Benchmarking Linux Security – Latest Research Findings

Blog WriterThe Hacker News - Original news source is thehackernews.com

How well do your Linux security practices stack up in today’s challenging operating environment? Are you following the correct processes to keep systems up-to-date and protected against the latest threats? Now you can find out thanks to research independently conducted …

New SolarMarker Malware Variant Using Updated Techniques to Stay Under the Radar

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed an advanced version of the SolarMarker malware that packs in new improvements with the goal of updating its defense evasion abilities and staying under the radar. “The recent version demonstrated an evolution from Windows Portable Executables …

New Hacking Campaign Targeting Ukrainian Government with IcedID Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new wave of social engineering campaigns delivering IcedID malware and leveraging Zimbra exploits with the goal of stealing sensitive information. Attributing the IcedID phishing attacks to a threat …

Critical RCE Flaw Reported in WordPress Elementor Website Builder Plugin

Blog WriterThe Hacker News - Original news source is thehackernews.com

Elementor, a WordPress website builder plugin with over five million active installations, has been found to be vulnerable to an authenticated remote code execution flaw that could be abused to take over affected websites. Plugin Vulnerabilities, which disclosed the flaw last week, …

Lazarus Group Behind $540 Million Axie Infinity Crypto Hack and Attacks on Chemical Sector

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Treasury Department has implicated the North Korea-backed Lazarus Group (aka Hidden Cobra) in the theft of $540 million from video game Axie Infinity’s Ronin Network last month. On Thursday, the Treasury tied the Ethereum wallet address that received the stolen funds to …

Get Lifetime Access to This 60-Hour Java Programming Training Bundle @ 97% Discount

Blog WriterThe Hacker News - Original news source is thehackernews.com

Java is a very versatile programming language. From Android apps to Oracle databases, it can be used to power a wide range of software and systems. As with most technical skills, the best way to learn Java is through building your own …

GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations. “An attacker abused stolen OAuth user tokens issued to two …

JekyllBot:5 Flaws Let Attackers Take Control of Aethon TUG Hospital Robots

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as five security vulnerabilities have been addressed in Aethon Tug hospital robots that could enable remote attackers to seize control of the devices and interfere with the timely distribution of medication and lab samples. “Successful exploitation of these …

Haskers Gang Gives Away ZingoStealer Malware to Other Cybercriminals for Free

Blog WriterThe Hacker News - Original news source is thehackernews.com

A crimeware-related threat actor known as Haskers Gang has released an information-stealing malware called ZingoStealer for free on, allowing other criminal groups to leverage the tool for nefarious purposes. “It features the ability to steal sensitive information from victims and can download …

Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco has released patches to contain a critical security vulnerability affecting the Wireless LAN Controller (WLC) that could be abused by an unauthenticated, remote attacker to take control of an affected system. Tracked as CVE-2022-20695, the issue has been rated 10 …