New Exploit Bypasses Existing Spectre-V2 Mitigations in Intel and Arm CPUs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a new technique that could be used to circumvent existing hardware mitigations in modern processors from Intel, AMD, and Arm, and stage speculative execution attacks such as Spectre to leak sensitive information from host memory. Attacks like Spectre are designed to …

Ukrainian Hacker Linked to REvil Ransomware Attacks Extradited to United States

Blog WriterThe Hacker News - Original news source is thehackernews.com

Yaroslav Vasinskyi, a Ukrainian national, linked to the Russia-based REvil ransomware group has been extradited to the U.S. to face charges for his role in carrying out the file-encrypting malware attacks against several companies, including Kaseya last July. The 22-year-old had been …

Emotet Botnet’s Latest Resurgence Spreads to Over 100,000 Computers

Blog WriterThe Hacker News - Original news source is thehackernews.com

The insidious Emotet botnet, which staged a return in November 2021 after a 10-month-long hiatus, is once again exhibiting signs of steady growth, amassing a swarm of over 100,000 infected hosts for perpetrating its malicious activities. “While Emotet has not …

Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service (DDoS) attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1. The attack vector – dubbed TP240PhoneHome (CVE-2022-26143) – has …

Critical Bugs Could Let Attackers Remotely Hack, Damage APC Smart-UPS Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Three high-impact security vulnerabilities have been disclosed in APC Smart-UPS devices that could be abused by remote adversaries as a physical weapon to access and control them in an unauthorized manner. Collectively dubbed TLStorm, the flaws “allow for complete remote takeover of Smart-UPS …

Critical Security Patches Issued by Microsoft, Adobe and Other Major Software Firms

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft’s Patch Tuesday update for the month of March has been made officially available with 71 fixes spanning across its software products such as Windows, Office, Exchange, and Defender, among others. Of the total 71 patches, three are rated Critical and 68 …

New 16 High-Severity UEFI Firmware Flaws Discovered in Millions of HP Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday disclosed 16 new high-severity vulnerabilities in various implementations of Unified Extensible Firmware Interface (UEFI) firmware impacting multiple HP enterprise devices. The shortcomings, which have CVSS scores ranging from 7.5 to 8.8, have been uncovered in HP’s UEFI …

Google: Russian Hackers Target Ukrainians, European Allies via Phishing Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A broad range of threat actors, including Fancy Bear, Ghostwriter, and Mustang Panda, have launched phishing campaigns against Ukraine, Poland, and other European entities amid Russia’s invasion of Ukraine. Google’s Threat Analysis Group (TAG) said it took down two Blogspot …

Google Buys Cybersecurity Firm Mandiant for $5.4 Billion

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google is officially buying threat intelligence and incident response company Mandiant in an all-cash deal approximately valued at $5.4 billion, the two technology firms announced Tuesday. Mandiant is expected to be folded into Google Cloud upon the closure of the …

Samsung Confirms Data Breach After Hackers Leak Galaxy Source Code

Blog WriterThe Hacker News - Original news source is thehackernews.com

Samsung on Monday confirmed a security breach that resulted in the exposure of internal company data, including the source code related to its Galaxy smartphones. “According to our initial analysis, the breach involves some source code relating to the operation …