CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Energy (DoE) are jointly warning of attacks against internet-connected uninterruptible power supply (UPS) devices by means of default …

Critical Sophos Firewall RCE Vulnerability Under Active Exploitation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity firm Sophos on Monday warned that a recently patched critical security vulnerability in its firewall product is being actively exploited in real-world attacks. The flaw, tracked as CVE-2022-1040, is rated …

New Hacking Campaign by Transparent Tribe Hackers Targeting Indian Officials

Blog WriterThe Hacker News - Original news source is thehackernews.com

A threat actor of likely Pakistani origin has been attributed to yet another campaign designed to backdoor targets of interest with a Windows-based remote access trojan named CrimsonRAT since at …

Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances

Blog WriterThe Hacker News - Original news source is thehackernews.com

SonicWall has released security updates to contain a critical flaw across multiple firewall appliances that could be weaponized by an unauthenticated, remote attacker to execute arbitrary code and cause a …

A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages

Blog WriterThe Hacker News - Original news source is thehackernews.com

A threat actor dubbed “RED-LILI” has been linked to an ongoing large-scale supply chain attack campaign targeting the NPM package repository by publishing nearly 800 malicious modules. “Customarily, attackers use …

Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an “advanced multi-layered virtual …