A "cascade" of errors let Chinese hackers into US government inboxes
03
Apr
2024

A “cascade” of errors let Chinese hackers into US government inboxes

Microsoft still doesn’t known how Storm-0558 attackers managed to steal the Microsoft Services Account cryptographic key they used to forge…

Android Zero-Day Flaw
03
Apr
2024

Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Apr 03, 2024NewsroomMobile Security / Zero Day Google has disclosed that two Android security flaws impacting its Pixel smartphones have…

Manchester University students threatened by ransomware gang
03
Apr
2024

Ransomware kill switch may save 99% of files from encryption

Managed and extended detection and response (MDR and XDR) specialist Adlumin is attempting to help midmarket end-users lessen the impact…

StrelaStealer Attacking to Steal Logins from Outlook & Thunderbird
03
Apr
2024

StrelaStealer Attacking to Steal Logins from Outlook & Thunderbird

A sophisticated variant of StrelaStealer malware has been identified, targeting Spanish-speaking users with the primary aim of pilfering email account…

Salt Security Launches AI-Powered Assistant Pepper
03
Apr
2024

Salt Security Launches AI-Powered Assistant Pepper

Today, API security company Salt Security have announced the release of Pepper, an in-product assistant and, notably, an AI-powered knowledge-based…

‘The Manipulaters’ Improve Phishing, Still Fail at Opsec – Krebs on Security
03
Apr
2024

‘The Manipulaters’ Improve Phishing, Still Fail at Opsec – Krebs on Security

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “The Manipulaters,” a sprawling web hosting network of phishing…

New XZ Utils Backdoor Free Scanner to Detect Malicious
03
Apr
2024

New XZ Utils Backdoor Free Scanner to Detect Malicious

A critical vulnerability has been discovered in XZ Utils, a widely used data compression tool across Unix-like operating systems, including…

WP-Members Plugin Expose Wordpress Sites To Injection Attacks
03
Apr
2024

WP-Members Plugin Expose WordPress Sites To Injection Attacks

A security researcher reported a critical vulnerability in the WP-Members Membership Plugin that allows attackers to inject malicious scripts and…

Key Rotation Flaw Triggers Breach
03
Apr
2024

Key Rotation Flaw Triggers Breach

Storm-0558, a cyberespionage group affiliated with the People’s Republic of China, has reportedly compromised Microsoft Exchange mailboxes of 22 organizations…

Noor Al-Sulaiti To Head Google Cloud's Security Expansion
03
Apr
2024

Noor Al-Sulaiti To Head Google Cloud’s Security Expansion

Google Cloud has announced the appointment of Noor Al-Sulaiti as Head of Security Business Development and Government Relations for the…

Attack Surface management
03
Apr
2024

Attack Surface Management vs. Vulnerability Management

Apr 03, 2024The Hacker NewsCybersecurity / Penetration Testing Attack surface management (ASM) and vulnerability management (VM) are often confused, and…

Chinese Hackers Hijack Swedish Routers to Launch Cyber Attacks
03
Apr
2024

Chinese Hackers Hijack Swedish Routers to Launch Cyber Attacks

The Security Police (Säpo) has disclosed that a Chinese hacker group, APT31, has commandeered Swedish routers to perpetrate cyber attacks…