Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity company Imperva on Friday said it recently mitigated a ransom distributed denial-of-service (DDoS) attack targeting an unnamed website that peaked at 2.5 million requests per second (RPS). “While ransom DDoS attacks are not new, they appear to be evolving …

CISA Adds Another 95 Flaws to its Actively Exploited Vulnerabilities Catalog

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) this week added 95 more security flaws to its Known Exploited Vulnerabilities Catalog, taking the total number of actively exploited vulnerabilities to 478. “These types of vulnerabilities are a frequent attack vector for malicious …

Both Sides in Russia-Ukraine War Heavily Using Telegram for Disinformation and Hacktivism

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cyber criminals and hacktivist groups are increasingly using the Telegram messaging app for their activities, as the Russia-Ukraine conflict enters its eighth day. A new analysis by Israeli cybersecurity company Check Point Research has found that “user volume grew a hundred folds …

New Security Vulnerability Affects Thousands of Self-Managed GitLab Instances

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed details of a new security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenticated attacker to recover user-related information. Tracked as CVE-2021-4191 (CVSS score: 5.3), the medium-severity flaw affects all versions of …

Russia Releases List of IPs, Domains Attacking Its Infrastructure with DDoS Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

As the ongoing Russia-Ukraine conflict continues to escalate, the Russian government on Thursday released a massive list containing 17,576 IP addresses and 166 domains that it said are behind a series of distributed denial-of-service (DDoS) attacks aimed at its domestic infrastructure. Some …

Researchers Demonstrate New Side-Channel Attack on Homomorphic Encryption

Blog WriterThe Hacker News - Original news source is thehackernews.com

A group of academics from the North Carolina State University and Dokuz Eylul University have demonstrated what they say is the “first side-channel attack” on homomorphic encryption that could be exploited to leak data as the encryption process is underway. …

Critical Patches Issued for Cisco Expressway Series, TelePresence VCS Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco this week shipped patches to address a new round of critical security vulnerabilities affecting Expressway Series and Cisco TelePresence Video Communication Server (VCS) that could be exploited by an attacker to gain elevated privileges and execute arbitrary code. The …

How to Automate Offboarding to Keep Your Company Safe

Blog WriterThe Hacker News - Original news source is thehackernews.com

In the midst of ‘The Great Resignation,’ the damage from employees (or contractors) leaving an organization might be one of the greatest risks facing IT teams today. The reality is that in the busy enterprise computing environment, user onboarding and …

Hackers Who Broke Into NVIDIA’s Network Leak DLSS Source Code Online

Blog WriterThe Hacker News - Original news source is thehackernews.com

American chipmaking company NVIDIA on Tuesday confirmed that its network was breached as a result of a cyber attack, enabling the perpetrators to gain access to sensitive data, including source code purportedly associated with its Deep Learning Super Sampling (DLSS) …

Hackers Try to Target European Officials to Get Info on Ukrainian Refugees, Supplies

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details of a new nation-state sponsored phishing campaign have been uncovered setting its sights on European governmental entities in what’s seen as an attempt to obtain intelligence on refugee and supply movement in the region. Enterprise security company Proofpoint, which …