EU Data Protection Watchdog Calls for Ban on Pegasus-like Commercial Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The European Union’s data protection authority on Tuesday called for a ban on the development and the use of Pegasus-like commercial spyware in the region, calling out the technology’s “unprecedented level of intrusiveness” that could endanger users’ right to privacy. …

High-Severity RCE Security Bug Reported in Apache Cassandra Database Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain remote code execution on affected installations. “This Apache security vulnerability is easy to exploit and has the potential …

Facebook Agrees to Pay $90 Million to Settle Decade-Old Privacy Violation Case

Blog WriterThe Hacker News - Original news source is thehackernews.com

Meta Platforms has agreed to pay $90 million to settle a lawsuit over the company’s use of cookies to allegedly track Facebook users’ internet activity even after they had logged off from the platform. In addition, the social media company …

Researchers Link ShadowPad Malware Attacks to Chinese Ministry and PLA

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have detailed the inner workings of ShadowPad, a sophisticated and modular backdoor that has been adopted by a growing number of Chinese threat groups in recent years, while also linking it to the country’s civilian and military intelligence …

SafeDNS: Cloud-based Internet Security and Web Filtering Solution for MSPs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Remote workplace trend is getting the upper hand in 2022. A recent survey by IWG (the International Workplace Group) determined that 70% of the world’s professionals work remotely at least one day a week, with 53% based outside their workplace …

Experts Warn of Hacking Group Targeting Aviation and Defense Sectors

Blog WriterThe Hacker News - Original news source is thehackernews.com

Entities in the aviation, aerospace, transportation, manufacturing, and defense industries have been targeted by a persistent threat group since at least 2017 as part of a string of spear-phishing campaigns mounted to deliver a variety of remote access trojans (RATs) …

New MyloBot Malware Variant Sends Sextortion Emails Demanding $2,732 in Bitcoin

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new version of the MyloBot malware has been observed to deploy malicious payloads that are being used to send sextortion emails demanding victims to pay $2,732 in digital currency. MyloBot, first detected in 2018, is known to feature an array of …

New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that’s being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022. The shortcoming, tracked CVE-2022-0609, …

Spanish Police Arrest SIM Swappers Who Stole Money from Victims Bank Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Spain’s National Police Agency, the Policía Nacional, said last week it dismantled an unnamed cybercriminal organization and arrested eight individuals in connection with a series of SIM swapping attacks that were carried out with the goal of financial fraud. The …

Critical Security Flaws Reported in Moxa MXview Network Management Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Technical details have been disclosed regarding a number of security vulnerabilities affecting Moxa’s MXview web-based network management system, some of which could be chained by an unauthenticated adversary to achieve remote code execution on unpatched servers. The five security weaknesses …