3 Steps to Automate Your Third-Party Risk Management Program
Feb 22, 2023The Hacker NewsCyber Risk Management If you Google “third-party data breaches” you will find many recent reports of data breaches that were either…
Category: TheHackerNews
Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links
Feb 22, 2023Ravie LakshmananOpen Source / Supply Chain Attack In what’s a continuing assault on the open source ecosystem, over 15,000 spam packages have flooded…
Gcore Thwarts Massive 650 Gbps DDoS Attack on Free Plan Client
Feb 22, 2023The Hacker NewsServer Security / DDoS Attack At the beginning of January, Gcore faced an incident involving several L3/L4 DDoS attacks with a…
Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks
Feb 22, 2023Ravie LakshmananExploitation Framework / Cyber Threat An open source command-and-control (C2) framework known as Havoc is being adopted by threat actors as an…
U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog
Feb 22, 2023Ravie LakshmananCyber Risk / Patch Management The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three security flaws to its Known…
VMware Patches Critical Vulnerability in Carbon Black App Control Product
Feb 22, 2023Ravie LakshmananVulnerability / Enterprise Security VMware on Tuesday released patches to address a critical security vulnerability affecting its Carbon Black App Control product.…
Infecting Over 50,000 Devices Daily
Feb 21, 2023Ravie LakshmananEndpoint Security / Botnet A sophisticated botnet known as MyloBot has compromised thousands of systems, with most of them located in India,…
Predictive Analytics and ML-Driven Solutions
Feb 21, 2023The Hacker NewsNetwork Security / Machine Learning As the digital age evolves and continues to shape the business landscape, corporate networks have become…
Coinbase Employee Falls for SMS Scam in Cyber Attack, Limited Data Exposed
Feb 21, 2023Ravie LakshmananSocial Engineering / Cryptocurrency Popular cryptocurrency exchange platform Coinbase disclosed that it experienced a cybersecurity attack that targeted its employees. The company…
Researchers Discover Dozens Samples of Information Stealer ‘Stealc’ in the Wild
Feb 21, 2023Ravie LakshmananCyber Threat Intelligence A new information stealer called Stealc that’s being advertised on the dark web could emerge as a worthy competitor…
Researchers Warn of ReverseRAT Backdoor Targeting Indian Government Agencies
Feb 21, 2023Ravie LakshmananCyber Threat / Cyber Attack A spear-phishing campaign targeting Indian government entities aims to deploy an updated version of a backdoor called…
Cyber Espionage Group Earth Kitsune Deploys WhiskerSpy Backdoor in Latest Attacks
The cyber espionage threat actor tracked as Earth Kitsune has been observed deploying a new backdoor called WhiskerSpy as part of a social engineering campaign.…