Zoho ManageEngine PoC Exploit to be Released Soon
Jan 17, 2023Ravie LakshmananCyber Threat / Vulnerability Users of Zoho ManageEngine are being urged to patch their instances against a critical security vulnerability ahead of…
Category: TheHackerNews
Microsoft Azure Services Flaws Could’ve Exposed Cloud Resources to Unauthorized Access
Jan 17, 2023Ravie LakshmananCloud Security / Bug Report Four different Microsoft Azure services have been found vulnerable to server-side request forgery (SSRF) attacks that could…
Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware
Jan 17, 2023Ravie LakshmananThreat Response / Malware New research has found that it is possible for threat actors to abuse a legitimate feature in GitHub…
4 Places to Supercharge Your SOC with Automation
It’s no secret that the job of SOC teams continues to become increasingly difficult. Increased volume and sophistication of attacks are plaguing under-resourced teams with…
Researchers Uncover 3 PyPI Packages Spreading Malware to Developer Systems
Jan 17, 2023Ravie LakshmananSoftware Security / Supply Chain A threat actor by the name Lolip0p has uploaded three rogue packages to the Python Package Index…
A Secure User Authentication Method – Planning is More Important than Ever
Jan 16, 2023The Hacker NewsIdentity Management / MFA When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability.…
Raccoon and Vidar Stealers Spreading via Massive Network of Fake Cracked Software
Jan 16, 2023Ravie LakshmananData Security / Cyber Threat A “large and resilient infrastructure” comprising over 250 domains is being used to distribute information-stealing malware such…
CISA Warns for Flaws Affecting Industrial Control Systems from Major Manufacturers
Jan 16, 2023Ravie LakshmananIndustrial Control Systems The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released several Industrial Control Systems (ICS) advisories warning of critical…
New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild
Jan 16, 2023Ravie LakshmananThreat Landscape / Malware Unidentified threat actors have deployed a new backdoor that borrows its features from the U.S. Central Intelligence Agency…
Malware Attack on CircleCI Engineer’s Laptop Leads to Recent Security Incident
Jan 14, 2023Ravie LakshmananDevOps / Data Security DevOps platform CircleCI on Friday disclosed that unidentified threat actors compromised an employee’s laptop and leveraged malware to…
Cacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability
Jan 14, 2023Ravie LakshmananServer Security / Patch Management A majority of internet-exposed Cacti servers have not been patched against a recently patched critical security vulnerability…
TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws
Jan 14, 2023Ravie LakshmananPrivacy / Online Safety Popular short-form video hosting service TikTok has been fined €5 million (about $5.4 million) by the French data…