Cybersecurity Experts Warn of a Rise in Lyceum Hacker Group Activities in Tunisia

Blog WriterThe Hacker News - Original news source is thehackernews.com

A threat actor, previously known for striking organizations in the energy and telecommunications sectors across the Middle East as early as April 2018, has evolved its malware arsenal to strike two entities in Tunisia. Security researchers at Kaspersky, who presented …

Why Database Patching Best Practice Just Doesn’t Work and How to Fix It

Blog WriterThe Hacker News - Original news source is thehackernews.com

Patching really, really matters – patching is what keeps technology solutions from becoming like big blocks of Swiss cheese, with endless security vulnerabilities punching hole after hole into critical solutions. But anyone who’s spent any amount of time maintaining systems …

Over 30 Countries Pledge to Fight Ransomware Attacks in US-led Global Meeting

Blog WriterThe Hacker News - Original news source is thehackernews.com

Representatives from the U.S., the European Union, and 30 other countries pledged to mitigate the risk of ransomware and harden the financial system from exploitation with the goal of disrupting the ecosystem, calling it an “escalating global security threat with …

REvil Ransomware Gang Goes Underground After Tor Sites Were Compromised

Blog WriterThe Hacker News - Original news source is thehackernews.com

REvil, the notorious ransomware gang behind a string of cyberattacks in recent years, appears to have gone off the radar once again, a little over a month after the cybercrime group staged a surprise return following a two-month-long hiatus. The …

Windows 10, Linux, iOS, Chrome and Many Others at Hacked Tianfu Cup 2021

Blog WriterThe Hacker News - Original news source is thehackernews.com

Windows 10, iOS 15, Google Chrome, Apple Safari, Microsoft Exchange Server, and Ubuntu 20 were successfully broken into using original, never-before-seen exploits at the Tianfu Cup 2021, the fourth edition of the international cybersecurity contest held in the city of …

Ad-Blocking Chrome Extension Caught Injecting Ads in Google Search Pages

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new deceptive ad injection campaign has been found leveraging an ad blocker extension for Google Chrome and Opera web browsers to sneakily insert ads and affiliate codes on websites, according to new research from cybersecurity firm Imperva. The findings …

Attackers Behind Trickbot Expanding Malware Distribution Channels

Blog WriterThe Hacker News - Original news source is thehackernews.com

The operators behind the pernicious TrickBot malware have resurfaced with new tricks that aim to increase its foothold by expanding its distribution channels, ultimately leading to the deployment of ransomware such as Conti. The threat actor, tracked under the monikers …

Google: We’re Tracking 270 State-Sponsored Hacker Groups From Over 50 Countries

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google’s Threat Analysis Group (TAG) on Thursday said it’s tracking more than 270 government-backed threat actors from more than 50 countries, adding it has approximately sent 50,000 alerts of state-sponsored phishing or malware attempts to customers since the start of 2021. The …

CISA Issues Warning On Cyber Threats Targeting Water and Wastewater Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity Infrastructure and Security Agency (CISA) on Thursday warned of continued ransomware attacks aimed at disrupting water and wastewater facilities (WWS), highlighting five incidents that occurred between March 2019 and August 2021. “This activity—which includes attempts to compromise …

Critical Remote Hacking Flaws Disclosed in Linphone and MicroSIP Softphones

Blog WriterThe Hacker News - Original news source is thehackernews.com

Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adversary to crash the client and even extract sensitive information like password hashes by simply making a malicious call. …