Healthcare Industry Witnessed 45% Spike in Cyber Attacks Since Nov 20

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cyberattacks targeting healthcare organizations have spiked by 45% since November 2020 as COVID-19 cases continue to increase globally. According to a new report published by Check Point Research today and shared with The Hacker News, this increase has made the …

Warning: Cross-Platform ElectroRAT Malware Targeting Cryptocurrency Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers today revealed a wide-ranging scam targeting cryptocurrency users that began as early as January last year to distribute trojanized applications to install a previously undetected remote access tool on target systems. Called ElectroRAT by Intezer, the RAT is …

Google Speech-to-Text API Can Help Attackers Easily Bypass Google reCAPTCHA

Blog WriterThe Hacker News - Original news source is thehackernews.com

A three-year-old attack technique to bypass Google’s audio reCAPTCHA by using its own Speech-to-Text API has been found to still work with 97% accuracy. Researcher Nikolai Tschacher disclosed his findings in a proof-of-concept (PoC) of the attack on January 2. …

British Court Rejects U.S. Request to Extradite WikiLeaks’ Julian Assange

Blog WriterThe Hacker News - Original news source is thehackernews.com

A British court has rejected the U.S. government’s request to extradite Wikileaks founder Julian Assange to the country on charges pertaining to illegally obtaining and sharing classified material related to national security. In a hearing at Westminster Magistrates’ Court today, …

Ticketmaster To Pay $10 Million Fine For Hacking A Rival Company

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ticketmaster has agreed to pay a $10 million fine after being charged with illegally accessing computer systems of a competitor repeatedly between 2013 and 2015 in an attempt to “cut [the company] off at the knees.” A subsidiary of Live …

Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded, undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 (CVSS …

Microsoft Says SolarWinds Hackers Accessed Some of Its Source Code

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday revealed that the threat actors behind the SolarWinds supply chain attack were able to gain access to a small number of internal accounts and escalate access inside its internal network. The “very sophisticated nation-state actor” used the …

A Google Docs Bug Could Have Allowed Hackers See Your Private Documents

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has patched a bug in its feedback tool incorporated across its services that could be exploited by an attacker to potentially steal screenshots of sensitive Google Docs documents simply by embedding them in a malicious website. The flaw was …

AutoHotkey-Based Password Stealer Targeting US, Canadian Banking Users

Blog WriterThe Hacker News - Original news source is thehackernews.com

Threat actors have been discovered distributing a new credential stealer written in AutoHotkey (AHK) scripting language as part of an ongoing campaign that started early 2020. Customers of financial institutions in the US and Canada are among the primary targets …

A New SolarWinds Flaw Likely Had Let Hackers Install SUPERNOVA Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

An authentication bypass vulnerability in the SolarWinds Orion software may have been leveraged by adversaries to deploy the SUPERNOVA malware in target environments. According to an advisory published yesterday by the CERT Coordination Center, the SolarWinds Orion API that’s used to interface …