New KCodes NetUSB Bug Affect Millions of Routers from Different Vendors

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have detailed a high severity flaw in KCodes NetUSB component that’s integrated into millions of end-user router devices from Netgear, TP-Link, Tenda, EDiMAX, D-Link, and Western Digital, among others. KCodes NetUSB is a Linux kernel module that enables devices on …

Signal CEO Resigns, WhatsApp Co-Founder Takes Over as Interim CEO

Blog WriterThe Hacker News - Original news source is thehackernews.com

Moxie Marlinspike, the founder of the popular encrypted instant messaging service Signal, has announced that he is stepping down as the chief executive of the non-profit in a move that has been underway over the last few months. “In other …

2022 Cybersecurity Predictions from Lookout: Work From Anywhere Ends On-Premises Security

Blog WriterThe Hacker News - Original news source is thehackernews.com

Lookout, an endpoint-to-cloud cyber security company, have put together their cyber security predictions for 2022.  1 — Cloud connectivity and cloud-to-cloud connectivity will amplify supply-chain breaches One area organizations need to continue to monitor in 2022 is the software supply chain. We …

Microsoft Details macOS Bug That Could Let Attackers Gain Access to User Data

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Monday disclosed details of a recently patched security vulnerability in Apple’s macOS operating system that could be weaponized by a threat actor to expose users’ personal information. Tracked as CVE-2021-30970, the flaw concerns a logic issue in the …

Europol Ordered to Delete Data of Individuals With No Proven Links to Crimes

Blog WriterThe Hacker News - Original news source is thehackernews.com

The European Union’s data protection watchdog on Monday ordered Europol to delete a vast trove of personal data it obtained pertaining to individuals with no proven links to criminal activity. “Datasets older than six months that have not undergone this …

Researchers Find Bugs in Over A Dozen Widely Used URL Parser Libraries

Blog WriterThe Hacker News - Original news source is thehackernews.com

A study of 16 different Uniform Resource Locator (URL) parsing libraries has unearthed inconsistencies and confusions that could be exploited to bypass validations and open the door to a wide range of attack vectors. In a deep-dive analysis jointly conducted …

Abcbot Botnet Linked to Operators of Xanthe Cryptomining malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

New research into the infrastructure behind an emerging DDoS botnet named Abcbot has uncovered “clear” links with a cryptocurrency-mining botnet attack that came to light in December 2020. Attacks involving Abcbot, first disclosed by Qihoo 360’s Netlab security team in November 2021, …

BADNEWS! Patchwork APT Hackers Score Own Goal in Recent Malware Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat hunters have shed light on the tactics, techniques, and procedures embraced by an Indian-origin hacking group called Patchwork as part of a renewed campaign that commenced in late November 2021, targeting Pakistani government entities and individuals with a research …

Facebook Launches ‘Privacy Center’ to Educate Users on Data Collection and Privacy Options

Blog WriterThe Hacker News - Original news source is thehackernews.com

Meta Platforms, the company formerly known as Facebook, on Friday announced the launch of a centralized Privacy Center that aims to “educate people” about its approach with regards to how it collects and processes personal information across its family of …

NHS Warns of Hackers Targeting Log4j Flaws in VMware Horizon

Blog WriterThe Hacker News - Original news source is thehackernews.com

The digital security team at the U.K. National Health Service (NHS) has raised the alarm on active exploitation of Log4Shell vulnerabilities in unpatched VMware Horizon servers by an unknown threat actor to drop malicious web shells and establish persistence on affected networks …