Sorting Through Haystacks to Find CTI Needles
Clouded vision CTI systems are confronted with some major issues ranging from the size of the collection networks to their diversity, which ultimately influence the…
Category: TheHackerNews
SaaS in the Real World
Collaboration sits at the essence of SaaS applications. The word, or some form of it, appears in the top two headlines on Google Workspace’s homepage.…
Arid Viper Hacking Group Using Upgraded Malware in Middle East Cyber Attacks
Apr 04, 2023Ravie LakshmananCyber Threat / Malware The threat actor known as Arid Viper has been observed using refreshed variants of its malware toolkit in…
Microsoft Tightens OneNote Security by Auto-Blocking 120 Risky File Extensions
Microsoft has announced plans to automatically block embedded files with “dangerous extensions” in OneNote following reports that the note-taking service is being increasingly abused for…
Cryptocurrency Companies Targeted in Sophisticated 3CX Supply Chain Attack
Apr 04, 2023Ravie LakshmananCryptocurrency / Cyber Attack The adversary behind the supply chain attack targeting 3CX deployed a second-stage implant specifically singling out a small…
Why Do PAM Deployments Take (almost) Forever To Complete
Privileged Access Management (PAM) solutions are regarded as the common practice to prevent identity threats to administrative accounts. In theory, the PAM concept makes absolute…
Italian Watchdog Bans OpenAI’s ChatGPT Over Data Protection Concerns
Apr 03, 2023Ravie LakshmananArtificial Intelligence / Data Safety The Italian data protection watchdog, Garante per la Protezione dei Dati Personali (aka Garante), has imposed a…
Western Digital Hit by Network Security Breach
Apr 03, 2023Ravie LakshmananCyber Attack / Data Security Data storage devices maker Western Digital on Monday disclosed a “network security incident” that involved unauthorized access…
Crypto-Stealing OpcJacker Malware Targets Users with Fake VPN Service
Apr 03, 2023Ravie LakshmananUnited States A piece of new information-stealing malware called OpcJacker has been spotted in the wild since the second half of 2022…
Microsoft Fixes New Azure AD Vulnerability Impacting Bing Search and Major Apps
Apr 01, 2023Ravie LakshmananAzure / Active Directory Microsoft has patched a misconfiguration issue impacting the Azure Active Directory (AAD) identity and access management service that…
Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation
Apr 01, 2023Ravie LakshmananCyber Attack / Vulnerability Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by various threat actors in…
Millions of Sites at Risk!
Apr 01, 2023Ravie LakshmananWeb Security / Cyber Threat Unknown threat actors are actively exploiting a recently patched security vulnerability in the Elementor Pro website builder…