New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed security vulnerabilities in handover, a fundamental mechanism that undergirds modern cellular networks, which could be exploited by adversaries to launch denial-of-service (DoS) and man-in-the-middle (MitM) attacks using low-cost equipment. The “vulnerabilities in the handover procedure are not …

CISA Compliance for 2022

Blog WriterThe Hacker News - Original news source is thehackernews.com

The last several years have seen an ever-increasing number of cyber-attacks, and while the frequency of such attacks has increased, so too has the resulting damage. One needs only to look at CISA’s list of significant cyber incidents to appreciate the magnitude …

Experts Discover Backdoor Deployed on the U.S. Federal Agency’s Network

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.S. federal government commission associated with international rights has been targeted by a backdoor that reportedly compromised its internal network in what the researchers described as a “classic APT-type operation.”  “This attack could have given total visibility of the …

Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store

Blog WriterThe Hacker News - Original news source is thehackernews.com

A malicious Android app with more than 500,000 downloads from the Google Play app store has been found hosting malware that stealthily exfiltrates users’ contact lists to an attacker-controlled server and signs up users to unwanted paid premium subscriptions without …

New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have discovered an entirely new attack vector that enables adversaries to exploit the Log4Shell vulnerability on servers locally by using a JavaScript WebSocket connection. “This newly-discovered attack vector means that anyone with a vulnerable Log4j version on their …

Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2.17.0 — for the widely used logging library that could be exploited by malicious actors to stage …

Facebook Bans 7 ‘Cyber Mercenary’ Companies for Spying on 50,000 Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

Meta Platforms on Thursday revealed it took steps to deplatform seven cyber mercenaries that it said carried out “indiscriminate” targeting of journalists, dissidents, critics of authoritarian regimes, families of opposition, and human rights activists located in over 100 countries, amid …

New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021

Blog WriterThe Hacker News - Original news source is thehackernews.com

Industrial and government organizations, including enterprises in the military-industrial complex and research laboratories, are the targets of a new malware botnet dubbed PseudoManyscrypt that has infected roughly 35,000 Windows computers this year alone. The name comes from its similarities to the Manuscrypt malware, which …

How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools

Blog WriterThe Hacker News - Original news source is thehackernews.com

It’s no secret that the internet isn’t a very safe place. And it’s not hard to understand why. It’s a medium that connects billions of people around the world that affords bad actors enough anonymity to wreak havoc without getting …

New Phorpiex Botnet Variant Steals Half a Million Dollars in Cryptocurrency

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cryptocurrency users in Ethiopia, Nigeria, India, Guatemala, and the Philippines are being targeted by a new variant of the Phorpiex botnet called Twizt that has resulted in the theft of virtual coins amounting to $500,000 over the last one year. Israeli security …