Hackers Begin Exploiting Second Log4j Vulnerability as a Third Flaw Emerges

Blog WriterThe Hacker News - Original news source is thehackernews.com

Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit a second bug disclosed in the widely used Log4j logging utility, making it imperative that customers move quickly to install the latest version as a barrage of …

Facebook to Pay Hackers for Reporting Data Scraping Bugs and Scraped Datasets

Blog WriterThe Hacker News - Original news source is thehackernews.com

Meta Platforms, the company formerly known as Facebook, has announced that it’s expanding its bug bounty program to start rewarding valid reports of scraping vulnerabilities across its platforms as well as include reports of scraping data sets that are available online. “We …

Hackers Using Malicious IIS Server Module to Steal Microsoft Exchange Credentials

Blog WriterThe Hacker News - Original news source is thehackernews.com

Malicious actors are deploying a previously undiscovered binary, an Internet Information Services (IIS) webserver module dubbed “Owowa,” on Microsoft Exchange Outlook Web Access servers with the goal of stealing credentials and enabling remote command execution. “Owowa is a C#-developed .NET …

Cynet’s MDR Offers Organizations Continuous Security Oversight

Blog WriterThe Hacker News - Original news source is thehackernews.com

Today’s cyber attackers are constantly looking for ways to exploit vulnerabilities and infiltrate organizations. To keep up with this evolving threat landscape, security teams must be on the lookout for potential risks around the clock. Since most organizations simply cannot …

Microsoft Issues Windows Update to Patch 0-Day Used to Spread Emotet Malware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has rolled out Patch Tuesday updates to address multiple security vulnerabilities in Windows and other software, including one actively exploited flaw that’s being abused to deliver Emotet, TrickBot, or Bazaloader malware payloads. The latest monthly release for December fixes a total …

Second Log4j Vulnerability (CVE-2021-45046) Discovered — New Patch Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

The Apache Software Foundation (ASF) has pushed out a new fix for the Log4j logging utility after the previous patch for the recently disclosed Log4Shell exploit was deemed as “incomplete in certain non-default configurations.” The second vulnerability — tracked as CVE-2021-45046 — is rated …

How Extended Security Posture Management Optimizes Your Security Stack

Blog WriterThe Hacker News - Original news source is thehackernews.com

As a CISO, one of the most challenging questions to answer is “How well are we protected right now?” Between the acceleration of hackers’ offensive capabilities and the dynamic nature of information networks, a drift in the security posture is …

Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Romanian cybersecurity technology company Bitdefender on Monday revealed that attempts are being made to target Windows machines with a novel ransomware family called Khonsari as well as a remote access Trojan named Orcus by exploiting the recently disclosed critical Log4j vulnerability. The attack leverages …

Ransomware Affiliate Arrested in Romania; 51 Stolen Data Brokers Arrested in Ukraine

Blog WriterThe Hacker News - Original news source is thehackernews.com

Europol, the European Union’s premier law enforcement agency, has announced the arrest of a third Romanian national for his role as a ransomware affiliate suspected of hacking high-profile organizations and companies and stealing large volumes of sensitive data. The 41-year-old unnamed individual …

Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones

Blog WriterThe Hacker News - Original news source is thehackernews.com

Apple on Monday released updates to iOS, macOS, tvOS, and watchOS with security patches for multiple vulnerabilities, including a remote jailbreak exploit chain as well as a number of critical issues in the Kernel and Safari web browser that were first demonstrated at the Tianfu …