New ‘Trojan Source’ Technique Lets Hackers Hide Vulnerabilities in Source Code

Blog WriterThe Hacker News - Original news source is thehackernews.com

A novel class of vulnerabilities could be leveraged by threat actors to inject visually deceptive malware in a way that’s semantically permissible but alters the logic defined by the source code, effectively opening the door to more first-party and supply …

Researchers Uncover ‘Pink’ Botnet Malware That Infected Over 1.6 Million Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers disclosed details of what they say is the “largest botnet” observed in the wild in the last six years, infecting over 1.6 million devices primarily located in China, with the goal of launching distributed denial-of-service (DDoS) attacks and …

Police Arrest Suspected Ransomware Hackers Behind 1,800 Attacks Worldwide

Blog WriterThe Hacker News - Original news source is thehackernews.com

12 people have been detained as part of an international law enforcement operation for orchestrating ransomware attacks on critical infrastructure and large organizations that hit over 1,800 victims across 71 countries since 2019, marking the latest action against cybercrime groups. …

This New Android Malware Can Gain Root Access to Your Smartphones

Blog WriterThe Hacker News - Original news source is thehackernews.com

An unidentified threat actor has been linked to a new Android malware strain that features the ability to root smartphones and take complete control over infected smartphones while simultaneously taking steps to evade detection. The malware has been named “AbstractEmu” …

New ‘Shrootless’ Bug Could Let Attackers Install Rootkit on macOS Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday disclosed details of a new vulnerability that could allow an attacker to bypass security restrictions in macOS and take complete control of the device to perform arbitrary operations on the device without getting flagged by traditional security …

Russian TrickBot Gang Hacker Extradited to U.S. Charged with Cybercrime

Blog WriterThe Hacker News - Original news source is thehackernews.com

A Russian national, who was arrested in South Korea last month and extradited to the U.S. on October 20, appeared in a federal court in the state of Ohio on Thursday to face charges for his alleged role as a …

Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild. Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate to insufficient validation of untrusted input …

Israeli Researcher Cracked Over 3,500 Wi-Fi Networks in Tel Aviv City

Blog WriterThe Hacker News - Original news source is thehackernews.com

Over 70% of Wi-Fi networks from a sample size of 5,000 were hacked with “relative ease” in the Israeli city of Tel Aviv, highlighting how unsecure Wi-Fi passwords can become a gateway for serious threats to individuals, small businesses, and …

A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft 365 (M365), formerly called Office 365 (O365), is Microsoft’s cloud strategy flagship product with major changes ahead, such as the deprecation of their legacy authentication protocols. Often stored on or saved to the device, Basic Authentication protocols rely on …