Authorities Shut Down Russian RSOCKS Botnet That Hacked Millions of Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan The U.S. Department of Justice (DoJ) on Thursday disclosed that it took down the infrastructure associated with a Russian botnet known as RSOCKS in collaboration with law enforcement partners in Germany, the Netherlands, and the U.K. The botnet, …

Atlassian Confluence Flaw Being Used to Deploy Ransomware and Crypto Miners

Blog WriterThe Hacker News - Original news source is thehackernews.com

A recently patched critical security flaw in Atlassian Confluence Server and Data Center products is being actively weaponized in real-world attacks to drop cryptocurrency miners and ransomware payloads. In at least two of the Windows-related incidents observed by cybersecurity vendor …

Researchers Uncover ‘Hermit’ Android Spyware Used in Kazakhstan, Syria, and Italy

Blog WriterThe Hacker News - Original news source is thehackernews.com

An enterprise-grade surveillanceware dubbed Hermit has been put to use by entities operating from within Kazakhstan, Syria, and Italy over the years since 2019, new research has revealed. Lookout attributed the spy software, which is equipped to target both Android …

MaliBot: A New Android Banking Trojan Spotted in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new strain of Android malware has been spotted in the wild targeting online banking and cryptocurrency wallet customers in Spain and Italy, just weeks after a coordinated law enforcement operation dismantled FluBot. The information stealing trojan, codenamed MaliBot by …

Critical Flaw in Cisco Secure Email and Web Manager Lets Attackers Bypass Authentication

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan Cisco on Wednesday rolled out fixes to address a critical security flaw affecting Email Security Appliance (ESA) and Secure Email and Web Manager that could be exploited by an unauthenticated, remote attacker to sidestep authentication. Assigned the CVE …

New Hertzbleed Side Channel Attack Affects All Modern AMD and Intel CPUs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A newly discovered security vulnerability in modern Intel and AMD processors could let remote attackers steal encryption keys via a power side channel attack. Dubbed Hertzbleed by a group of researchers from the University of Texas, the University …

Panchan: A New Golang-based Peer-To-Peer Botnet Targeting Linux Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan A new Golang-based peer-to-peer (P2P) botnet has been spotted actively targeting Linux servers in the education sector since its emergence in March 2022. Dubbed Panchan by Akamai Security Research, the malware “utilizes its built-in concurrency features to maximize …

Cloudflare Saw Record-Breaking DDoS Attack Peaking at 26 Million Request Per Second

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ravie Lakshmanan Cloudflare on Tuesday disclosed that it had acted to prevent a record-setting 26 million request per second (RPS) distributed denial-of-service (DDoS) attack last week, making it the largest HTTPS DDoS attack detected to date. The web performance and …

Technical Details Released for ‘SynLapse’ RCE Vulnerability Reported in Microsoft Azure

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has incorporated additional improvements to address the recently disclosed SynLapse security vulnerability in order to meet comprehensive tenant isolation requirements in Azure Data Factory and Azure Synapse Pipelines. The latest safeguards include moving the shared integration runtimes to sandboxed …

Patch Tuesday: Microsoft Issues Fix for Actively Exploited ‘Follina’ Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft officially released fixes to address an actively exploited Windows zero-day vulnerability known as Follina as part of its Patch Tuesday updates. Also addressed by the tech giant are 55 other flaws, three of which are rated Critical, 51 are …