SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics
Mar 02, 2023Ravie LakshmananLinux / Cyber Threat The threat actor known as Lucky Mouse has developed a Linux version of a malware toolkit called SysUpdate,…
Category: TheHackerNews
Critical Flaw in Cisco IP Phone Series Exposes Users to Command Injection Attack
Mar 02, 2023Ravie LakshmananEnterprise Security / Network Security Cisco on Wednesday rolled out security updates to address a critical flaw impacting its IP Phone 6800,…
Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware
Mar 01, 2023Ravie LakshmananThreat Intelligence / Malware Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns…
CISOs Are Stressed Out and It’s Putting Companies at Risk
Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of how employee mental health impacts…
Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy
Mar 01, 2023Ravie LakshmananEncryption / Email Security Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the…
Parallax RAT Targeting Cryptocurrency Firms with Sophisticated Injection Techniques
Mar 01, 2023Ravie LakshmananCryptocurrency / Cyber Attack Cryptocurrency companies are being targeted as part of a new campaign that delivers a remote access trojan called…
New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises
Feb 28, 2023Ravie LakshmananRansomware / Malware A new post-exploitation framework called EXFILTRATOR-22 (aka EX-22) has emerged in the wild with the goal of deploying ransomware…
Bitdefender Releases Free Decryptor for MortalKombat Ransomware Strain
Feb 28, 2023Ravie Lakshmanan Romanian cybersecurity company Bitdefender has released a free decryptor for a new ransomware strain known as MortalKombat. MortalKombat is a new…
Application Security vs. API Security: What is the difference?
As digital transformation takes hold and businesses become increasingly reliant on digital services, it has become more important than ever to secure applications and APIs…
Blind Eagle Hackers Target Key Industries in Colombia
Feb 28, 2023Ravie LakshmananCyber Threat / Malware The threat actor known as Blind Eagle has been linked to a new campaign targeting various key industries…
LastPass Reveals Second Attack Resulting in Breach of Encrypted Password Vaults
Feb 28, 2023Ravie LakshmananPassword Security / Data Breach LastPass, which in December 2022 disclosed a severe data breach that allowed threat actors to access encrypted…
CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability
Feb 28, 2023Ravie LakshmananSoftware Security / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity flaw affecting the ZK Framework…