20-Year-Old BreachForums Founder Faces Up to 5 Years in Prison
Conor Brian Fitzpatrick, the 20-year-old founder and the administrator of the now-defunct BreachForums has been formally charged in the U.S. with conspiracy to commit access…
Category: TheHackerNews
New MacStealer macOS Malware Steals iCloud Keychain Data and Passwords
Mar 27, 2023Ravie LakshmananData Safety / Endpoint Security A new information-stealing malware has set its sights on Apple’s macOS operating system to siphon sensitive information…
Where SSO Falls Short in Protecting SaaS
Mar 27, 2023The Hacker NewsSaaS Security Single sign-on (SSO) is an authentication method that allows users to authenticate their identity for multiple applications with just…
Microsoft Issues Patch for aCropalypse Privacy Flaw in Windows Screenshot Tools
Mar 27, 2023Ravie LakshmananPrivacy / Windows Security Microsoft has released an out-of-band update to address a privacy-defeating flaw in its screenshot editing tool for Windows…
U.K. National Crime Agency Sets Up Fake DDoS-For-Hire Sites to Catch Cybercriminals
Mar 25, 2023Ravie LakshmananCyber Crime / DDoS Attack In what’s a case of setting a thief to catch a thief, the U.K. National Crime Agency…
Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers
Mar 25, 2023Ravie LakshmananEnterprise Security / Microsoft Microsoft on Friday shared guidance to help customers discover indicators of compromise (IoCs) associated with a recently patched…
OpenAI Reveals Redis Bug Behind ChatGPT User Data Exposure Incident
Mar 25, 2023Ravie LakshmananArtificial Intelligence / Data Security OpenAI on Friday disclosed that a bug in the Redis open source library was responsible for the…
Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data
Mar 24, 2023Ravie LakshmananDevSecOps / Software Security A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as…
GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git Operations
Mar 24, 2023Ravie LakshmananCloud Security / Programming Cloud-based repository hosting service GitHub said it took the step of replacing its RSA SSH host key used…
Inside the High Risk of 3rd-Party SaaS Apps
Mar 24, 2023The Hacker NewsSaaS Security / Webinar Any app that can improve business operations is quickly added to the SaaS stack. However, employees don’t…
Researchers Uncover Chinese Nation State Hackers’ Deceptive Attack Strategies
Mar 24, 2023Ravie LakshmananCyber Attack / Hacking A recent campaign undertaken by Earth Preta indicates that nation-state groups aligned with China are getting increasingly proficient…
Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress Sites
Mar 24, 2023Ravie LakshmananWeb Security / WordPress Patches have been released for a critical security flaw impacting the WooCommerce Payments plugin for WordPress, which is…