FBI, CISA Warn of Russian Hackers Exploiting MFA and PrintNightmare Bug

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have released a joint advisory warning that Russia-backed threat actors hacked the network of an …

New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of OpenSSL have shipped patches to resolve a high-severity security flaw in its software library that could lead to a denial-of-service (DoS) condition when parsing certificates. Tracked as CVE-2022-0778 (CVSS score: 7.5), …

Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed seven new security vulnerabilities in an open-source database management system solution called ClickHouse that could be weaponized to crash the servers, leak memory contents, and even lead …

CaddyWiper: Yet Another Data Wiping Malware Targeting Ukrainian Networks

Blog WriterThe Hacker News - Original news source is thehackernews.com

Two weeks after details emerged about a second data wiper strain delivered in attacks against Ukraine, yet another destructive malware has been detected amid Russia’s continuing military invasion of the …

Gaming Company Ubisoft Confirms It was Hacked, Resets Staff Passwords

Blog WriterThe Hacker News - Original news source is thehackernews.com

French video game company Ubisoft on Friday confirmed it was a victim of a “cyber security incident,” causing temporary disruptions to its games, systems, and services. The Montreuil-headquartered firm said …

‘Dirty Pipe’ Linux Flaw Affects a Wide Range of QNAP NAS Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Network-attached storage (NAS) appliance maker QNAP on Monday warned of a recently disclosed Linux vulnerability affecting its devices that could be abused to elevate privileges and gain control of affected …