile Security / Malware Malicious loader programs capable of trojanizing Android applications are being traded on the criminal underground for up to…
[eBook] A Step-by-Step Guide to Cyber Risk Assessment
Apr 11, 2023The Hacker NewsCybersecurity / Guide In today’s perilous cyber risk landscape, CISOs and CIOs must defend their organizations against relentless cyber threats, including…