Microsoft Warns of a Wide-Scale Phishing-as-a-Service Operation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has opened the lid on a large-scale phishing-as-a-service (PHaaS) operation that’s involved in selling phishing kits and email templates as well as providing hosting and automated services at a …

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as 11 security vulnerabilities have been disclosed in Nagios network management systems, some of which could be chained to achieve pre-authenticated remote code execution with the highest privileges, …

US Sanctions Cryptocurrency Exchange SUEX for Aiding Ransomware Gangs

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Treasury Department on Tuesday imposed sanctions on Russian cryptocurrency exchange Suex for helping facilitate and launder transactions from at least eight ransomware variants as part of the government’s …

High-Severity RCE Flaw Disclosed in Several Netgear Router Models

Blog WriterThe Hacker News - Original news source is thehackernews.com

Networking equipment company Netgear has released patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an …

Unpatched High-Severity Vulnerability Affects Apple macOS Computers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday disclosed details of an unpatched zero-day vulnerability in macOS Finder that could be abused by remote adversaries to trick users into running arbitrary commands on the …

Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug

Blog WriterThe Hacker News - Original news source is thehackernews.com

Unidentified threat actors breached a server running an unpatched, 11-year-old version of Adobe’s ColdFusion 9 software in minutes to remotely take over control and deploy file-encrypting Cring ransomware on the …