Numando: A New Banking Trojan Targeting Latin American Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly spotted banking trojan has been caught leveraging legitimate platforms like YouTube and Pastebin to store its encrypted, remote configuration and commandeer infected Windows systems, making it the latest …

Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

Blog WriterThe Hacker News - Original news source is thehackernews.com

A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale …

Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control …

Travis CI Flaw Exposes Secrets of Thousands of Open Source Projects

Blog WriterThe Hacker News - Original news source is thehackernews.com

Continuous integration vendor Travis CI has patched a serious security flaw that exposed API keys, access tokens, and credentials, potentially putting organizations that use public source code repositories at risk …

Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday disclosed details of a targeted phishing campaign that leveraged a now-patched zero-day flaw in its MSHTML platform using specially-crafted Office documents to deploy Cobalt Strike Beacon on …

You Can Now Sign-in to You Microsoft Accounts Without a Password

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Wednesday announced a new passwordless mechanism that allows users to access their accounts without a password by using Microsoft Authenticator, Windows Hello, a security key, or a verification …

Critical Flaws Discovered in Azure App That Microsoft Secretly Installs on Linux VMs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Tuesday addressed a quartet of security flaws as part of its Patch Tuesday updates that could be abused by adversaries to target Azure cloud customers and elevate privileges as well …

3 Former U.S. Intelligence Officers Admit to Hacking for UAE Company

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Department of Justice (DoJ) on Tuesday disclosed it fined three intelligence community and military personnel $1.68 million in penalties for their role as cyber-mercenaries working on behalf of …

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such …