Israeli Researcher Cracked Over 3,500 Wi-Fi Networks in Tel Aviv City

Blog WriterThe Hacker News - Original news source is thehackernews.com

Over 70% of Wi-Fi networks from a sample size of 5,000 were hacked with “relative ease” in the Israeli city of Tel Aviv, highlighting how unsecure Wi-Fi passwords can become a gateway for serious threats to individuals, small businesses, and …

Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild. Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate to insufficient validation of untrusted input …

New Wslink Malware Loader Runs as a Server and Executes Modules in Memory

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Wednesday took the wraps off a “simple yet remarkable” malware loader for malicious Windows binaries targeting Central Europe, North America and the Middle East. Codenamed “Wslink” by ESET, this previously undocumented malware stands apart from the rest …

A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft 365 (M365), formerly called Office 365 (O365), is Microsoft’s cloud strategy flagship product with major changes ahead, such as the deprecation of their legacy authentication protocols. Often stored on or saved to the device, Basic Authentication protocols rely on …

Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Malicious actors have yet again published two more typosquatted libraries to the official NPM repository that mimic a legitimate package from Roblox, the game company, with the goal of distributing stealing credentials, installing remote access trojans, and infecting the compromised …

Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new spam email campaign has emerged as a conduit for a previously undocumented malware loader that enables the attackers to gain an initial foothold into enterprise networks and drop malicious payloads on compromised systems. “These infections are also used …

Cyber Attack in Iran Reportedly Cripples Gas Stations Across the Country

Blog WriterThe Hacker News - Original news source is thehackernews.com

A cyber attack in Iran left petrol stations across the country crippled, disrupting fuel sales and defacing electronic billboards to display messages challenging the regime’s ability to distribute gasoline. Posts and videos circulated on social media showed messages that said, “Khamenei! Where is our …

[eBook] The Guide to Centralized Log Management for Lean IT Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

One of the side effects of today’s cyber security landscape is the overwhelming volume of data security teams must aggregate and parse. Lean security teams don’t have it any easier, and the problem is compounded if they must do it …

Latest Report Uncovers Supply Chain Attacks by North Korean Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Lazarus Group, the advanced persistent threat (APT) group attributed to the North Korean government, has been observed waging two separate supply chain attack campaigns as a means to gain a foothold into corporate networks and target a wide range of …

Over 10 Million Android Users Targeted With Premium SMS Scam Apps

Blog WriterThe Hacker News - Original news source is thehackernews.com

A global fraud campaign has been found leveraging 151 malicious Android apps with 10.5 million downloads to rope users into premium subscription services without their consent and knowledge. The premium SMS scam campaign — dubbed “UltimaSMS” — is believed to commenced in …