Chrome Limits Websites’ Direct Access to Private Networks for Security Reasons

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google Chrome has announced plans to prohibit public websites from directly accessing endpoints located within private networks as part of an upcoming major security shakeup to prevent intrusions via the browser. The proposed change is set to be rolled out …

Zoho Releases Patch for Critical Flaw Affecting ManageEngine Desktop Central

Blog WriterThe Hacker News - Original news source is thehackernews.com

Enterprise software maker Zoho on Monday issued patches for a critical security vulnerability in Desktop Central and Desktop Central MSP that a remote adversary could exploit to perform unauthorized actions in affected servers. Tracked as CVE-2021-44757, the shortcoming concerns an instance …

Dark Web’s Largest Marketplace for Stolen Credit Cards is Shutting Down

Blog WriterThe Hacker News - Original news source is thehackernews.com

UniCC, the biggest dark web marketplace for stolen credit and debit cards, has announced that it’s shuttering its operations after earning $358 million in purchases since 2013 using cryptocurrencies such as Bitcoin, Litecoin, Ether, and Dash. “Don’t build any conspiracy …

A New Destructive Malware Targeting Ukrainian Government and Business Entities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity teams from Microsoft on Saturday disclosed they identified evidence of a new destructive malware operation dubbed “WhisperGate” targeting government, non-profit, and information technology entities in Ukraine amid brewing geopolitical tensions between the country and Russia. “The malware is disguised …

New Unpatched Apple Safari Browser Bug Allows Cross-Site User Tracking

Blog WriterThe Hacker News - Original news source is thehackernews.com

A software bug introduced in Apple Safari 15’s implementation of the IndexedDB API could be abused by a malicious website to track users’ online activity in the web browser and worse, even reveal their identity. The vulnerability, dubbed IndexedDB Leaks, was …

Ukrainian Government Officially Accuses Russia of Recent Cyberattacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

The government of Ukraine on Sunday formally accused Russia of masterminding the attacks that targeted websites of public institutions and government agencies this past week. “All the evidence points to the fact that Russia is behind the cyber attack,” the …

High-Severity Vulnerability in 3 WordPress Plugins Affected 84,000 Websites

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a security shortcoming affecting three different WordPress plugins that impact over 84,000 websites and could be abused by a malicious actor to take over vulnerable sites. “This flaw made it possible for an attacker to update arbitrary …

North Korean Hackers Stole Millions from Cryptocurrency Startups Worldwide

Blog WriterThe Hacker News - Original news source is thehackernews.com

Operators associated with the Lazarus sub-group BlueNoroff have been linked to a series of cyberattacks targeting small and medium-sized companies worldwide with an aim to drain their cryptocurrency funds, in what’s yet another financially motivated operation mounted by the prolific …

Massive Cyber Attack Knocks Down Ukrainian Government Websites

Blog WriterThe Hacker News - Original news source is thehackernews.com

No fewer than 70 websites operated by the Ukrainian government went offline on Friday for hours in what appears to be a coordinated cyber attack amid heightened tensions with Russia. “As a result of a massive cyber attack, the websites …

Get Lifetime Access to Cybersecurity Certification Prep Courses

Blog WriterThe Hacker News - Original news source is thehackernews.com

You can’t go far in professional IT without being asked for some key certifications. In particular, most large companies today require new hires to be well versed in the fundamentals of cybersecurity. Adding the likes of CISSP, CISM, and CompTIA CASP+ to …