F5 Releases Critical Security Patch for BIG-IP and BIG-IQ Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Enterprise security and network appliance vendor F5 has released patches for more than two dozen security vulnerabilities affecting multiple versions of BIG-IP and BIG-IQ devices that could potentially allow an attacker to perform a wide range of malicious actions, including accessing arbitrary …

New Passwordless Verification API Uses SIM Security for Zero Trust Remote Access

Blog WriterThe Hacker News - Original news source is thehackernews.com

Forget watercooler conspiracies or boardroom battles. There’s a new war in the office. As companies nudge their staff to return to communal workspaces, many workers don’t actually want to – more than 50 percent of employees would rather quit, according …

VMware Issues Patches to Fix New Flaws Affecting Multiple Products

Blog WriterThe Hacker News - Original news source is thehackernews.com

VMware on Wednesday shipped security updates to address vulnerabilities in multiple products that could be potentially exploited by an attacker to take control of an affected system. The six security weaknesses (from CVE-2021-22022 through CVE-2021-22027, CVSS scores: 4.4 – 8.6) affect VMware …

Critical Flaw Discovered in Cisco APIC for Switches — Patch Released

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco Systems on Wednesday issued patches to address a critical security vulnerability affecting the Application Policy Infrastructure Controller (APIC) interface used in its Nexus 9000 Series Switches that could be potentially abused to read or write arbitrary files on a …

Researchers Uncover FIN8’s New Backdoor Targeting Financial Institutions

Blog WriterThe Hacker News - Original news source is thehackernews.com

A financially motivated threat actor notorious for setting its sights on retail, hospitality, and entertainment industries has been observed deploying a completely new backdoor on infected systems, indicating the operators are continuously retooling their malware arsenal to avoid detection and …

Preventing your Cloud ‘Secrets’ from Public Exposure: An IDE plugin solution

Blog WriterThe Hacker News - Original news source is thehackernews.com

I’m sure you would agree that, in today’s digital world, the majority of applications we work on require some type of credentials – to connect to a database with a username/password, to access computer programs via authorized tokens, or API …

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun’s Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered and reported …

New SideWalk Backdoor Targets U.S.-based Computer Retail Business

Blog WriterThe Hacker News - Original news source is thehackernews.com

A computer retail company based in the U.S. was the target of a previously undiscovered implant called SideWalk as part of a recent campaign undertaken by a Chinese advanced persistent threat group primarily known for singling out entities in East …

Modified Version of WhatsApp for Android Spotted Installing Triada Trojan

Blog WriterThe Hacker News - Original news source is thehackernews.com

A modified version of the WhatsApp messaging app for Android has been trojanized to intercept text messages, serve malicious payloads, display full-screen ads, and sign up device owners for unwanted premium subscriptions without their knowledge. “The Trojan Triada snuck into …

Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group

Blog WriterThe Hacker News - Original news source is thehackernews.com

A previously undisclosed “zero-click” exploit in Apple’s iMessage was abused by Israeli surveillance vendor NSO Group to circumvent iOS security protections and target nine Bahraini activists. “The hacked activists included three members of Waad (a secular Bahraini political society), three …