New ‘Shrootless’ Bug Could Let Attackers Install Rootkit on macOS Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft on Thursday disclosed details of a new vulnerability that could allow an attacker to bypass security restrictions in macOS and take complete control of the device to perform arbitrary operations on the device without getting flagged by traditional security …

Russian TrickBot Gang Hacker Extradited to U.S. Charged with Cybercrime

Blog WriterThe Hacker News - Original news source is thehackernews.com

A Russian national, who was arrested in South Korea last month and extradited to the U.S. on October 20, appeared in a federal court in the state of Ohio on Thursday to face charges for his alleged role as a …

Israeli Researcher Cracked Over 3,500 Wi-Fi Networks in Tel Aviv City

Blog WriterThe Hacker News - Original news source is thehackernews.com

Over 70% of Wi-Fi networks from a sample size of 5,000 were hacked with “relative ease” in the Israeli city of Tel Aviv, highlighting how unsecure Wi-Fi passwords can become a gateway for serious threats to individuals, small businesses, and …

Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild. Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate to insufficient validation of untrusted input …

New Wslink Malware Loader Runs as a Server and Executes Modules in Memory

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Wednesday took the wraps off a “simple yet remarkable” malware loader for malicious Windows binaries targeting Central Europe, North America and the Middle East. Codenamed “Wslink” by ESET, this previously undocumented malware stands apart from the rest …

A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft 365 (M365), formerly called Office 365 (O365), is Microsoft’s cloud strategy flagship product with major changes ahead, such as the deprecation of their legacy authentication protocols. Often stored on or saved to the device, Basic Authentication protocols rely on …

Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

Blog WriterThe Hacker News - Original news source is thehackernews.com

Malicious actors have yet again published two more typosquatted libraries to the official NPM repository that mimic a legitimate package from Roblox, the game company, with the goal of distributing stealing credentials, installing remote access trojans, and infecting the compromised …

Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new spam email campaign has emerged as a conduit for a previously undocumented malware loader that enables the attackers to gain an initial foothold into enterprise networks and drop malicious payloads on compromised systems. “These infections are also used …

Cyber Attack in Iran Reportedly Cripples Gas Stations Across the Country

Blog WriterThe Hacker News - Original news source is thehackernews.com

A cyber attack in Iran left petrol stations across the country crippled, disrupting fuel sales and defacing electronic billboards to display messages challenging the regime’s ability to distribute gasoline. Posts and videos circulated on social media showed messages that said, “Khamenei! Where is our …

[eBook] The Guide to Centralized Log Management for Lean IT Security Teams

Blog WriterThe Hacker News - Original news source is thehackernews.com

One of the side effects of today’s cyber security landscape is the overwhelming volume of data security teams must aggregate and parse. Lean security teams don’t have it any easier, and the problem is compounded if they must do it …