As State-Backed Cyber Threats Grow, Here’s How the World Is Reacting

Blog WriterThe Hacker News - Original news source is thehackernews.com

With the ongoing conflict in Eurasia, cyberwarfare is inevitably making its presence felt. The fight is not only being fought on the fields. There is also a big battle happening in cyberspace. Several cyber-attacks have been reported over the past …

Critical VMware Cloud Director Bug Could Let Hackers Takeover Entire Cloud Infrastructure

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cloud computing and virtualization technology firm VMWare on Thursday rolled out an update to resolve a critical security flaw in its Cloud Director product that could be weaponized to launch remote code execution attacks. The issue, assigned the identifier CVE-2022-22966, has …

Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild. Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case …

Ethereum Developer Jailed 63 Months for Helping North Korea Evade Sanctions

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.S. court has sentenced former Ethereum developer Virgil Griffith to five years and three months in prison and pay a $100,000 fine for conspiring with North Korea to help use cryptocurrencies to circumvent sanctions imposed on the country. “There …

U.S. Warns of APT Hackers Targeting ICS/SCADA Systems with Specialized Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government on Wednesday warned of nation-state actors deploying specialized malware to maintain access to industrial control systems (ICS) and supervisory control and data acquisition (SCADA) devices. “The APT actors have developed custom-made tools for targeting ICS/SCADA devices,” multiple …

Critical VMware Workspace ONE Access Flaw Under Active Exploitation in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

A week after VMware released patches to remediate eight security vulnerabilities in VMware Workspace ONE Access, threat actors have begun to actively exploit one of the critical flaws in the wild. Tracked as CVE-2022-22954, the critical issue relates to a remote …

Webinar: How The Right XDR Can Be a Game-Changer for Lean Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do cybersecurity. And while many organizations are scrambling to integrate XDR into their cybersecurity strategies – …

Microsoft Exposes Evasive Chinese Tarrask Malware Attacking Windows Computers

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Chinese-backed Hafnium hacking group has been linked to a piece of a new malware that’s used to maintain persistence on compromised Windows environments. The threat actor is said to have targeted entities in the telecommunication, internet service provider and …

Russian Hackers Tried Attacking Ukraine’s Power Grid with Industroyer2 Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed that it thwarted a cyberattack by Sandworm, a hacking group affiliated with Russia’s military intelligence, to sabotage the operations of an unnamed energy provider in the country. “The attackers attempted to …

FBI, Europol Seize RaidForums Hacker Forum and Arrest Admin

Blog WriterThe Hacker News - Original news source is thehackernews.com

An international law enforcement operation raided and took down RaidForums, one of the world’s largest hacking forums notorious for selling access to hacked personal information belonging to users. Dubbed Tourniquet, the seizure of the cybercrime website involved authorities from the …