Hackers Exploiting Critical Zero-Day Bug in SonicWall SMA 100 Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

SonicWall on Monday warned of active exploitation attempts against a zero-day vulnerability in its Secure Mobile Access (SMA) 100 series devices. The flaw, which affects both physical and virtual SMA …

A New Software Supply‑Chain Attack Targeted Millions With Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today disclosed a new supply chain attack targeting online gamers by compromising the update mechanism of NoxPlayer, a free Android emulator for PCs and Macs. Dubbed “Operation NightScout” …

New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A financially-motivated threat actor notorious for its cryptojacking attacks has leveraged a revised version of their malware to target cloud infrastructures using vulnerabilities in web server technologies, according to new …

Google Discloses Severe Bug in Libgcrypt Encryption Library—Impacting Many Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

A “severe” vulnerability in GNU Privacy Guard (GnuPG)’s Libgcrypt encryption software could have allowed an attacker to write arbitrary data to the target machine, potentially leading to remote code execution. The …

New CISOs Survey Reveals How Small Cybersecurity Teams Can Confront 2021

Blog WriterThe Hacker News - Original news source is thehackernews.com

The pressure on small to medium-sized enterprises to protect their organizations against cyberthreats is astronomical. These businesses face the same threats as the largest enterprises, experience the same (relative) damages …

Italy CERT Warns of a New Credential Stealing Android Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a new family of Android malware that abuses accessibility services in the device to hijack user credentials and record audio and video. Dubbed “Oscorp” by Italy’s CERT-AGID …