Download the Essential Guide to Response Automation

Blog WriterThe Hacker News - Original news source is thehackernews.com

In the classic children’s movie ‘The Princess Bride,’ one of the characters utters the phrase, “You keep using that word. I do not think it means what you think it means.” It’s freely used as a response to someone’s misuse …

Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new wormable botnet that spreads via GitHub and Pastebin to install cryptocurrency miners and backdoors on target systems has returned with expanded capabilities to compromise web applications, IP cameras, and routers. Early last month, researchers from Juniper Threat Labs …

Nearly 18,000 SolarWinds Customers Installed Backdoored Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

SolarWinds, the enterprise monitoring software provider which found itself at the epicenter of the most consequential supply chain attacks, said as many as 18,000 of its high-profile customers might have installed a tainted version of its Orion products. The acknowledgment comes …

Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)

Blog WriterThe Hacker News - Original news source is thehackernews.com

A security researcher has demonstrated that sensitive data could be exfiltrated from air-gapped computers via a novel technique that leverages Wi-Fi signals as a covert channel—surprisingly, without requiring the presence of Wi-Fi hardware on the targeted systems. Dubbed “AIR-FI,” the …

SoReL-20M: A Huge Dataset of 20 Million Malware Samples Released Online

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity firms Sophos and ReversingLabs on Monday jointly released the first-ever production-scale malware research dataset to be made available to the general public that aims to build effective defenses and drive industry-wide improvements in security detection and response. “SoReL-20M” (short …

US Agencies and FireEye Were Hacked Using SolarWinds Software Backdoor

Blog WriterThe Hacker News - Original news source is thehackernews.com

State-sponsored actors allegedly working for Russia have targeted the US Treasury, the Commerce Department’s National Telecommunications and Information Administration (NTIA), and other government agencies to monitor internal email traffic as part of a widespread cyberespionage campaign. The Washington Post, citing unnamed sources, said the …

Mount Locker Ransomware Offering Double Extortion Scheme to Other Hackers

Blog WriterThe Hacker News - Original news source is thehackernews.com

A relatively new ransomware strain behind a series of breaches on corporate networks has developed new capabilities that allow it to broaden the scope of its targeting and evade security software—as well as with ability for its affiliates to launch …

Governance Considerations for Democratizing Your Organization’s Data in 2021

Blog WriterThe Hacker News - Original news source is thehackernews.com

With the continuing rise of IoT devices, mobile networks, and digital channels, companies face a lot of pressure to generate meaningful and actionable insights from the wealth of data they capture. Gartner Research lists data democratization as one of the top strategic …

Watch Out! Adrozek Malware Hijacking Chrome, Firefox, Edge, Yandex Browsers

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday took the wraps off an ongoing campaign impacting popular web browsers that stealthily injects malware-infested ads into search results to earn money via affiliate advertising. “Adrozek,” as it’s called by the Microsoft 365 Defender Research Team, employs …

Valve’s Steam Server Bugs Could’ve Let Hackers Hijack Online Games

Blog WriterThe Hacker News - Original news source is thehackernews.com

Critical flaws in a core networking library powering Valve’s online gaming functionality could have allowed malicious actors to remotely crash games and even take control over affected third-party game servers. “An attacker could remotely crash an opponent’s game client to …