High-Severity RCE Flaw Disclosed in Several Netgear Router Models

Blog WriterThe Hacker News - Original news source is thehackernews.com

Networking equipment company Netgear has released patches to remediate a high-severity remote code execution vulnerability affecting multiple routers that could be exploited by remote attackers to take control of an affected system. Traced as CVE-2021-40847 (CVSS score: 8.1), the security weakness impacts …

VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMware on Tuesday published a new bulletin warning of as many as 19 vulnerabilities in vCenter Server and Cloud Foundation appliances that a remote attacker could exploit to take control of an affected system. The most urgent among them is …

Unpatched High-Severity Vulnerability Affects Apple macOS Computers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday disclosed details of an unpatched zero-day vulnerability in macOS Finder that could be abused by remote adversaries to trick users into running arbitrary commands on the machines. “A vulnerability in macOS Finder allows files whose extension …

Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug

Blog WriterThe Hacker News - Original news source is thehackernews.com

Unidentified threat actors breached a server running an unpatched, 11-year-old version of Adobe’s ColdFusion 9 software in minutes to remotely take over control and deploy file-encrypting Cring ransomware on the target’s network 79 hours after the hack. The server, which …

New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin

Blog WriterThe Hacker News - Original news source is thehackernews.com

A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative credentials to co-opt them into a network with the goal of illegally mining cryptocurrency. “The malware’s primary tactic …

Cybersecurity Priorities in 2021: How Can CISOs Re-Analyze and Shift Focus?

Blog WriterThe Hacker News - Original news source is thehackernews.com

2020 was a year of relentless disruptions. The protective layer of secured enterprise networks and controlled IT environments of the physical premises did not exist. Over the past year, CISOs (Chief Information Security Officers) have had to grapple with the challenges of …

Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters

Blog WriterThe Hacker News - Original news source is thehackernews.com

Law enforcement agencies in Italy and Spain have dismantled an organized crime group linked to the Italian Mafia that was involved in online fraud, money laundering, drug trafficking, and property crime, netting the gang about €10 million ($11.7 million) in …

A New Wave of Malware Attack Targeting Organizations in South America

Blog WriterThe Hacker News - Original news source is thehackernews.com

A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote access trojans (RATs) and geolocation filtering to avoid detection, according to new research. Cybersecurity firm Trend Micro …

Google to Auto-Reset Unused Android App Permissions for Billions of Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Friday said it’s bringing an Android 11 feature that auto-resets permissions granted to apps that haven’t been used in months, to devices running Android versions 6 and above. The expansion is expected to go live later this year …

Numando: A New Banking Trojan Targeting Latin American Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly spotted banking trojan has been caught leveraging legitimate platforms like YouTube and Pastebin to store its encrypted, remote configuration and commandeer infected Windows systems, making it the latest to join the long list of malware targeting Latin America (LATAM) after …