Researchers Detail New HomeKit ‘doorLock’ Bug Affecting Apple iOS

Blog WriterThe Hacker News - Original news source is thehackernews.com

A persistent denial-of-service (DoS) vulnerability has been discovered in Apple’s iOS mobile operating system that’s capable of sending affected devices into a crash or reboot loop upon connecting to an Apple Home-compatible appliance. The behavior, dubbed “doorLock,” is trivial in …

SAILFISH System to Find State-Inconsistency Bugs in Smart Contracts

Blog WriterThe Hacker News - Original news source is thehackernews.com

A group of academics from the University of California, Santa Barbara, has demonstrated what it calls a “scalable technique” to vet smart contracts and mitigate state-inconsistency bugs, discovering 47 zero-day vulnerabilities on the Ethereum blockchain in the process. Smart contracts …

Detecting Evasive Malware on IoT Devices Using Electromagnetic Emanations

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have proposed a novel approach that leverages electromagnetic field emanations from the Internet of Things (IoT) devices as a side-channel to glean precise knowledge about the different kinds of malware targeting the embedded systems, even in scenarios where …

Are Medical Devices at Risk of Ransomware Attacks?

Blog WriterThe Hacker News - Original news source is thehackernews.com

In May 2017, the first documented ransomware assault on networked medical equipment happened. The worldwide ransomware assault WannaCry compromised radiological and other instruments in several hospitals during its height, after a software failure caused by a cyberattack on its third-party …

Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft, over the weekend, rolled out a fix to address an issue that caused email messages to get stuck on its Exchange Server platforms due to what it blamed on a date validation error at around the turn of the …

New Apache Log4j Update Released to Patch Newly Discovered Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat actors to run malicious code on affected systems, making it the fifth security shortcoming …

Garrett Walk-Through Metal Detectors Can Be Hacked Remotely

Blog WriterThe Hacker News - Original news source is thehackernews.com

A number of security flaws have been uncovered in a networking component in Garrett Metal Detectors that could allow remote attackers to bypass authentication requirements, tamper with metal detector configurations, and even execute arbitrary code on the devices. “An attacker …

Experts Detail Logging Tool of DanderSpritz Framework Used by Equation Group Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have offered a detailed glimpse into a system called DoubleFeature that’s dedicated to logging the different stages of post-exploitation stemming from the deployment of DanderSpritz, a full-featured malware framework used by the Equation Group. DanderSpritz came to light on …

‘Spider-Man: No Way Home’ Pirated Downloads Contain Crypto-Mining Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Peter Parker might not be a mastermind cryptocurrency criminal, but the name Spiderman is quickly becoming more associated with the mining landscape. ReasonLabs, a leading provider of cybersecurity prevention and detection software, recently discovered a new form of malware hacking into …

PECB Certified Lead Ethical Hacker: Take Your Career to the Next Level

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybercrime is increasing exponentially and presents devastating risks for most organizations. According to Cybercrime Magazine, global cybercrime damage is predicted to hit $10.5 trillion annually as of 2025. One of the more recent and increasingly popular forms of tackling such …