How to Build a Security Awareness Training Program that Yields Measurable Results

Blog WriterThe Hacker News - Original news source is thehackernews.com

Organizations have been worrying about cyber security since the advent of the technological age. Today, digital transformation coupled with the rise of remote work has made the need for security awareness all the more critical. Cyber security professionals are continuously …

U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity agencies from Australia, the U.K., and the U.S. on Wednesday released a joint advisory warning of active exploitation of Fortinet and Microsoft Exchange ProxyShell vulnerabilities by Iranian state-sponsored actors to gain initial access to vulnerable systems for follow-on activities, including data …

Hackers Targeting Myanmar Use Domain Fronting to Hide Malicious Activities

Blog WriterThe Hacker News - Original news source is thehackernews.com

A malicious campaign has been found leveraging a technique called domain fronting to hide command-and-control traffic by leveraging a legitimate domain owned by the Myanmar government to route communications to an attacker-controlled server with the goal of evading detection. The …

Israel’s Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East

Blog WriterThe Hacker News - Original news source is thehackernews.com

Israeli spyware vendor Candiru, which was added to an economic blocklist by the U.S. government this month, is said to have reportedly waged “watering hole” attacks against high-profile entities in the U.K. and the Middle East, new findings reveal. “The victimized websites …

On-Demand Webinar: Into the Cryptoverse

Blog WriterThe Hacker News - Original news source is thehackernews.com

In the span of a few years, cryptocurrencies have gone from laughingstock and novelty to a serious financial instrument, and a major sector in high-tech. The price of Bitcoin and Ethereum has gone from single dollars to thousands, and they’re …

Facebook Bans Pakistani and Syrian Hacker Groups for Abusing its Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

Meta, the company formerly known as Facebook, announced Tuesday that it took action against four separate malicious cyber groups from Pakistan and Syria who were found targeting people in Afghanistan, as well as journalists, humanitarian organizations, and anti-regime military forces …

New Blacksmith Exploit Bypasses Current Rowhammer Attack Defenses

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have demonstrated yet another variation of the Rowhammer attack affecting all DRAM (dynamic random-access memory) chips that bypasses currently deployed mitigations, thereby effectively compromising the security of the devices. The new technique — dubbed “Blacksmith” (CVE-2021-42114, CVSS score: 9.0) — …

Researchers Demonstrate New Way to Detect MitM Phishing Kits in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

No fewer than 1,220 Man-in-the-Middle (MitM) phishing websites have been discovered as targeting popular online services like Instagram, Google, PayPal, Apple, Twitter, and LinkedIn with the goal of hijacking users’ credentials and carrying out further follow-on attacks. The findings come …

Notorious Emotet Botnet Makes a Comeback with the Help of TrickBot Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The notorious Emotet malware is staging a comeback of sorts nearly 10 months after a coordinated law enforcement operation dismantled its command-and-control infrastructure in late January 2021. According to a new report from security researcher Luca Ebach, the infamous TrickBot malware is being used as an …

New ‘Moses Staff’ Hacker Group Targets Israeli Companies With Destructive Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new politically-motivated hacker group named “Moses Staff” has been linked to a wave of targeted attacks targeting Israeli organizations since September 2021 with the goal of plundering and leaking sensitive information prior to encrypting their networks, with no option …