Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug

Blog WriterThe Hacker News - Original news source is thehackernews.com

Unidentified threat actors breached a server running an unpatched, 11-year-old version of Adobe’s ColdFusion 9 software in minutes to remotely take over control and deploy file-encrypting Cring ransomware on the …

New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin

Blog WriterThe Hacker News - Original news source is thehackernews.com

A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative credentials to co-opt them into a network with …

Cybersecurity Priorities in 2021: How Can CISOs Re-Analyze and Shift Focus?

Blog WriterThe Hacker News - Original news source is thehackernews.com

2020 was a year of relentless disruptions. The protective layer of secured enterprise networks and controlled IT environments of the physical premises did not exist. Over the past year, CISOs (Chief …

A New Wave of Malware Attack Targeting Organizations in South America

Blog WriterThe Hacker News - Original news source is thehackernews.com

A spam campaign delivering spear-phishing emails aimed at South American organizations has retooled its techniques to include a wide range of commodity remote access trojans (RATs) and geolocation filtering to …

Google to Auto-Reset Unused Android App Permissions for Billions of Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Friday said it’s bringing an Android 11 feature that auto-resets permissions granted to apps that haven’t been used in months, to devices running Android versions 6 and above. …

Numando: A New Banking Trojan Targeting Latin American Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

A newly spotted banking trojan has been caught leveraging legitimate platforms like YouTube and Pastebin to store its encrypted, remote configuration and commandeer infected Windows systems, making it the latest …

Malware Attack on Aviation Sector Uncovered After Going Unnoticed for 2 Years

Blog WriterThe Hacker News - Original news source is thehackernews.com

A targeted phishing campaign aimed at the aviation industry for two years may be spearheaded by a threat actor operating out of Nigeria, highlighting how attackers can carry out small-scale …

Third Critical Bug Affects Netgear Smart Switches — Details and PoC Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

New details have been revealed about a recently remediated critical vulnerability in Netgear smart switches that could be leveraged by an attacker to potentially execute malicious code and take control …