FBI, Europol Seize RaidForums Hacker Forum and Arrest Admin

Blog WriterThe Hacker News - Original news source is thehackernews.com

An international law enforcement operation raided and took down RaidForums, one of the world’s largest hacking forums notorious for selling access to hacked personal information belonging to users. Dubbed Tourniquet, the seizure of the cybercrime website involved authorities from the …

Critical LFI Vulnerability Reported in Hashnode Blogging Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed a previously undocumented local file inclusion (LFI) vulnerability in Hashnode, a developer-oriented blogging platform, that could be abused to access sensitive data such as SSH keys, server’s IP address, and other network information. “The LFI originates in a Bulk …

Cross-Regional Disaster Recovery with Elasticsearch

Blog WriterThe Hacker News - Original news source is thehackernews.com

Unsurprisingly, here at Rewind, we’ve got a lot of data to protect (over 2 petabytes worth). One of the databases we use is called Elasticsearch (ES or Opensearch, as it is currently known in AWS). To put it simply, ES is …

Microsoft Issues Patches for 2 Windows Zero-Days and 126 Other Vulnerabilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft’s Patch Tuesday updates for the month of April have addressed a total of 128 security vulnerabilities spanning across its software product portfolio, including Windows, Defender, Office, Exchange Server, Visual Studio, and Print Spooler, among others. 10 of the 128 bugs fixed …

Finding Attack Paths in Cloud Environments

Blog WriterThe Hacker News - Original news source is thehackernews.com

The mass adoption of cloud infrastructure is fully justified by innumerable advantages. As a result, today, organizations’ most sensitive business applications, workloads, and data are in the cloud. Hackers, good and bad, have noticed that trend and effectively evolved their …

NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation

Blog WriterThe Hacker News - Original news source is thehackernews.com

The maintainers of the NGINX web server project have issued mitigations to address security weaknesses in its Lightweight Directory Access Protocol (LDAP) Reference Implementation. “NGINX Open Source and NGINX Plus are not themselves affected, and no corrective action is necessary …

E.U. Officials Reportedly Targeted with Israeli Pegasus Spyware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Senior officials in the European Union were allegedly targeted with NSO Group’s infamous Pegasus surveillance tool, according to a new report from Reuters. At least five individuals, including European Justice Commissioner Didier Reynders, are said to have been singled out in total, …

Google Sues Scammer for Running ‘Puppy Fraud Scheme’ Website

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Monday disclosed that it’s taking legal action against a nefarious actor who has been spotted operating fraudulent websites to defraud unsuspecting people into buying non-existent puppies. “The actor used a network of fraudulent websites that claimed to sell …

Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new traffic direction system (TDS) called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. “The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, …

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers are warning of two different information-stealing malware, named FFDroider and Lightning Stealer, that are capable of siphoning data and launching further attacks. “Designed to send stolen credentials and cookies to a Command & Control server, FFDroider disguises itself on victim’s machines …