VirusTotal Releases Ransomware Report Based on Analysis of 80 Million Samples

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as 130 different ransomware families have been found to be active in 2020 and the first half of 2021, with Israel, South Korea, Vietnam, China, Singapore, India, Kazakhstan, Philippines, Iran, and the U.K. emerging as the most affected …

Experts Warn of Unprotected Prometheus Endpoints Exposing Sensitive Information

Blog WriterThe Hacker News - Original news source is thehackernews.com

A large-scale unauthenticated scraping of publicly available and non-secured endpoints from older versions of Prometheus event monitoring and alerting solution could be leveraged to inadvertently leak sensitive information, according to the latest research. “Due to the fact that authentication and …

Critical Flaw in OpenSea Could Have Let Hackers Steal Cryptocurrency From Wallets

Blog WriterThe Hacker News - Original news source is thehackernews.com

A now-patched critical vulnerability in OpenSea, the world’s largest non-fungible token (NFT) marketplace, could’ve been abused by malicious actors to drain cryptocurrency funds from a victim by sending a specially-crafted token, opening a new attack vector for exploitation. The findings …

[eBook] The Guide for Reducing SaaS Applications Risk for Lean IT Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Software-as-a-service (SaaS) industry has gone from novelty to an integral part of today’s business world in just a few years. While the benefits to most organizations are clear – more efficiency, greater productivity, and accessibility – the risks that …

Update Your Windows PCs Immediately to Patch 4 New 0-Days Under Active Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Tuesday rolled out security patches to contain a total of 71 vulnerabilities in Microsoft Windows and other software, including a fix for an actively exploited privilege escalation vulnerability that could be exploited in conjunction with remote code execution bugs to …

GitHub Revoked Insecure SSH Keys Generated by a Popular git Client

Blog WriterThe Hacker News - Original news source is thehackernews.com

Code hosting platform GitHub has revoked weak SSH authentication keys that were generated via the GitKraken git GUI client due to a vulnerability in a third-party library that increased the likelihood of duplicated SSH keys. As an added precautionary measure, the Microsoft-owned …

Digital Signature Spoofing Flaws Uncovered in OpenOffice and LibreOffice

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of LibreOffice and OpenOffice have shipped security updates to their productivity software to remediate multiple vulnerabilities that could be weaponized by malicious actors to alter documents to make them appear as if they are digitally signed by a …

Microsoft Fended Off a Record 2.4 Tbps DDoS Attack Targeting Azure Customers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Monday revealed that its Azure cloud platform mitigated a 2.4 Tbps distributed denial-of-service (DDoS) attack in the last week of August targeting an unnamed customer in Europe, surpassing a 2.3 Tbps attack stopped by Amazon Web Services in February 2020. …

Microsoft Warns of Iran-Linked Hackers Targeting US and Israeli Defense Firms

Blog WriterThe Hacker News - Original news source is thehackernews.com

An emerging threat actor likely supporting Iranian national interests has been behind a password spraying campaign targeting U.S., E.U., and Israeli defense technology companies, with additional activity observed against regional ports of entry in the Persian Gulf as well as …

Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple on Monday released a security update for iOS and iPad to address a critical vulnerability that it says is being exploited in the wild, making it the 17th zero-day flaw the company has addressed in its products since the …