Digitally Signed Bandook Malware Once Again Targets Multiple Sectors

Blog WriterThe Hacker News - Original news source is thehackernews.com

A cyberespionage group with suspected ties to the Kazakh and Lebanese governments has unleashed a new wave of attacks against a multitude of industries with a retooled version of a 13-year-old backdoor Trojan. Check Point Research called out hackers affiliated …

Become a White Hat Hacker — Get 10 Top-Rated Courses at 97% OFF

Blog WriterThe Hacker News - Original news source is thehackernews.com

Many of us here would love to turn hacking into a full-time career. To make that dream come true, you need to master your subject and earn some key certifications. To speed up this process, you might want to take …

Interpol Arrest 3 Nigerian BEC Scammers For Targeting Over 50,000 Entities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Three Nigerian citizens suspected of being members of an organized cybercrime group behind distributing malware, carrying out phishing campaigns, and extensive Business Email Compromise (BEC) scams have been arrested in the city of Lagos, Interpol reported yesterday. The investigation, dubbed …

2-Factor Authentication Bypass Flaw Reported in cPanel and WHM Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

cPanel, a provider of popular administrative tools to manage web hosting, has patched a security vulnerability that could have allowed remote attackers with access to valid credentials to bypass two-factor authentication (2FA) protection on an account. The issue, tracked as …

Baidu’s Android Apps Caught Collecting and Leaking Sensitive User Data

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two popular Android apps from Chinese tech giant Baidu have been removed from the Google Play Store in October after they were caught collecting sensitive user details. The two apps in question—Baidu Maps and Baidu Search Box—were found to collect …

Stantinko Botnet Now Targeting Linux Servers to Hide Behind Proxies

Blog WriterThe Hacker News - Original news source is thehackernews.com

An adware and coin-miner botnet targeting Russia, Ukraine, Belarus, and Kazakhstan at least since 2012 has now set its sights on Linux servers to fly under the radar. According to a new analysis published by Intezer today and shared with …

Critical Unpatched VMware Flaw Affects Multiple Corporates Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMware has released temporary workarounds to address a critical vulnerability in its products that could be exploited by an attacker to take control of an affected system. “A malicious actor with network access to the administrative configurator on port 8443 …

Why Replace Traditional Web Application Firewall (WAF) With New Age WAF?

Blog WriterThe Hacker News - Original news source is thehackernews.com

At present, web applications have become the top targets for attackers because of potential monetization opportunities. Security breaches on the web application can cost millions. Strikingly, DNS (Domain Name System) related outage and Distributed denial of service (DDoS) lead a …

WARNING: Unpatched Bug in GO SMS Pro App Exposes Millions of Media Messages

Blog WriterThe Hacker News - Original news source is thehackernews.com

GO SMS Pro, a popular messaging app for Android with over 100 million installs, has been found to have an unpatched security flaw that publicly exposes media transferred between users, including private voice messages, photos, and videos. “This means any …

Facebook Messenger Bug Lets Hackers Listen to You Before You Pick Up the Call

Blog WriterThe Hacker News - Original news source is thehackernews.com

Facebook has patched a bug in its widely installed Messenger app for Android that could have allowed a remote attacker to call unsuspecting targets and listen to them before even they picked up the audio call. The flaw was discovered …