Researchers Uncover Ways to Break the Encryption of ‘MEGA’ Cloud Storage Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A new piece of research from academics at ETH Zurich has identified a number of critical security issues in the MEGA cloud storage service that could be leveraged to break the confidentiality and integrity of user data. In …

Russian Hackers Exploiting Microsoft Follina Vulnerability Against Ukraine

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Computer Emergency Response Team of Ukraine (CERT-UA) has cautioned of a new set of spear-phishing attacks exploiting the “Follina” flaw in the Windows operating system to deploy password-stealing malware. Attributing the intrusions to a Russian nation-state group tracked as …

Newly Discovered Magecart Infrastructure Reveals the Scale of Ongoing Campaign

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly discovered Magecart skimming campaign has its roots in a previous attack activity going all the way back to November 2021. To that end, it has come to light that two malware domains identified as hosting credit card skimmer …

Europol Busts Phishing Gang Responsible for Millions in Losses

Blog WriterThe Hacker News - Original news source is thehackernews.com

Europol on Tuesday announced the dismantling of an organized crime group that dabbled in phishing, fraud, scams, and money laundering activities. The cross-border operation, which involved law enforcement authorities from Belgium and the Netherlands, saw the arrests of nine individuals …

RIG Exploit Kit Now Infects Victims’ PCs With Dridex Instead of Raccoon Stealer

Blog WriterThe Hacker News - Original news source is thehackernews.com

The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022. The switch in modus operandi, spotted by Romanian company Bitdefender, comes …

New ToddyCat Hacker Group on Experts’ Radar After Targeting MS Exchange Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan An advanced persistent threat (APT) actor codenamed ToddyCat has been linked to a string of attacks aimed at government and military entities in Europe and Asia since at least December 2020. The relatively new adversarial collective is said …

Researchers Disclose 56 Vulnerabilities Impacting OT Devices from 10 Vendors

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan Nearly five dozen security vulnerabilities have been disclosed in devices from 10 operational technology (OT) vendors due to what researchers call are “insecure-by-design practices.” Collectively dubbed OT:ICEFALL by Forescout, the 56 issues span as many as 26 device …

Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A 36-year-old former Amazon employee was convicted of wire fraud and computer intrusions in the U.S. for her role in the theft of personal data of no fewer than 100 million people in the 2019 Capital One breach. …

Mitigate Ransomware in a Remote-First World

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ransomware has been a thorn in the side of cybersecurity teams for years. With the move to remote and hybrid work, this insidious threat has become even more of a challenge for organizations everywhere. 2021 was a case study in …

Do You Have Ransomware Insurance? Look at the Fine Print

Blog WriterThe Hacker News - Original news source is thehackernews.com

Insurance exists to protect the insured party against catastrophe, but the insurer needs protection so that its policies are not abused – and that’s where the fine print comes in. However, in the case of ransomware insurance, the fine print …