13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as 13 security vulnerabilities have been discovered in the Nucleus TCP/IP stack, a software library now maintained by Siemens and used in three billion operational technology and IoT devices that could allow for remote code execution, denial-of-service (DoS), …

Researchers Discover PhoneSpy Malware Spying on South Korean Citizens

Blog WriterThe Hacker News - Original news source is thehackernews.com

An ongoing mobile spyware campaign has been uncovered snooping on South Korean residents using a family of 23 malicious Android apps to siphon sensitive information and gain remote control of the devices. “With more than a thousand South Korean victims, …

14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday disclosed 14 critical vulnerabilities in the BusyBox Linux utility that could be exploited to result in a denial-of-service (DoS) condition and, in select cases, even lead to information leaks and remote code execution. The security weaknesses, …

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively exploited zero-day flaws in Excel and Exchange Server that could …

Unique Challenges to Cyber-Security in Healthcare and How to Address Them

Blog WriterThe Hacker News - Original news source is thehackernews.com

No business is out of danger of cyberattacks today. However, specific industries are particularly at risk and a favorite of attackers. For years, the healthcare industry has taken the brunt of ransomware attacks, data breaches, and other cyberattacks. Why is …

Robinhood Trading App Suffers Data Breach Exposing 7 Million Users’ Information

Blog WriterThe Hacker News - Original news source is thehackernews.com

Robinhood on Monday disclosed a security breach affecting approximately 7 million customers, roughly a third of its user base, that resulted in unauthorized access of personal information by an unidentified threat actor. The commission-free stock trading and investing platform said the …

U.S. Charges Ukrainian Hacker for Kaseya Attack; Seizes $6 Million from REvil Gang

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government on Monday charged a Ukrainian suspect, arrested in Poland last month, with deploying REvil ransomware to target multiple businesses and government entities in the country, including perpetrating the attack against software company Kaseya, marking the latest action …

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

Blog WriterThe Hacker News - Original news source is thehackernews.com

At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho’s ManageEngine ADSelfService Plus self-service password management and single sign-on (SSO) solution. The spying campaign, which was observed starting …

Suspected REvil Ransomware Affiliates Arrested in Global Takedown

Blog WriterThe Hacker News - Original news source is thehackernews.com

Romanian law enforcement authorities have announced the arrest of two individuals for their roles as affiliates of the REvil ransomware family, dealing a severe blow to one of the most prolific cybercrime gangs in history. The suspects are believed to have orchestrated more than …

Types of Penetration Testing

Blog WriterThe Hacker News - Original news source is thehackernews.com

If you are thinking about performing a penetration test on your organization, you might be interested in learning about the different types of tests available. With that knowledge, you’ll be better equipped to define the scope for your project, hire …