Watch Out! Zyxel Firewalls and VPNs Under Active Cyberattack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Taiwanese networking equipment company Zyxel is warning customers of an ongoing attack targeting a “small subset” of its security products such as firewall and VPN servers. Attributing the attacks to a “sophisticated threat actor,” the firm noted that the attacks …

Crackonosh virus mined $2 million of Monero from 222,000 hacked computers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A previously undocumented Windows malware has infected over 222,000 systems worldwide since at least June 2018, yielding its developer no less than 9,000 Moneros ($2 million) in illegal profits. Dubbed “Crackonosh,” the malware is distributed via illegal, cracked copies of …

FIN7 Supervisor Gets 7-Year Jail Term for Stealing Millions of Credit Cards

Blog WriterThe Hacker News - Original news source is thehackernews.com

A Ukrainian national and a mid-​level supervisor of the hacking group known as FIN7 has been sentenced to seven years in prison for his role as a “pen tester” and perpetuating a criminal scheme that enabled the gang to compromise …

BIOS Disconnect: New High-Severity Bugs Affect 128 Dell PC and Tablet Models

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Thursday disclosed a chain of vulnerabilities affecting the BIOSConnect feature within Dell Client BIOS that could be abused by a privileged network adversary to gain arbitrary code execution at the BIOS/UEFI level of the affected device. “As …

Clop Gang Partners Laundered $500 Million in Ransomware Payments

Blog WriterThe Hacker News - Original news source is thehackernews.com

The cybercrime ring that was apprehended last week in connection with Clop (aka Cl0p) ransomware attacks against dozens of companies in the last few months helped launder money totaling $500 million for several malicious actors through a plethora of illegal …

Reduce Business Risk By Fixing 3 Critical Endpoint-to-Cloud Security Requirements

Blog WriterThe Hacker News - Original news source is thehackernews.com

Enterprise applications used to live securely in data centers and office employees connected to internal networks using company-managed laptops or desktops. And data was encircled by a walled perimeter to keep everything safe. All that changed in the last 18 …

One-Click Exploit Could Have Let Attackers Hijack Any Atlassian Account

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Wednesday disclosed critical flaws in the Atlassian project and software development platform that could be exploited to take over an account and control some of the apps connected through its single sign-on (SSO) capability. “With just one …

Critical Auth Bypass Bug Affects VMware Carbon Black App Control

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMware has rolled out security updates to resolve a critical flaw affecting Carbon Black App Control that could be exploited to bypass authentication and take control of vulnerable systems. The vulnerability, identified as CVE-2021-21998, is rated 9.4 out of 10 …

Antivirus Pioneer John McAfee Found Dead in Spanish Jail

Blog WriterThe Hacker News - Original news source is thehackernews.com

Controversial mogul and antivirus pioneer John McAfee on Wednesday died by suicide in a jail cell in Barcelona, hours after reports that he would be extradited to face federal charges in the U.S. McAfee was 75. He is said to …

Pakistan-linked hackers targeted Indian power company with ReverseRat

Blog WriterThe Hacker News - Original news source is thehackernews.com

A threat actor with suspected ties to Pakistan has been striking government and energy organizations in the South and Central Asia regions to deploy a remote access trojan on compromised Windows systems, according to new research. “Most of the organizations …