Researchers Warn of FontOnLake Rootkit Malware Targeting Linux Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have detailed a new campaign that likely targets entities in Southeast Asia with a previously unrecognized Linux malware that’s engineered to enable remote access to its operators, in …

Ransomware Group FIN12 Aggressively Going After Healthcare Targets

Blog WriterThe Hacker News - Original news source is thehackernews.com

An “aggressive” financially motivated threat actor has been identified as linked to a string of RYUK ransomware attacks since October 2018, while maintaining close partnerships with TrickBot-affiliated threat actors and …

New Patch Released for Actively Exploited 0-Day Apache Path Traversal to RCE Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Apache Software Foundation on Thursday released additional security updates for its HTTP Server product to remediate what it says is an “incomplete fix” for an actively exploited path traversal and remote …

Code Execution Bug Affects Yamale Python Package — Used by Over 200 Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

A high-severity code injection vulnerability has been disclosed in 23andMe’s Yamale, a schema and validator for YAML, that could be trivially exploited by adversaries to execute arbitrary Python code. The …

New U.S. Government Initiative Holds Contractors Accountable for Cybersecurity

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government on Wednesday announced the formation of a new Civil Cyber-Fraud Initiative that aims to hold contractors accountable for failing to meet required cybersecurity requirements in order to …

Twitch Suffers Massive 125GB Data and Source Code Leak Due to Server Misconfiguration

Blog WriterThe Hacker News - Original news source is thehackernews.com

Interactive livestreaming platform Twitch acknowledged a “breach” after an anonymous poster on the 4chan messaging board leaked its source code, an unreleased Steam competitor from Amazon Game Studios, details of creator payouts, …

Iranian Hackers Abuse Dropbox in Cyberattacks Against Aerospace and Telecom Firms

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details have emerged about a new cyber espionage campaign directed against the aerospace and telecommunications industries, primarily in the Middle East, with the goal of stealing sensitive information about critical …