Critical Auth Bypass Bug Reported in Cisco Wireless LAN Controller Software

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco has released patches to contain a critical security vulnerability affecting the Wireless LAN Controller (WLC) that could be abused by an unauthenticated, remote attacker to take control of an affected system. Tracked as CVE-2022-20695, the issue has been rated 10 …

Haskers Gang Gives Away ZingoStealer Malware to Other Cybercriminals for Free

Blog WriterThe Hacker News - Original news source is thehackernews.com

A crimeware-related threat actor known as Haskers Gang has released an information-stealing malware called ZingoStealer for free on, allowing other criminal groups to leverage the tool for nefarious purposes. “It features the ability to steal sensitive information from victims and can download …

JekyllBot:5 Flaws Let Attackers Take Control of Aethon TUG Hospital Robots

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as five security vulnerabilities have been addressed in Aethon Tug hospital robots that could enable remote attackers to seize control of the devices and interfere with the timely distribution of medication and lab samples. “Successful exploitation of these …

Ethereum Developer Jailed 63 Months for Helping North Korea Evade Sanctions

Blog WriterThe Hacker News - Original news source is thehackernews.com

A U.S. court has sentenced former Ethereum developer Virgil Griffith to five years and three months in prison and pay a $100,000 fine for conspiring with North Korea to help use cryptocurrencies to circumvent sanctions imposed on the country. “There …

Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild. Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case …

Critical VMware Cloud Director Bug Could Let Hackers Takeover Entire Cloud Infrastructure

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cloud computing and virtualization technology firm VMWare on Thursday rolled out an update to resolve a critical security flaw in its Cloud Director product that could be weaponized to launch remote code execution attacks. The issue, assigned the identifier CVE-2022-22966, has …

Critical VMware Workspace ONE Access Flaw Under Active Exploitation in the Wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

A week after VMware released patches to remediate eight security vulnerabilities in VMware Workspace ONE Access, threat actors have begun to actively exploit one of the critical flaws in the wild. Tracked as CVE-2022-22954, the critical issue relates to a remote …

U.S. Warns of APT Hackers Targeting ICS/SCADA Systems with Specialized Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government on Wednesday warned of nation-state actors deploying specialized malware to maintain access to industrial control systems (ICS) and supervisory control and data acquisition (SCADA) devices. “The APT actors have developed custom-made tools for targeting ICS/SCADA devices,” multiple …

Webinar: How The Right XDR Can Be a Game-Changer for Lean Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

Extended detection and response (XDR) is expected to be the future of cybersecurity, merging security technologies with the evolving approach to the way we do cybersecurity. And while many organizations are scrambling to integrate XDR into their cybersecurity strategies – …

Russian Hackers Tried Attacking Ukraine’s Power Grid with Industroyer2 Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Computer Emergency Response Team of Ukraine (CERT-UA) on Tuesday disclosed that it thwarted a cyberattack by Sandworm, a hacking group affiliated with Russia’s military intelligence, to sabotage the operations of an unnamed energy provider in the country. “The attackers attempted to …